Privacy policy

BODA SPORTS LTD – PRIVACY POLICY

Last updated: July 28, 2026

Boda Sports operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Boda Sports is powered by Shopify, which enables us to provide the Services to you.

 

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, BODA SPORTS LTD is the Data Controller of your personal information. BODA SPORTS LTD is formally registered with the Information Commissioner's Office (ICO).

 

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

1. PERSONAL INFORMATION WE COLLECT OR PROCESS

We may collect or process the following categories of personal data:

  • Contact details: Name, billing address, shipping address, phone number, and email address.

  • Financial information: Payment card information, transaction details, form of payment, and payment confirmations (processed securely via Shopify Payments or our designated payment gateways).

  • Account details: Username, encrypted password, security questions, and shopping preferences.

  • Transaction information: Items you view, put in your cart, add to your wishlist, purchase, return, exchange, or cancel.

  • Communications: Information you include when reaching out via customer support emails, phone calls, or contact forms.

  • Device and Usage data: IP address, unique device identifiers, browser type, network connection, and data regarding how and when you navigate the Services (collected automatically via cookies).

2. LAWFUL BASES FOR PROCESSING YOUR DATA

Under the UK GDPR, we must have a valid legal reason (lawful basis) to process your personal data. We rely on the following bases depending on the context:

  • Performance of a Contract: To process payments, fulfill, ship, and handle orders, managing returns, or settings up your user account.

  • Consent: Where you have explicitly opted in to receive promotional marketing emails or text messages, or allowed non-essential tracking cookies.

  • Legitimate Interests: To protect our website from fraud, secure our servers, optimize your shopping experience, and conduct basic internal business analytics, provided these do not override your fundamental privacy rights.

  • Legal Obligation: To comply with statutory legal requirements, such as UK corporate tax accounting laws or responding to valid law enforcement requests.

3. HOW WE DISCLOSE PERSONAL INFORMATION

We may share your personal data with third parties for legitimate operational purposes, subject to strict data processing agreements:

  • With Shopify and Core Service Providers: Third parties who perform essential operational work on our behalf (e.g., payment gateways, delivery couriers like Royal Mail or DPD, IT infrastructure management, and cloud storage).

  • With Business and Marketing Partners: To deliver personalized marketing and tailored advertising services based on your choices. Our partners process your information in accordance with their own privacy notices.

  • Legal and Business Transfers: To comply with legal obligations, enforce our legal terms, or in connection with a corporate merger, sale, or business restructuring.

4. RELATIONSHIP WITH SHOPIFY

Our store is hosted by Shopify. Shopify collects and processes personal information about your store interactions to provide and improve the platform infrastructure. Furthermore, we utilize certain Shopify enhanced features that aggregate behavioral data across multiple merchants to prevent e-commerce fraud and tailor services. In these specific circumstances, Shopify acts as an independent processor or controller. To learn more about how Shopify handles your personal information, please visit the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

5. INTERNATIONAL TRANSFERS

Boda Sports Ltd is located in the United Kingdom. Because our services are powered by Shopify, your personal data will be transferred and stored outside of the UK and the EEA (for example, to Canada and the United States). When your personal information is transferred internationally, we ensure appropriate protections are maintained by relying on legally recognized transfer mechanisms, such as the UK International Data Transfer Agreement (IDTA) or the European Commission's Standard Contractual Clauses (SCCs) alongside the UK Addendum.

6. YOUR STATUTORY RIGHTS Under UK Law

If you reside in the UK (or the EEA), you have the following legal rights regarding your personal data:

  • Right of Access (Subject Access Request): Request a copy of the personal information we hold about you.

  • Right to Erasure (Right to be Forgotten): Request that we erase your data, subject to our statutory financial retention obligations.

  • Right to Rectification: Request corrections to any inaccurate or incomplete personal data.

  • Right to Object / Restrict Processing: Ask us to stop or restrict processing your data for specific purposes (such as direct marketing or profiling).

  • Right to Data Portability: Request a structured, machine-readable copy of your data to transfer to another provider.

  • Right to Withdraw Consent: Opt-out of marketing communications at any time using the "Unsubscribe" link in our emails.

To exercise any of these statutory rights, please contact us using the details below. We do not discriminate against customers for exercising their privacy choices.

7. SECURITY AND RETENTION

No data transmission over the internet is completely secure. While we leverage Shopify's secure framework, we cannot guarantee absolute security. We retain your personal data only for as long as necessary to maintain your account, fulfill active orders, resolve disputes, or satisfy mandatory UK tax regulations (which usually require keeping basic transaction records for up to 6 years).

8. COMPLAINTS

If you have a complaint about how we handle your personal data, please contact us directly using the details below so we can resolve it. You have a legal right to lodge a formal complaint with the UK supervisory authority:

  • Information Commissioner's Office (ICO): Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF (www.ico.org.uk).

9. CONTACT DETAILS

Should you have questions about our privacy practices, or if you would like to submit a Subject Access Request to exercise your data rights, please contact us:

BODA SPORTS LTD

Email: Support@bodasports.co.uk

Postal Address: 50 Princes Street, Ipswich, Suffolk, IP1 1RJ, United Kingdom

Company Registration Number: 17297576