At Cups, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and look after your personal information when you visit our boutique in Crieff, use our website, or book a fitting consultation with us.

​

1. Who We Are

​

Cups is an independent lingerie boutique and fitting specialist located in Crieff, Scotland.

• Business Name: Cups

• Address: 5 West High Street, Crieff, PH7 4AU, Scotland

​

If you have any questions about this policy or how we handle your personal data, please contact Clare using the details above.

​

2. The Information We Collect About You

​

Depending on how you interact with Cups, we may collect and process the following types of personal information:

• Identity & Contact Data: Your name, email address, phone number, and physical address (if requesting a home visit).

• Fitting & Consultation Data: Information you share regarding fitting preferences, sizing, or specialist requirements (such as post-surgery, maternity, or accessibility needs) to help us provide a tailored fitting experience.

• Communication Data: Any messages, feedback, or enquiries you send us via our website contact forms, email, or telephone.

• Technical & Website Usage Data: Information automatically collected when you browse our website, such as your IP address, browser type, device information, and how you interact with our web pages (collected via basic cookies).

 

A note on sensitive information: Details related to post-surgery fittings, pregnancy, or medical adjustments are classified as health data. We only process this information with your explicit consent during your fitting consultation to ensure we find the most comfortable and supportive options for you.

​

3. How We Use Your Personal Data

​

We only use your personal data when the law allows us to. Most commonly, we use your information to:

​

• Manage Appointments & Enquiries: Schedule, confirm, or manage your fitting consultations and answer your questions.

• Deliver Personalised Service: Provide tailored, low-touch bra fitting advice based on your preferences and requirements.

• Provide Home Visits: Process address details if arranging home fitting consultations within the local Crieff area.

• Run Our Business: Maintain basic accounting records, administer our business, and keep our website secure.

​

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

​

4. Legal Basis for Processing Your Data

​

Under UK GDPR, we rely on the following lawful bases to collect and process your data:

​

• Consent: When you voluntarily fill out a contact form, request a fitting appointment, or share fitting details with us.

• Contractual Necessity: To fulfill a service you have requested from us (such as completing an order or appointment).

• Legal Obligation: Where keeping records is required by law (e.g., tax and business record-keeping).

• Legitimate Interests: To improve our services, maintain boutique security, and manage our business effectively.

​​

5. Sharing Your Data

​

We treat all customer interactions with strict discretion. We will only share your personal information when necessary to run our business, such as with:

​

• Service Providers: Trusted third-party digital platforms that enable our website, booking calendars, email systems, and secure web hosting.

• Professional Advisors / Authorities: Legal or financial advisors, or public authorities if legally required to do so.

​

All third-party providers are required to respect the security of your data and treat it in accordance with UK data protection laws.

​

6. Data Security & Retention

​

• Confidentiality: Every fitting is a private consultation, and any information shared is treated with complete privacy.

• Storage: We use appropriate technical and security measures to protect your personal data from unauthorized access, loss, or disclosure.

• Retention: We only keep your personal information for as long as necessary to fulfill the purposes for which it was collected, or to satisfy legal, accounting, or regulatory requirements.

​​

7. Your Legal Rights

​

Under UK data protection laws, you have rights regarding your personal information, including the right to:

​

• Access: Request a copy of the personal data we hold about you.

• Correction: Request that we correct any incomplete or inaccurate information.

• Erasure: Request that we delete your personal data ("right to be forgotten").

• Withdraw Consent: Withdraw your consent at any time where we rely on consent to process your data.

​​

To exercise any of these rights, please contact Clare directly at [insert client email address]. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you have concerns about how your data is handled.

​

8. Cookies

​

Our website uses essential cookies to ensure basic site functionality and security. For more details on the cookies used by our web host (Wix Studio), please refer to our Cookie Notice banner on the website.

​

9. Changes to This Policy

​

We may update this Privacy Policy from time to time to reflect changes in our boutique services or legal obligations. Any updates will be published on this page with an updated "Last Updated" date.

​