Privacy policy

Last updated October 5, 2026

Who we are

Dima Boutique is operated by Zobaidi LTD, a company registered in England and Wales (company no. 14607399), registered office 24, 26 Arcadia Avenue Fin009, London, United Kingdom, N3 2JU. Zobaidi LTD is the data controller for your personal data under UK GDPR. Contact us at info@dimaboutique.com.

What we collect

• Contact and delivery details: name, email, phone, shipping and billing address.
• Order details: what you bought, when, and how much you paid.
• Payment details, which are processed by our payment providers. We never see or store your full card number.
• Device and browsing data collected by cookies: IP address, browser, and pages viewed.
• Messages you send us.

How we use it, and our lawful basis

• To process and deliver your order, and to handle returns: performance of a contract.
• To answer your messages: performance of a contract, or our legitimate interest in helping you.
• To prevent fraud and keep the store secure: legitimate interests.
• To send marketing emails, only if you sign up: consent. You can unsubscribe in any email.
• To keep tax and accounting records: legal obligation.

Who we share it with

Only with the services that run the store for us: Shopify (store platform), our payment providers, our fulfillment partner and carriers (to ship your order), our email provider, and Google (analytics and advertising measurement). Each uses your data only to provide its service.

Advertising and your choices

We use Google cookies to measure and improve our ads. Under some US state laws, this can count as "sharing" personal information or "targeted advertising." You can opt out at any time by emailing info@dimaboutique.com with the subject "Opt out."

You can also use our Your privacy choices page.

International transfers

Your data may be processed in the United Kingdom, the United States, Canada, and China, where our partners operate. Where UK law requires it, transfers are protected by approved safeguards such as the UK International Data Transfer Agreement or standard contractual clauses.

How long we keep it

Order and payment records for 6 years, as UK tax law requires. Marketing data until you unsubscribe. Customer service messages for up to 2 years.

Your rights under UK GDPR

You can ask to access, correct, or delete your data, restrict or object to how we use it, receive it in a portable format, and withdraw consent at any time. Email us to make a request. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

Your rights as a US resident

If you live in California, Colorado, Connecticut, Virginia, Texas, or another state with a consumer privacy law, you can ask to know what personal information we hold, correct it, delete it, and opt out of sale, sharing, or targeted advertising. Email us to make a request. We verify your identity and reply within 45 days. You can use an authorized agent, and we will never treat you differently for using these rights.

Children

Our store is not intended for children under 16, and we do not knowingly collect their data.

Cookies

We use essential cookies to run the store, and analytics and advertising cookies to understand how it is used. You can block or delete cookies in your browser settings.

Changes to this policy

If we change this policy, we update the date at the top of this page.