Privacy

No cookies for shoppers, and no tracking

Browsing and buying set no cookies. There is no analytics, no advertising pixel, no tracking script and no cookie banner, because there is nothing to consent to. We do not know who you are, where you came from, or which pages you looked at.

The one cookie this site can set is for the shop's own staff: signing in to the private stock page stores a sign-in cookie, sent only to that page. It is strictly necessary for that sign-in, and no customer ever receives it.

This is not a promise about the future — it is a statement about what the site is made of today, and it was checked against the code rather than assumed.

How we knowVerified by searching the whole of src/ for cookie, analytics, gtag, googletagmanager, plausible and fbq. The only cookie is the staff sign-in in src/lib/stock-auth.ts, set on the /stock path alone.

The fonts do not phone home

The typefaces are served from this website itself. Your browser never asks Google for them, so no request carrying your address goes anywhere else when a page loads.

How we knowRead from src/app/layout.tsx — the fonts are loaded through next/font, which downloads and self-hosts them when the site is built.

The map, and the one thing that does load from elsewhere

The map of the shop is Google's, and Google may set its own cookies. It loads only as the part of the page that shows where the shop is comes into view; nothing reaches Google before that. The shop's address is always written out beside it, so you do not need the map to find us.

Everything else on the page works whether the map loads or not.

How we knowRead from src/components/VisitMap.tsx — the Google embed's address is set only once the map is within about 600px of the screen, on every screen size (2026-09-29; until then a computer waited for a click).

Your bag stays in your browser

What you put in your bag is saved on your own device and is not sent to us. Clear your browser data and it is gone; use a different phone and it was never there.

It only leaves your device when you press Secure checkout, and then as the list of pieces and sizes together with the delivery details you have just typed, so the order can be priced and posted.

Those delivery details are not saved on your device. If you close the page without buying, they are gone.

How we knowRead from src/lib/useCart.tsx and src/components/Bag.tsx — the bag is stored in the browser's localStorage under one key; the delivery details are held in the page only until it closes.

If you use the contact form

Your name, your email address and your message are emailed to the shop so somebody can reply. That is all that is sent, and nothing is saved on this website.

Your IP address is used for one thing: counting how many messages have come from one place in the last ten minutes, so a script cannot flood the shop's inbox. It is held in the server's memory for those ten minutes, is never written down, and is never included in the email.

How we knowRead from src/app/api/contact/route.ts — the emailed text is name, address and message only; the IP is a key in an in-memory map with a ten-minute window.

If you buy something

To post your order we ask for your name, email address, delivery address and postcode. They are stored on this website with your order so the shop knows what to send and where, and so there is a record of what you bought.

You can also give a phone number. It is optional, stored with your order, and used only to ring you if there is a problem with it — never for marketing.

Your card details are different: they are typed on SumUp's own payment page and never reach this website at all.

Your email address is used to send you a confirmation of the order, and to reply if the shop needs to contact you about it. It is not added to a mailing list — there is no mailing list.

How we knowRead from src/app/api/checkout/route.ts and src/lib/orders.ts — the request carries the pieces plus name, email, address, postcode and an optional phone number, which are written to the orders table. No card detail is sent to or stored by this site.

The companies involved

Vercel hosts the website and keeps ordinary server logs. Neon stores the shop's database, which is where your order and delivery address are kept. SumUp takes the payment and holds whatever a payment needs. Resend delivers email — your order confirmation, and messages from the contact form. Each has its own privacy notice.

Nobody else receives anything. Your details are not sold, shared for advertising, or passed to a mailing list — there is no mailing list.

How we knowRead from the project's dependencies and route handlers: Vercel, Neon (@neondatabase/serverless), SumUp and Resend. No other third party is contacted by this site.

How long the shop keeps things

Messages sent through the contact form are kept for six months.

Orders — what was bought, who by, and where it was sent — are kept for six years, because that is how long a business has to be able to show its records to HMRC.

Who to ask, and how

B Boutique Cleethorpes, a sole trader business at 18 Sea View Street, Cleethorpes, DN35 8EZ, is responsible for the information on this page.

Email bboutiquecleethorpes@gmail.com. It reaches the shop directly.

What you can ask us to do

You can ask what information we hold about you, ask us to correct it, ask us to delete it, or object to us using it. Ask, and we will answer within one month. There is no charge.

If you are not happy with how we have handled it, you can complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk. You can go to them directly and you do not have to come to us first.

Your legal rightUK GDPR — the rights of access, rectification, erasure and objection, the one-month response period, and the right to lodge a complaint with the supervisory authority.