Privacy Policy

Privacy Policy

Last updated: 10 June 2026

Willow & Grace Boutique operates this online store and website, including all related information, content, features, tools, products and services, in order to provide you, as our customer, with a personalized shopping experience (collectively, the “Services”).

Willow & Grace Boutique is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, store, share and protect your personal information when you visit our website, use our Services, make a purchase, create an account, contact us, or otherwise interact with us.

As our main market is Ireland, this Privacy Policy is written with Irish and European Union data protection rules in mind, including the General Data Protection Regulation (“GDPR”) where applicable.

If there is any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy will apply in relation to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read this Privacy Policy and understand how we collect, use and disclose your information as described below.

Personal Information We Collect or Process

When we use the term “personal information”, we mean information that identifies you or can reasonably be linked to you or another person.

Personal information does not include information that has been collected anonymously or has been made non-identifiable so that it cannot reasonably identify you.

Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal information:

  • Contact details, including your name, address, billing address, shipping address, phone number and email address.

  • Financial information, including payment method details, payment confirmation, transaction details and other payment-related information. Payment card details may be processed by our payment providers and are not stored directly by us.

  • Account information, including your username, password, security questions, preferences and account settings.

  • Transaction information, including the items you view, place in your cart, add to your wishlist, purchase, return, exchange or cancel, as well as your previous transactions.

  • Communications with us, including information you provide when you contact us, such as when you send a customer service enquiry.

  • Device information, including information about your device, browser, network connection, IP address and other unique identifiers.

  • Usage information, including information about how you interact with the Services, such as how and when you access or use the Services.

  • Marketing and cookie information, including your communication preferences, consent choices and online activity where permitted by law.

Sources of Personal Information

We may collect personal information from the following sources:

  • Directly from you, including when you create an account, access or use the Services, make a purchase, communicate with us, or otherwise provide your personal information to us.

  • Automatically through the Services, including from your device when you use our website, products or services, and through cookies and similar technologies.

  • From our service providers, including when we use third-party providers to process payments, fulfil orders, provide analytics, operate our website, provide customer support or support marketing activities.

  • From our partners or other third parties, where permitted by law.

How We Use Your Personal Information

Depending on how you interact with us or use the Services, we may use your personal information for the following purposes:

Providing, Customizing and Improving the Services

We use your personal information to provide the Services to you, including to:

  • process your orders

  • process your payments

  • arrange delivery

  • provide order updates

  • manage returns, exchanges and refunds

  • create and manage your account

  • remember your preferences

  • provide customer support

  • allow you to post reviews, where applicable

  • improve our website, products and services

  • create a more relevant shopping experience

Marketing and Advertising

We may use your personal information for marketing and promotional purposes, including to send you marketing communications by email, SMS or other channels, where permitted by law.

We may also use your information to show you advertisements about our products or services on our website or on third-party platforms, including based on items you viewed, purchased or added to your cart.

Where required by law, we will only send marketing communications or use certain tracking technologies after receiving your consent.

You can opt out of marketing communications at any time by using the unsubscribe link in our emails or by contacting us.

Security and Fraud Prevention

We use your personal information to:

  • authenticate your account

  • provide a secure shopping and payment experience

  • detect, investigate or prevent fraud

  • protect our website and Services

  • prevent illegal, harmful or malicious activity

If you create an account, you are responsible for keeping your account login details confidential. We strongly recommend that you do not share your username, password or other access details with anyone.

Communicating With You

We use your personal information to:

  • respond to your questions

  • provide customer support

  • send order updates

  • handle complaints

  • maintain our business relationship with you

Legal and Regulatory Reasons

We use your personal information to comply with applicable laws and regulations, respond to valid legal requests, enforce our terms and policies, resolve disputes, and protect our legal rights.

Legal Bases for Processing Personal Information

Where the GDPR applies, we process your personal information based on one or more of the following legal bases:

  • Performance of a contract, for example when we process your order, payment, delivery, return or refund.

  • Legal obligation, for example when we keep records for tax, accounting or legal compliance.

  • Legitimate interests, for example to improve our Services, prevent fraud, secure our website and manage customer relationships, provided your rights do not override those interests.

  • Consent, for example for certain marketing communications or non-essential cookies where consent is required.

Cookies and Similar Technologies

We use cookies and similar technologies to operate our website, improve your shopping experience, understand website performance and support marketing activities.

Some cookies are necessary for the website to function. Other cookies, such as analytics or advertising cookies, may require your consent depending on applicable law.

Where required, you will be given the option to accept, reject or manage non-essential cookies.

You can also manage cookies through your browser settings. Please note that disabling certain cookies may affect how the website works.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes in accordance with this Privacy Policy. These circumstances may include:

  • With Shopify, service providers and other third parties who perform services on our behalf, such as IT management, payment processing, data analytics, customer support, cloud storage, order processing and shipping.

  • With payment providers, delivery partners and fulfilment partners in order to process and deliver your order.

  • With business and marketing partners to provide marketing services and show you advertisements, where permitted by law.

  • When you direct us, request us, or otherwise consent to us disclosing certain information to third parties, such as to ship products to you or through your use of social media widgets or login integrations.

  • With our affiliates or within our wider group of companies, where applicable.

  • In connection with a business transaction, such as a merger, acquisition, restructuring or bankruptcy.

  • Where required to comply with applicable legal obligations, enforce applicable Terms of Service or policies, or protect the rights, property and safety of Willow & Grace Boutique, our customers, users or third parties.

Our business and marketing partners will use your information in accordance with their own privacy notices.

Depending on where you live, you may have the right to object to or restrict certain types of data sharing, including sharing for targeted advertising purposes.

Relationship With Shopify

The Services are hosted by Shopify.

Shopify collects and processes personal information relating to your access to and use of the Services in order to provide and improve the Services.

Information that you submit through the Services may be transmitted to and shared with Shopify and with third parties that may be located in countries other than the country where you live, in order to provide and improve the Services.

In addition, to help protect, grow and improve our business, we may use Shopify features that incorporate data and information from your interactions with our store, other merchants and Shopify.

To provide these features, Shopify may use personal information collected from your interactions with our store, other merchants and Shopify.

To learn more about how Shopify uses your personal information and what rights you may have, you can review Shopify’s Consumer Privacy Policy.

You can also visit Shopify’s privacy portal at:

https://privacy.shopify.com

Third-Party Websites and Links

The Services may contain links to websites or online platforms operated by third parties.

If you follow links to websites that are not affiliated with us or controlled by us, we recommend that you review their privacy policies, cookie policies, security policies and terms of use.

We are not responsible for the privacy, security or content of third-party websites.

The inclusion of such links does not, by itself, imply any endorsement of the content, owners or operators of those platforms unless stated otherwise on the Services.

Children’s Data

The Services are not intended for use by children, and we do not knowingly collect personal information from children under the age of majority in their jurisdiction.

If you are the parent or guardian of a child who has provided us with personal information, you may contact us using the contact details below to request deletion of that information.

As of the effective date of this Privacy Policy, we do not knowingly sell or share personal information of individuals under the age of 16, as those terms are defined under applicable law.

Security and Retention of Your Information

We take reasonable steps to protect your personal information.

However, no security measure is perfect or guaranteed, and we cannot promise perfect security.

Any information sent over the internet may not be completely secure during transmission. We recommend that you do not use insecure channels to send sensitive or confidential information.

We keep your personal information only for as long as necessary for the purposes described in this Privacy Policy, including to:

  • provide the Services

  • manage your account

  • process orders, returns and refunds

  • comply with legal, tax and accounting obligations

  • resolve disputes

  • enforce our agreements and policies

  • protect our legal rights

Your Rights and Choices

Depending on where you live, including if you are located in Ireland or the European Union, you may have some or all of the following rights in relation to your personal information:

Right of Access

You may have the right to request access to the personal information we hold about you.

Right to Rectification

You may have the right to request that we correct inaccurate or incomplete personal information.

Right to Erasure

You may have the right to request that we delete your personal information in certain circumstances.

Right to Restriction of Processing

You may have the right to request that we restrict how we process your personal information in certain circumstances.

Right to Data Portability

You may have the right to receive a copy of certain personal information in a structured, commonly used and machine-readable format, and to request that it be transferred to another controller where technically feasible.

Right to Object

You may have the right to object to certain types of processing, including processing based on legitimate interests or direct marketing.

Right to Withdraw Consent

Where we process your personal information based on consent, you may withdraw your consent at any time.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Managing Communication Preferences

We may send you promotional emails where permitted by law.

You can opt out of receiving promotional emails at any time by using the unsubscribe link included in our emails or by contacting us.

If you opt out, we may still send you non-promotional emails, such as emails relating to your account, orders, delivery, returns or customer service requests.

How to Exercise Your Rights

You may exercise your rights by contacting us at:

support@willowgrace-boutique.com

We may need to verify your identity before processing your request, as permitted or required by applicable law.

We will respond to your request within the time period required by applicable law.

We will not discriminate against you for exercising your privacy rights.

Complaints

If you wish to make a complaint about how we process your personal information, please contact us first using the contact details below.

If you are located in Ireland and are not satisfied with our response, you may have the right to lodge a complaint with the Irish Data Protection Commission.

The Irish Data Protection Commission is the Irish supervisory authority for data protection matters.

International Transfers

Please note that we may transfer, store and process your personal information outside the country where you live, including outside Ireland and the European Economic Area.

If we transfer your personal information outside the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms where required, such as the European Commission’s Standard Contractual Clauses or any equivalent mechanism recognized by applicable law, unless the transfer is made to a country that has been recognized as providing an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for operational, legal or regulatory reasons.

We will post the revised Privacy Policy on this website, update the “Last updated” date and provide notice where required by applicable law.

Contact

If you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of your rights, you can contact us by email at:

support@willowgrace-boutique.com

You can also contact us by post at:

Willow & Grace Boutique
Ten Busschekamp 5
8014 ED Zwolle
The Netherlands