Last updated: 1 December 2025

1. Introduction

   1.1 Welcome to the Bootifullyou (bootifullyou.co.uk) and #Bootsie Privacy Policy.

2. 1.2 We are committed to protecting your personal data and respecting your privacy in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

3. 1.3 This Privacy Policy explains what personal data we collect, how we use it, how we share it, how long we keep it, and your rights.

4. 1.4 Bootifullyou is owned and operated by Lewis Bacon and Andrea Faulkner (sole traders). We are the data controller for personal data collected through our Website and our direct communications.

5. 1.5 If you have questions about this policy or how we handle your data, contact us at information@bootifullyou.co.uk

1.6 In this policy, personal data means information relating to an identified or identifiable person, such as a name, email address, or IP address.

2. The Personal Data We Collect

   2.1 We may collect and process the following categories of personal data:

3. 2.2 Identity and contact information. This includes your name and email address when you subscribe to updates or contact us.

2.3 Social media identifiers. This includes your social media username/handle (for example, your Instagram or Facebook name) if you tag us, message us, or interact with us on those platforms.

2.4 User-generated content. This includes photos, videos, captions, comments, and other content you submit to us directly (for example by email or contact form) and/or content you publish on social media that you tag for Bootifullyou’s attention, including public posts using #Bootsie and/or #Bootifullyou and/or tagging @walkwithbootsie. This may include personal data depending on what you choose to share.

2.5 Communication data. If you contact us (by email, website form, or direct message), we collect the information you provide, including the content of your correspondence.

2.6 Technical data. When you use our Website, we may automatically collect technical information such as IP address, browser type, device information, and browsing actions. We also collect data through cookies and similar technologies (see Section 6).

2.7 Special category data. We do not intentionally collect special category data (such as detailed medical or health information). Because Bootifullyou relates to wellbeing, you may choose to share sensitive information in a message or post. If you do, you are choosing to make that information available. We encourage you not to share sensitive personal details publicly.

3. How We Use Your Personal Data

   3.1 We use personal data only where necessary and lawful, including for the following purposes:

3.2 Mailing list updates and product news. To send you gentle updates and news about Bootifullyou and #Bootsie, including announcements when tags/bling or other items become available, where you have subscribed.

3.3 Community engagement and content sharing. To support the community spirit, we may view, feature, or repost #Bootsie content that you have made public and tagged for Bootifullyou’s attention (for example, by using #Bootsie or tagging @walkwithbootsie). We may also feature content you submit directly to us (for example, by email or contact form), where it is reasonable to understand that you are giving permission for us to share it. We aim to credit creators where reasonably possible. If you want content removed from places we control, you can ask us (see Section 10).

3.4 Responding to messages. To respond to enquiries, comments, or requests you send us.

3.5 Website analytics and improvement. To understand how people use our Website and improve content and user experience. We use Google Analytics, but we only run analytics cookies where you have consented through our cookie banner settings (see Section 6).

3.6 Website security and operations. To monitor, maintain, and protect our Website and community spaces, prevent misuse, reduce spam and abuse, and troubleshoot technical issues.

3.7 Marketing and social media advertising. If we run social media ads in the future, we may use marketing tools provided by social platforms. Where required by law, we will only do this in line with your preferences and with appropriate consent. We do not sell your personal data.

3.8 No automated decision-making. We do not use personal data for automated decision-making that produces legal or similarly significant effects.

4. Lawful Bases for Processing

   4.1 UK GDPR requires a lawful basis for processing. Depending on the activity, our lawful bases may include:

4.2 Consent. For example:

a) sending email updates where you have chosen to subscribe

b) placing and reading non-essential cookies such as analytics cookies, where required

c) where we rely on consent for featuring particular content, you can withdraw consent by contacting us and requesting removal.

4.3 Legitimate interests. We may process personal data where it is necessary for our legitimate interests, provided your rights do not override those interests. Examples can include:

a) responding to your messages

b) keeping our Website secure and functioning

c) understanding general Website usage to improve content (where this does not rely on cookies that require consent).

4.4 Contract (future). If we start selling physical products, we will process data needed to fulfil orders and provide customer service as part of the contract with you.

4.5 Legal obligations. We may process personal data where required by law (for example, responding to lawful requests from authorities, or maintaining records required for tax/accounting once trading expands).

5. How We Share Personal Data

   5.1 We do not sell or rent your personal data to third parties.

5.2 We may share personal data with trusted third parties who help us operate Bootifullyou, where necessary and subject to appropriate safeguards, including:

5.3 Email marketing provider. We use Systeme.io to manage our mailing list and send updates. When you subscribe, your name and email address are processed and stored within that system.

5.4 Analytics provider. If you consent to analytics cookies, Google Analytics processes certain technical and usage data to provide aggregated reports about Website activity.

5.5 Website hosting and technical providers. Our hosting provider and technical tools may process technical data as part of providing the Website, ensuring security, and maintaining performance.

5.6 Social platforms. If you interact with us on Instagram or Facebook, those platforms process your data under their own terms and policies. If we feature or repost public content that you have already made public (for example, a #Bootsie post), this may display your username/handle to others.

5.7 Legal and safety reasons. We may disclose data if required by law, court order, or where we reasonably believe it is necessary to protect rights, safety, or prevent misuse.

6. Cookies and Tracking Technologies

   6.1 Our Website uses cookies and similar technologies for essential website operation and, if you consent, for analytics.

6.2 Some cookies are essential for the Website to work properly (for example, security and remembering your cookie preferences).

6.3 We use Google Analytics to understand Website usage. Analytics cookies will only operate if you opt in via our cookie banner.

6.4 Cookie consent tool. We use Cookiebot to manage cookie consent choices.

6.5 Managing cookies. You can change your cookie preferences at any time using the Cookie Settings link in the footer of the Website. You can also manage cookies through your browser settings (for example, blocking cookies or deleting stored cookies). If you block or delete cookies, parts of the Website may not function as intended.

6.6 For more detail, please read our Cookie Policy.

7. International Data Transfers

   7.1 Some service providers may process data outside the UK. For example, Google may process analytics data on servers located outside the UK.

7.2 Where personal data is transferred outside the UK, we take steps to ensure appropriate safeguards are in place as required by applicable data protection law.

8. Data Security

   8.1 We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure.

8.2 We use security measures such as access controls and HTTPS encryption on the Website, and we use reputable providers for core services.

8.3 No online system can be guaranteed 100% secure. If a data breach occurs that creates a risk to your rights and freedoms, we will notify affected individuals and/or the relevant regulator where required by law.

9. Data Retention

   9.1 We keep personal data only as long as necessary for the purposes described in this policy.

9.2 Mailing list. We keep your subscription details while you remain subscribed. You can unsubscribe at any time using the unsubscribe link in emails. We may retain a minimal record to ensure we respect your opt-out.

9.3 Enquiries and messages. We keep correspondence for as long as needed to deal with your request and maintain a reasonable record, typically for a limited period unless there is a legal or operational reason to retain longer.

9.4 Analytics. Analytics retention depends on our Google Analytics settings and the data retention period configured there.

9.5 Featured content removal. If you ask us to remove content from places we control, we will make reasonable efforts to do so. We cannot guarantee removal from third-party accounts or re-shares by other users.

10. Your Rights

    10.1 Under UK GDPR, you have rights including:

    a) the right to access your personal data

    b) the right to correct inaccurate data

    c) the right to request deletion in certain circumstances

    d) the right to restrict processing in certain circumstances

    e) the right to object to processing in certain circumstances, including an absolute right to object to direct marketing

    f) the right to withdraw consent where processing is based on consent

    g) the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

10.2 To exercise your rights, contact us at information@bootifullyou.co.uk We may need to verify your identity before fulfilling certain requests.

10.3 We aim to respond within one month. In some cases, this may be extended where legally permitted (for example, if a request is complex), and we will tell you if that applies.

10.4 If you are unhappy with how we handle your personal data, you can complain to the ICO. We would appreciate the opportunity to address concerns first, so please contact us in the first instance.

11. Children’s Privacy

    11.1 The Website is intended for users aged 13 and over.

11.2 If you are 13 or under, you must have permission and supervision from your parent, guardian, or caregiver before providing any personal information to us (for example, subscribing by email or submitting content).

11.3 We do not knowingly collect personal data from children under 13 without appropriate consent. If you believe a child under 13 has provided personal data without appropriate consent, please contact us at information@bootifullyou.co.uk so we can address it.

12. Third-Party Links and Embedded Content

    12.1 Our Website and communications may include links to third-party websites or embedded content (for example, an Instagram feed). We are not responsible for the privacy practices of third-party sites or platforms.

12.2 If you click third-party links or interact with embedded content, the third party’s privacy policy and terms apply.

13. Changes to This Privacy Policy

    13.1 We may update this Privacy Policy from time to time for operational, legal, or regulatory reasons.

13.2 The Last updated date at the top shows when it was last changed. If changes are significant, we may also post a notice on the Website or notify subscribers by email.

14. Contact Us

    14.1 Email: information@bootifullyou.co.uk