Declaration on the Collection of Personal Data

This Personal Data Collection Statement (“PICS”) explains, in accordance with the Personal Data Protection (Privacy) Regulations:

• The purposes for which your personal data will be used once collected in connection with your use of this website (“Website”) or the purchase of products (“Products”);

• The parties to whom your personal data may be disclosed; and

• How you may request access to, or correction of, your personal data.

We may update this PICS from time to time. Please check this page regularly for any changes.

1. Data User

“We”, “us” or “our” refers to the data user (the operator of this Website), Brenda & Andrew Boutique.

2. Data Subjects

This PICS applies to personal data collected from:

• Visitors: individuals who browse our Website;

• Users: individuals who purchase, request, or receive Products;

• Contacts: individuals who contact us via the Website, email, or other means.

3. Data We Collect

We may collect, store, process, transfer, and use the following types of personal data:

From Visitors: IP address or unique device identifiers*

From Users:

• Username

• Account password

• Full name*

• Email address*

• Billing address*

• Delivery address*

• Payment information*

• Telephone number

From Contacts:

• Full name*

• Email address*

• Any personal data you choose to provide

(* Mandatory information – if you do not provide this, we may not be able to give you access to the Website, deliver Products, or respond to your communications.)

4. Purpose and Use

We use your personal data for purposes including but not limited to:

• Providing Products and fulfilling orders (including account creation, order processing, billing, and delivery)

• Analysing Website usage and compiling statistics

• Personalising your Website experience

• Improving our Website and Products

• Research, development, and product testing (including machine learning)

• Customer support and responding to enquiries

• Non-marketing communications such as order confirmations and dispatch updates

• Security, fraud prevention, and compliance with legal obligations

• Direct marketing (only with your explicit consent — see Section 9 below)

Your personal data will not be used for other purposes unless you have consented, the purpose is directly related, or permitted by law.

5. Data Disclosure

We may share your personal data with:

• Our employees, officers, and subsidiaries

• IT and e-commerce providers (e.g., Shopify Inc.)

• Payment processors (e.g., PayPal Holdings Inc.)

• Product suppliers and logistics providers

• Administrative, IT, cloud, and data analytics service providers

• Insurers, bankers, and professional advisors

• Government agencies, regulators, or law enforcement when legally required

• Other parties during corporate transactions (e.g., merger, sale, reorganisation)

If you use a third-party payment processor, your data will also be subject to their privacy policy.

We ensure confidentiality by including protective clauses in contracts with third parties.

6. Cookies

Our [Cookie Policy] forms part of this Privacy Policy. We use cookies to:

• Ensure the Website functions correctly

• Remember your preferences and login details

• Analyse browsing behaviour to optimise the Website

• Track interests to provide tailored content and products

You can refuse or withdraw consent for cookies at any time in your browser settings. Note that some Website functions may not work properly without them.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or longer if required by legal or contractual obligations. After this period, your data will be securely deleted.

8. Access and Correction

You have the right to:

• Request a copy of your personal data held by us (subject to exemptions under the PDPO)

• Request corrections to inaccurate personal data

We may charge a reasonable fee for processing access or correction requests. To exercise these rights, please contact us at support@brenda-andrew.com.

9. Direct Marketing

We may use your personal data for direct marketing only with your explicit consent. This may include:

• Information and promotions about our Products

• Discounts and special offers

• Updates about our Website or Products

• Festive greetings

You may opt in or out of these communications at any time by emailing us at support@brenda-andrew.com or replying “unsubscribe” to our messages.

---