Privacy Policy

Lenie Boya Ltd is committed to protecting and respecting your privacy.
This Privacy Policy explains the basis on which any personal data we collect from you, or that you provide to us, will be processed.
Please read this information carefully to understand how we handle your data and the rights you have under English law.

The website www.lenieboya.com is operated by Lenie Boya Ltd (“we”, “us”, “our”), a company registered in England & Wales under company number 10957397.
Registered office: 11 Vicarage Close, Oxford, OX4 4PL, United Kingdom.

For all privacy-related enquiries, please contact us at lenie@lenieboya.com.


What Personal Data We Collect

We may collect and process the following types of personal information:

  • Name, surname, title, username or similar identifier, nationality, date of birth, gender and other identifying data
  • Email address, billing and delivery addresses, telephone number, and social-media handles
  • Details of purchases and transactions
  • Website login activity, browsing history and products viewed or added to basket
  • Communications you send to us
  • Information voluntarily provided in surveys or research forms
  • Technical data such as IP address, browser type, location, operating system and platform
  • Shopping preferences, size and style choices, purchase history, and marketing-communication preferences

When We Collect Personal Data

We collect data when you:

  • Create an account or place an order on our website
  • Subscribe to the Lenie Boya newsletter
  • Contact our customer-service team
  • Take part in surveys, competitions or events
  • Interact with us through social media or online advertising
  • Visit our website and accept cookies or similar technologies (see our Cookies Policy)

How We Use Your Personal Data

We process your personal data only where permitted by law.
We rely on the following legal bases:

  • Contract performance – to process and deliver your orders, payments and customer support.
  • Legal obligation – to comply with financial, fraud-prevention and tax requirements.
  • Legitimate interest – to improve our products, services and website experience.
  • Consent – for marketing communications and optional profiling activities.

Typical uses include:

  • Registering you as a customer and managing your account
  • Processing and fulfilling orders and communicating order updates
  • Providing personalised recommendations and styling advice
  • Conducting data analytics, research and service improvements
  • Responding to enquiries and customer-service requests
  • Sending newsletters, offers and event invitations (only with your consent)

Marketing and Profiling

We will only send you marketing communications with your explicit consent.
You can opt out at any time by using the unsubscribe link in our emails or by contacting lenie@lenieboya.com.

Where you have agreed to profiling, we may analyse your browsing and purchase history to offer relevant product recommendations and personalised content.


Sharing Your Data

We may share your personal data with:

  • Service providers who support our business (IT, payment processing, logistics, couriers, and marketing agencies)
  • Payment-processing partners for verification, fraud prevention and anti-money-laundering checks
  • Regulators or legal authorities when required by law
  • Successors in the event of a business sale or merger

We will never sell your personal data.


International Transfers

Your data may be transferred outside the United Kingdom or the EEA.
Where this occurs, we ensure appropriate safeguards, such as Standard Contractual Clauses or other legally approved mechanisms, to maintain equivalent data-protection standards.


Data Security

We use administrative, technical and physical security measures to protect your personal data from unauthorised access, loss or alteration.
All transactions on our website are protected by SSL encryption.
However, no online transmission is completely secure; please keep your login credentials confidential.


Data Retention

We retain your personal data only as long as necessary:

  • For contractual and legal obligations — up to 10 years after your last transaction.
  • For marketing and profiling — up to 7 years from your last interaction (purchase, newsletter click or account update).
    After this period, your data will be deleted or anonymised.

Your Rights

Under the UK GDPR, you have the right to:

  • Access and receive a copy of your personal data
  • Request correction or deletion of inaccurate data
  • Restrict or object to certain processing activities
  • Withdraw consent for marketing at any time
  • Request data portability in applicable cases
  • Lodge a complaint with the Information Commissioner’s Office (ICO) via www.ico.org.uk

To exercise any of these rights, please contact us at lenie@lenieboya.com.
For security reasons, we may ask for proof of identity before processing your request.


Our website may include links to third-party websites, plug-ins or applications.
We are not responsible for their privacy practices.
We recommend reading the privacy policy of any external site you visit.


Changes to This Policy

We review this Privacy Policy periodically and may update it from time to time.
Any significant changes will be posted on this page with an updated “last revised” date.
Please check back regularly to stay informed about how we protect your information.

Last updated: 18 November 2025