Effective date: October 2025
Last updated: October 2025
This Privacy & Data Protection Policy explains how The Booja Booja Company Ltd (“we”, “us”, “our”) collects, uses, and protects your personal information when you visit www.boojabooja.com, make a purchase, contact us, or interact with our marketing and social media channels.
By using our website or providing your details to us, you confirm that you are over 13 years of age and accept this policy.
1. Who We Are
The Booja-Booja Company Ltd
Registered office: Little Melton Food Park, Norfolk, NR9 3NP, United Kingdom
Email: IT@boojabooja.com
Data Controller: Rick Greer
2. What Information We Collect
We may collect and process the following types of personal data:
- Identity & Contact Data: name, address, email address, phone number.
- Transaction Data: details about purchases, payments, and delivery.
- Communication Data: emails, contact form messages, social media messages or posts.
- Technical Data: IP address, browser type, time zone, device details, and browsing behaviour (via cookies and analytics).
- Marketing Data: preferences for receiving marketing emails or other communications.
We do not collect any sensitive data (e.g. health, race, political or religious beliefs).
3. How We Collect Data
We collect personal data in the following ways:
- When you purchase from our online store hosted by Shopify.
- When you pay through PayPal or other payment gateways.
- When you subscribe to our newsletter via Brevo/PushOwl or Shopify forms.
- When you contact us via email, contact form, or social media.
- Automatically, through cookies and analytics tools when you use our website.
4. How We Use Your Information
We use your data for the following purposes and lawful bases:
Purpose |
Lawful Basis |
Processing and fulfilling orders |
Contract |
Communicating with you about orders, deliveries or support |
Legitimate Interest |
Managing our website, improving user experience, analytics |
Legitimate Interest |
Sending newsletters and promotions (only if you opt in) |
Consent |
Maintaining tax, legal, and business records |
Legal Obligation |
We may also show you relevant Booja Booja content or offers through social media or online advertising platforms (Facebook, Instagram, Google Ads), based on your consent or legitimate interests.
5. Sharing Your Data
We only share data with trusted service providers who help us run our business:
- Shopify – website hosting, order processing, analytics.
- PayPal – secure payment processing.
- Royal Mail – order delivery and tracking.
- PushOwl – email/newsletter sign-up management.
- Professional advisers (accountants, IT providers) and government authorities when legally required.
Each provider only processes your data under our instructions and in line with UK GDPR.
6. Cookies
Our website uses cookies and similar technologies provided by Shopify and analytics tools to enhance user experience and understand website traffic.
You can manage your cookie preferences using your browser settings or Shopify’s built-in cookie banner. Please note that disabling cookies may affect how our site functions.
For more information, see Shopify’s Cookie Policy.
7. Marketing & Communication Preferences
You will only receive marketing emails if you have opted in.
You can unsubscribe at any time by clicking the link in our emails or contacting us at IT@boojabooja.com.
Unsubscribing stops marketing communications but does not affect transactional messages (such as order confirmations).
8. Data Retention
We keep your data only as long as necessary for the purpose collected:
- Customer and transaction data: up to 7 years (for legal and accounting purposes).
- Newsletter sign-up data: until you unsubscribe, after which it is deleted within 90 days.
- Competition or survey entries: deleted within 90 days after the promotion closes, except for winners (retained up to 36 months).
9. Your Data Protection Rights
Under the UK GDPR, you have the right to:
- Access the personal data we hold about you.
- Request correction or deletion of your data (“right to be forgotten”).
- Object to processing or request restriction of processing.
- Request data portability.
- Withdraw consent at any time (for marketing or other consent-based processing).
You can make these requests by emailing IT@boojabooja.com.
We will respond within 30 days.
If you are unhappy with our handling of your data, you can contact the Information Commissioner’s Office (ICO) at www.ico.org.uk, though we’d appreciate the chance to resolve it with you first.
10. Data Access & Deletion Tools
You may also use the self-service GDPR tools provided on our website to:
- Access your data
- Download your data (portability)
- Edit or update your account information
- Request deletion of your personal data
These tools are provided through Shopify and are available under your customer account area.
11. Data Security
We have security measures in place to protect your personal data from loss, misuse, or unauthorised access.
Access is restricted to authorised Booja Booja staff and trusted service providers only.
If a data breach occurs that may affect your rights, we will notify you and the ICO where legally required.
12. Changes to This Policy
We may update this Privacy & Data Protection Policy periodically.
Any changes will appear on this page with a new “last updated” date.
Please check this page occasionally to stay informed.
Contact us
For any questions about this policy or your data, please contact:
Rick Greer
The Booja-Booja Company Ltd
Little Melton Food Park, Norfolk, NR9 3NP
Email: IT@boojabooja.com