1. Introduction

Boult Audio Limited ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you visit our website or purchase our products, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We are the data controller for personal data collected through our website. Our contact details are: care@goboult.co.uk

2. Personal Data We Collect

2.1 Data You Provide Directly

• Identity data: full name, username or similar identifier;
• Contact data: email address, billing and delivery addresses, telephone number;
• Transaction data: details of products purchased and payment information (we do not store full card details);
• Account data: password (hashed), preferences, and purchase history;
• Communication data: messages sent via our contact forms or email.

2.2 Data Collected Automatically

• Technical data: IP address, browser type, operating system, device identifiers;
• Usage data: pages visited, time spent, links clicked, referral URLs;
• Cookie data: as described in our Cookie Policy.

3. How We Use Your Personal Data

We process your personal data for the following purposes and on the following legal bases:

• Fulfilling your order and processing payment (performance of contract — Art. 6(1)(b) UK GDPR);
• Managing your account and providing customer support (legitimate interests and contract performance);
• Sending transactional emails including order confirmations and shipping updates (contract performance);
• Sending marketing communications by email where you have opted in (consent — Art. 6(1)(a) UK GDPR);
• Improving our website and product offerings through analytics (legitimate interests — Art. 6(1)(f) UK GDPR);
• Complying with legal obligations including VAT, fraud prevention, and consumer law (legal obligation — Art. 6(1)(c) UK GDPR).

4. Marketing Communications

We will only send you marketing emails if you have opted in to receive them. You may withdraw your consent at any time by:

• Clicking the 'Unsubscribe' link in any marketing email;
• Contacting us at care@goboult.co.uk .

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5. Sharing Your Data

We do not sell your personal data. We may share your data with trusted third parties for the following purposes:

• Payment processors: to process your payment securely (e.g., Stripe, PayPal — subject to their own privacy policies);
• Delivery partners: to ship your order (e.g., Royal Mail, DPD);
• IT service providers: hosting, email, and analytics platforms;
• Legal authorities: where we are required to do so by law.

All third-party processors are required to process data only on our documented instructions and to implement appropriate security measures.

6. International Transfers

We primarily process data within the UK and European Economic Area (EEA). Where data is transferred outside the UK, we ensure appropriate safeguards are in place (such as UK adequacy decisions or International Data Transfer Agreements — IDTAs) in compliance with Chapter V of the UK GDPR.

7. Data Retention

We retain your personal data only for as long as necessary for the purposes set out in this policy, or as required by law. Specifically:

• Order and transaction records: 7 years (for tax/accounting purposes);
• Marketing opt-in records: until you withdraw consent plus 2 years;
• Technical and usage data: up to 26 months;
• Account data: for the duration of your account and up to 2 years following closure.

8. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

• Right of access: to request a copy of the data we hold about you;
• Right to rectification: to request correction of inaccurate or incomplete data;
• Right to erasure ('right to be forgotten'): in certain circumstances;
• Right to restrict processing: to request we limit how we use your data;
• Right to data portability: to receive your data in a structured, machine-readable format;
• Right to object: to processing based on legitimate interests or for direct marketing;
• Rights related to automated decision-making and profiling.

To exercise any of these rights, please contact us at care@goboult.co.uk . We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.

9. Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, or destruction. These include encryption in transit (TLS/SSL), access controls, and regular security reviews.

10. Cookies

We use cookies on our website. Please refer to our Cookie Policy for full details.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on our website or by email. The date of the latest update is shown at the top of this document.

12. Contact Us

Data Controller: Boult Audio Limited