This Privacy Policy explains how DOUBLEWIKLICH LTD, operator of the BOLI website, collects, uses, stores and protects users' personal information, in accordance with the California Consumer Privacy Act as amended by the CPRA, other applicable U.S. state privacy laws, the CAN-SPAM Act, the UK General Data Protection Regulation (UK GDPR) and the UK Data Protection Act 2018.
1. Data controller
The entity responsible for processing personal data is:
Trade name: BOLI
Company: DOUBLEWIKLICH LTD
Legal form: Private Limited Company (Ltd)
Registered in: England and Wales
Company Number: 17117893
Registered Office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Director: Guilherme Lima Wiklich
Contact email: sendmessagehereforhelp@hotmail.com
2. Personal information we collect
When you use the BOLI website, the following categories of personal information may be collected:
- Identity data: first name, last name, date of birth where applicable
- Contact data: email address, phone number, shipping and billing address
- Order and payment information: order history, products purchased, payment method, amount billed
- Technical data: IP address, browser type, device information, operating system, browsing data
- Behavioral data: pages visited, clicks, time on site, referrer URL
- Communication data: correspondence with customer service, reviews, complaints
- Marketing data: consent to newsletters or promotional communications
Payment data (full card numbers, bank details) is processed directly by certified, PCI-DSS-compliant payment providers. DOUBLEWIKLICH LTD has no access to full bank or card data and does not store it on its own systems.
3. Purposes of processing
- processing, managing and fulfilling orders
- managing deliveries, returns and exchanges
- managing payments, refunds and accounting
- customer service, technical support and complaint handling
- fraud prevention and protection against misuse
- compliance with legal obligations (in particular tax and commercial record-keeping)
- improving user experience, personalization and website performance
- sending marketing communications (only with your consent, with an unsubscribe link in every email as required by the CAN-SPAM Act)
- statistical analysis and market research in aggregated, anonymized form
4. Legal basis
Where the UK GDPR applies, processing is based on one of the following: performance of the sales contract or pre-contractual steps (Art. 6(1)(b)); compliance with a legal obligation (Art. 6(1)(c)); your consent, for example for marketing and non-essential cookies (Art. 6(1)(a)); or our legitimate interests (Art. 6(1)(f)). For U.S. residents, we process personal information for the business and commercial purposes described above as permitted by applicable state law.
5. Recipients of data and disclosures
Personal information may be shared only with parties necessary to provide our services, including:
- payment service providers (for example Shopify Payments, Stripe, PayPal)
- logistics partners and shipping carriers (for example USPS, UPS, FedEx, DHL, Royal Mail)
- technical service providers (Shopify e-commerce platform, hosting, cloud services)
- marketing and analytics services (for example Google Analytics, Meta), where permitted
- accounting and tax advisers
- legal advisers and public authorities where required by law
All partners are contractually bound to maintain confidentiality, ensure data security and process data solely on our instructions. In the preceding 12 months we may have "shared" identifiers and internet activity information with advertising partners for cross-context behavioral advertising, as defined by the CCPA/CPRA. We do not sell personal information for money, and we do not knowingly sell or share the personal information of consumers under 16 years of age. See "Your Privacy Choices" to opt out.
6. International data transfers
Personal information may be transferred to and processed in countries other than your own, in particular the United Kingdom (where DOUBLEWIKLICH LTD is based), the United States (for example Shopify, Google, Meta) and Canada (Shopify Inc.). Where the UK GDPR applies, such transfers rely on adequacy regulations, the UK International Data Transfer Agreement or standard contractual clauses.
7. Data retention
Personal information is kept only as long as necessary for the purposes for which it was collected or as required by law:
- order data and invoices: at least 6 years (UK tax and accounting requirements)
- customer account data: for the duration of the active account
- customer service communications: generally 3 years
- marketing consent: until withdrawn
- cookie and tracking data: according to the periods stated in the cookie banner
After the retention period, data is securely deleted or anonymized.
8. Your rights
Depending on where you live, you may have the following rights:
- right to know and access the personal information we hold about you
- right to correct inaccurate information
- right to delete your information
- right to data portability
- right to opt out of the sale or sharing of personal information and of targeted advertising
- right to limit the use of sensitive personal information
- right to restrict or object to processing and to withdraw consent at any time (UK GDPR)
- right not to be discriminated against for exercising your rights
- right to lodge a complaint with a supervisory authority
To exercise these rights, contact us at sendmessagehereforhelp@hotmail.com. Please include your first and last name, the email address used at checkout and a specific description of your request. We will verify your identity and respond within 45 days (CCPA) or 30 days (UK GDPR), as required by law. You may designate an authorized agent to make a request on your behalf.
Complaints: in the United Kingdom, the Information Commissioner's Office (ICO), https://ico.org.uk. In the United States, your state attorney general or, in California, the California Privacy Protection Agency.
9. Data security
DOUBLEWIKLICH LTD uses appropriate technical and organizational measures to ensure the security, integrity and confidentiality of personal information, in particular:
- SSL/TLS encryption of all data transfers,
- regular security updates,
- access controls and permission management,
- regular backups,
- working exclusively with certified service providers.
Despite all security measures, complete security of data transmission over the internet cannot be guaranteed. In the event of a data breach posing a high risk to your rights, you will be notified without undue delay as required by applicable law, including state breach notification laws.
10. Cookies and tracking technologies
The BOLI website uses cookies and similar technologies (pixels, local storage, web beacons) to:
- ensure the website works properly (necessary cookies),
- analyze user behavior and improve the website (analytics cookies),
- display personalized advertising (marketing cookies),
- provide features such as cart, login and language selection (functional cookies).
You can manage cookies at any time through your browser settings or the cookie preferences available on our website. Where required by law, non-essential cookies are set only with your consent.
11. Minors
The BOLI website is intended exclusively for persons aged 18 or over. We do not knowingly collect personal information from minors. If we learn that we have collected data from a minor, it will be deleted without delay.
12. Changes to this Privacy Policy
This Privacy Policy may be updated at any time to reflect legal, technical or organizational changes. The version published on the website at the time of use applies. Material changes will be communicated to users (for example by email or a notice on the website).
13. Governing law
This Privacy Policy is governed by the laws of England and Wales and by the mandatory privacy provisions of the state or country in which you reside.
BOLI is operated by:
DOUBLEWIKLICH LTD
71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Company Number: 17117893 · Registered in England and Wales
Director: Guilherme Lima Wiklich
Last updated: October 15, 2026