Privacy policy
Last Updated: August 1, 2026
1. Introduction
Welcome to Bootots (“we,” “us,” or “our”).
This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit https://bootots.shop, purchase our products, subscribe to our marketing communications, or otherwise interact with our online store.
Bootots offers Christmas gifts, DIY book nook and bookend building kits, Christmas gift boxes, and related products to customers in the United States, the United Kingdom, Canada, and other markets where our products are available.
Our online store is operated using Shopify. Depending on our actual website configuration, we may use Meta, Google, and Klaviyo to support advertising, measurement, analytics, and email marketing.
We are committed to handling personal information responsibly and in accordance with applicable privacy and data protection laws.
Contact Information
- Brand name: Bootots
- Website: https://bootots.shop
- Privacy and customer support email: bootots@outlook.com
If you have questions about this Privacy Policy or wish to exercise an applicable privacy right, please contact us using the email address above.
2. Personal Information We Collect
The information we collect depends on how you interact with our website and services.
2.1 Information You Provide
We may collect information you voluntarily provide, including:
- Contact details, such as your name, email address, telephone number, and billing or shipping address.
- Order details, including order numbers, products purchased, transaction status, discounts, and purchase history.
- Customer service communications, including questions, complaints, refund requests, and return inquiries.
- Marketing preferences, including newsletter subscription status, consent records, and unsubscribe requests.
- Gift-related information, such as a recipient’s name, delivery address, or gift message, if you provide these details.
- Customization information or uploaded content, if relevant personalization features are offered on our website.
Please provide personal information about another individual only where you have an appropriate basis to do so.
2.2 Payment Information
Payments are handled through the payment methods and payment service providers available at checkout.
Depending on the payment method, we may receive transaction confirmations, payment status, billing information, and limited payment identifiers.
Payment card details may be collected and processed directly by the relevant payment provider. The information available to us depends on the payment method and integration used.
2.3 Information Collected Automatically
When you visit our website, we and certain service providers may collect information such as:
- IP address and approximate location derived from network information.
- Browser type, device type, operating system, and language settings.
- Pages visited, products viewed, searches, clicks, and interactions with website features.
- Referring pages and campaign information.
- Cookie identifiers, advertising identifiers, and online activity information.
- Session information, timestamps, and website performance data.
The collection of analytics and advertising information depends on our website configuration, applicable consent requirements, and your privacy choices.
2.4 Information from Third Parties
Where permitted by law, we may receive relevant information from Shopify, payment providers, advertising and analytics platforms, email marketing providers, shipping or fulfillment partners, and other providers involved in operating our store.
3. How We Use Personal Information
We may use personal information for the following purposes, where applicable:
- Order processing: To process orders, facilitate payments, arrange shipping, provide delivery updates, and manage returns or refunds.
- Customer support: To answer questions about our Christmas gifts, DIY book nook and bookend kits, gift boxes, delivery, and after-sales service.
- Website operations: To operate our Shopify store, maintain shopping cart and checkout functionality, troubleshoot issues, and protect our website.
- Email marketing: To send newsletters, seasonal promotions, product announcements, and other marketing communications where permitted by law and where required consent has been obtained.
- Advertising and measurement: To measure campaign performance, evaluate conversions, and improve marketing activities through Meta and Google where enabled and permitted.
- Analytics and improvement: To understand website usage, improve product presentation, and enhance the customer experience.
- Fraud prevention and security: To identify suspicious transactions and protect our customers and business.
- Legal compliance: To comply with applicable laws, maintain necessary records, and resolve disputes.
We will provide any additional notice or obtain any required consent before using personal information for a new purpose where required by law.
4. Cookies and Similar Technologies
We use, or may use depending on our website configuration, cookies, pixels, tags, and similar technologies.
These technologies may be provided by Shopify, Meta, Google, and other service providers integrated with our store.
4.1 Types of Cookies
- Strictly necessary technologies: Support shopping carts, checkout, security, and essential website functions.
- Preference technologies: Remember settings such as language or regional preferences, where enabled.
- Analytics technologies: Help us understand website traffic and performance, where enabled.
- Advertising technologies: Help measure advertising conversions, attribute purchases to campaigns, and support advertising or retargeting, where enabled and permitted.
The specific technologies, providers, and retention periods depend on our actual website configuration.
4.2 Managing Cookie Preferences
Where required by applicable law, we will obtain consent before using non-essential cookies or similar technologies.
You can manage your preferences through the cookie banner or cookie settings provided on our website, where available. Where required, you may withdraw or change your consent.
You may also manage cookies through your browser settings, although browser controls may not provide the same level of control as our website's cookie preference tools.
Rejecting non-essential cookies should not prevent access to essential shopping and checkout functions, although certain optional features may be affected.
4.3 Advertising Opt-Outs
Where applicable law provides a right to opt out of the sale or sharing of personal information or targeted advertising, you may exercise that right through the privacy controls available on our website or by contacting bootots@outlook.com.
Where required and technically supported, we will process applicable recognized opt-out preference signals in accordance with the relevant legal requirements.
5. How We Share Personal Information
We may disclose personal information to the following categories of recipients when reasonably necessary for the purposes described in this Privacy Policy.
5.1 Shopify
Shopify provides the ecommerce platform used to operate our online store. Shopify and related service providers may process customer, order, technical, and transaction information to provide platform functionality, checkout, security, and related services.
Shopify may also process information under its own privacy terms.
5.2 Meta
Where Meta advertising tools are enabled, certain website events, online identifiers, device information, or purchase-related events may be disclosed to Meta for advertising measurement, conversion attribution, audience-related functions, or other configured advertising purposes.
The information shared depends on the Meta products and integrations we use and the applicable consent and privacy settings.
Meta Privacy Policy: https://www.facebook.com/privacy/policy/
5.3 Google
Where Google advertising or analytics tools are enabled, certain website interactions, online identifiers, device information, campaign information, or conversion events may be disclosed to Google for analytics, advertising measurement, conversion attribution, or configured advertising functions.
The information shared depends on the Google products and integrations we use.
Google Privacy Policy: https://policies.google.com/privacy
5.4 Klaviyo
We use Klaviyo for email marketing and related customer communication functions.
Depending on our configuration, Klaviyo may process contact details, marketing preferences, email engagement information, order-related events, and other information necessary to operate our marketing communications.
Klaviyo Privacy Notice: https://www.klaviyo.com/legal/privacy/privacy-notice
5.5 Payment Providers
We disclose the information necessary to complete transactions, manage refunds, prevent fraud, and resolve payment disputes to the payment providers used at checkout.
5.6 Shipping and Fulfillment Providers
We may disclose your name, shipping address, contact details, and relevant order information to carriers, warehouses, fulfillment providers, and other parties necessary to deliver your purchases.
The actual recipients depend on the shipping and fulfillment arrangements used for your order.
5.7 Other Service Providers
We may use additional providers for customer support, website security, fraud prevention, technical maintenance, reviews, or other functions.
Any detailed vendor disclosures should reflect the providers actually engaged in our operations.
5.8 Legal Requirements and Business Transactions
We may disclose information when required by applicable law or valid legal process, or when reasonably necessary to protect our rights, customers, or business.
Relevant information may also be transferred in connection with a merger, acquisition, restructuring, or sale of business assets, subject to applicable legal requirements.
5.9 Advertising-Related Disclosures
Certain disclosures to advertising platforms may qualify as a “sale,” “sharing,” or processing for “targeted advertising” under applicable privacy laws, even where no money is exchanged.
Where such rules apply, we will provide the required notices and mechanisms for exercising relevant opt-out rights.
6. International Data Transfers
Bootots is operated by a China-based business serving customers in multiple countries. Personal information may be processed in China and in other countries where Shopify and our service providers operate.
Information relating to customers in the United States, the United Kingdom, or Canada may be accessible to service providers located in other jurisdictions.
The location of processing depends on the relevant service, account configuration, contractual arrangements, and operational requirements.
Where applicable law requires specific safeguards, transfer mechanisms, disclosures, or consent, we will implement the measures required for the relevant transfer.
7. Marketing Communications
7.1 Promotional Emails
Where permitted by law and where required consent or other applicable authorization has been obtained, we may send promotional emails about Christmas gifts, DIY book nook and bookend kits, gift boxes, seasonal offers, new products, and related promotions.
You can unsubscribe from marketing emails by using the unsubscribe link included in the email or by contacting bootots@outlook.com.
We will process unsubscribe requests in accordance with applicable law.
7.2 Subscription Preferences
We may retain information about your subscription status, consent source, consent date, communication preferences, and unsubscribe history to manage our marketing program and demonstrate compliance where necessary.
Our subscription forms should explain what types of communications you can expect and how to withdraw consent.
7.3 Transactional Communications
We may send communications necessary to complete or manage a transaction, such as order confirmations, shipping updates, refund notifications, and customer service responses.
Unsubscribing from promotional emails does not necessarily stop essential transactional messages.
7.4 Abandoned Cart and Automated Emails
If we use abandoned-cart reminders, browse-related emails, or other automated marketing flows through Klaviyo, those communications will be configured and sent only where permitted by applicable law and consistent with relevant consent, notice, and opt-out requirements.
Providing an email address at checkout does not automatically authorize every type of promotional communication.
7.5 United Kingdom and Canada
For recipients in Canada, commercial electronic messages will be managed in accordance with applicable Canadian anti-spam requirements, including consent, sender identification, and unsubscribe requirements.
For recipients in the United Kingdom, electronic marketing will be managed in accordance with applicable data protection and electronic privacy rules.
8. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, subject to applicable legal requirements.
Retention periods may differ by category:
- Order and transaction records: Retained as necessary for order fulfillment, accounting, tax, legal obligations, and dispute resolution.
- Customer service records: Retained as necessary to resolve inquiries, returns, complaints, and related issues.
- Marketing information: Retained while needed to manage an active subscription or marketing relationship, subject to applicable requirements and suppression-record needs.
- Analytics and advertising information: Retained according to the relevant tool settings, provider policies, and applicable requirements.
- Legal and security records: Retained as necessary for compliance, fraud prevention, and legal claims.
When personal information is no longer required, we will take reasonable steps to delete, anonymize, or securely dispose of it, subject to applicable law.
9. Data Security
We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure.
No method of electronic transmission or storage is completely secure. We therefore cannot guarantee absolute security.
Where applicable law requires notification of a personal information breach, we will follow the relevant notification and reporting requirements.
10. Your Privacy Rights
Depending on your location, the applicable law, and the circumstances of our processing, you may have rights concerning your personal information.
These rights may include:
- Requesting access to personal information we hold about you.
- Requesting correction of inaccurate personal information.
- Requesting deletion of certain personal information.
- Requesting a portable copy of certain information.
- Withdrawing consent where processing is based on consent.
- Objecting to or requesting restrictions on certain processing activities.
- Opting out of certain advertising-related disclosures or processing.
- Requesting a review or appeal of certain decisions, where applicable.
- Lodging a complaint with a relevant data protection authority.
These rights are subject to applicable legal conditions and exceptions.
10.1 How to Submit a Request
Please email bootots@outlook.com with the subject line Privacy Rights Request.
Please describe your request and provide sufficient information for us to identify the relevant records and verify your identity where necessary.
We may request additional information to verify your identity or an authorized representative's authority.
We will respond within the timeframe required by applicable law. We will not unlawfully discriminate against you for exercising a privacy right available to you.
10.2 Authorized Representatives
Where applicable law permits an authorized representative to submit a request on your behalf, we may require evidence of authorization and may take reasonable steps to verify your identity and the representative's authority.
10.3 Marketing and Cookie Choices
You may unsubscribe from promotional emails at any time.
You may also change your cookie preferences through the controls provided on our website, where available. If applicable, you may separately exercise your right to opt out of the sale or sharing of personal information or targeted advertising.
11. Additional Information for United States Residents
Privacy laws vary among US states, and their application depends on factors such as business activities, processing practices, and statutory thresholds.
Where applicable state privacy laws grant you additional rights, you may be entitled to request access to, correction of, or deletion of certain personal information, obtain a portable copy of certain information, or opt out of specified processing activities.
Depending on the applicable law, these activities may include targeted advertising, the sale of personal information, or certain profiling.
11.1 California Residents
If the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to our business, California residents may have rights including the right to know, access, correct, and delete certain personal information, as well as the right to opt out of the sale or sharing of personal information.
Where required, we will provide the relevant notice at collection and a suitable mechanism to exercise applicable rights.
If our activities constitute a sale or sharing of personal information under California law, we will provide the required opt-out mechanism or other permitted method of honoring opt-out rights.
Where applicable, we will also process recognized opt-out preference signals in accordance with California law.
To exercise your rights, email bootots@outlook.com or use the applicable privacy controls on our website.
We will provide any additional disclosures required by applicable law, including relevant categories of personal information, purposes of use, and categories of recipients.
11.2 Other US States
Residents of other states may have additional privacy rights where their state's laws apply to our business.
We will provide any required state-specific notices, opt-out mechanisms, and appeal procedures based on the laws applicable to our operations.
12. Additional Information for United Kingdom Residents
Where UK data protection law applies, we will provide the information required concerning the purposes and lawful bases of processing, recipients, international transfers, retention periods, and available individual rights.
Depending on the circumstances, you may have the right to request access to or correction of your personal data, request erasure, object to certain processing, restrict processing, or request data portability.
Where processing is based on consent, you may withdraw your consent. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
You may also have the right to complain to the UK Information Commissioner's Office (ICO).
Where legally required, we will identify our UK representative and provide the relevant contact details.
ICO website: https://ico.org.uk/
13. Additional Information for Canadian Residents
Where Canadian privacy laws apply, you may have the right to request access to personal information we hold about you and request corrections to inaccurate information, subject to applicable exceptions.
You may also withdraw consent for certain processing activities, subject to legal or contractual restrictions and reasonable notice.
Depending on the applicable law, you may be able to raise a concern with the Office of the Privacy Commissioner of Canada or the relevant provincial privacy regulator.
Office of the Privacy Commissioner of Canada: https://www.priv.gc.ca/
14. Children's Privacy
Our store is intended for general consumers and is not knowingly directed to children under 13 in the United States.
We do not knowingly collect personal information from children under 13 in circumstances where such collection would require authorization that we have not obtained.
If you believe that a child has provided personal information inappropriately, please contact bootots@outlook.com.
We will review the request and take appropriate steps as required by applicable law.
Where additional protections apply to children or young people in other jurisdictions, we will follow the applicable requirements.
15. Third-Party Websites and Services
Our website or communications may contain links to third-party websites or services.
Those third parties may maintain their own privacy policies and practices. We encourage you to review their notices before providing personal information directly to them.
This Privacy Policy does not independently govern information collected by third parties acting under their own privacy policies.
16. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our business, products, website features, service providers, or applicable legal requirements.
When we make changes, we will update the “Last Updated” date at the beginning of this Policy.
Where required by law, we will provide additional notice or obtain consent before implementing material changes to our processing practices.
We encourage you to review this page periodically.
17. Contact Us
For questions about this Privacy Policy or to submit a privacy request, please contact:
Brand: Bootots
Website: https://bootots.shop
Privacy and Customer Support Email: bootots@outlook.com