Privacy policy
Last updated: 22 May 2026
BC Global Sports Ltd trading as BC Boots UK (“BC Boots UK”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.
BC Boots UK operates internationally, including through its UAE entity, BCG Global Memorabilia Trading – FZCO.
This Privacy Policy explains how we collect, use, store and share personal data when you:
- Visit our website;
- Make an enquiry;
- Place an order or reserve an item;
- Subscribe to marketing communications; or
- Otherwise interact with us.
This policy is intended to help you understand what information we collect, why we collect it, how long we keep it, who we share it with, and what rights you have.
1. Who we are
United Kingdom
BC Global Sports Ltd
Company Registration: 14314029 | VAT Registration: 463422601
UK Registered Office: 125 Deansgate, Manchester, M3 2BY, United Kingdom
United Arab Emirates
BCG Global Memorabilia Trading – FZCO
DIEZ Registration: 81759 | IFZA License: 88548
UAE Registered Office: IFZA Business Park, Dubai Silicon Oasis, Dubai, United Arab Emirates
For the purposes of UK data protection law, BC Global Sports Ltd remains the primary data controller for personal data collected through bcbootsuk.com unless otherwise stated.
2. What personal data we collect
We may collect, use, store and transfer the following categories of personal data:
Identity and contact data
This may include:
- Name;
- Billing address;
- Delivery address;
- Email address;
- Telephone number;
- Social media handle or username if you contact us through social media.
Transaction and order data
This may include:
- Details of products ordered, reserved or enquired about;
- Order history;
- Payment status;
- Invoice details;
- Shipping details;
- Correspondence relating to an order, reservation, dispute or return.
Payment data
Payments are processed through third-party payment providers. We do not ordinarily store full card details ourselves. We may receive limited payment-related information such as payment status, partial card identifiers, payer name, billing information, and transaction references.
Account and customer service data
This may include:
- Messages you send us;
- Email correspondence;
- WhatsApp or social media messages where you contact us through those channels;
- Customer support records;
- Complaints, returns, refunds and dispute information.
Technical and usage data
This may include:
- IP address;
- Browser type and version;
- Device type;
- Operating system;
- Time zone and approximate location derived from IP;
- Pages viewed;
- Referring site;
- Searches performed;
- How you interact with the website.
Marketing and preferences data
This may include:
- Whether you have opted in or out of marketing;
- Your communication preferences;
- Your browsing behaviour on our website where cookies or similar technologies are enabled.
3. How we collect your personal data
We collect personal data:
- Directly from you, when you place an order, reserve an item, contact us, sign up to emails, submit a form or otherwise communicate with us;
- Automatically, through cookies and similar technologies when you browse our website;
- From service providers, such as Shopify, payment processors, fraud prevention providers, analytics providers and delivery partners, where relevant to your transaction or use of the site.
4. How we use your personal data and our lawful bases
Under UK GDPR, we must have a lawful basis for using your personal data. The lawful basis depends on the reason we are using it.
To operate the website and provide core functionality
We use technical and usage data to run, secure and improve the website.
Lawful basis: legitimate interests in operating, securing and improving our website.
To process orders, reservations and related transactions
We use identity, contact, transaction and payment-related data to:
- Process orders and reservations;
- Send confirmations and invoices;
- Arrange delivery;
- Communicate with you about your order, reservation or account;
- Manage cancellations, returns, disputes or chargebacks.
Lawful basis: performance of a contract with you, or taking steps at your request before entering into a contract.
To manage customer service and business records
We use your data to respond to enquiries, handle complaints, maintain records of transactions, and keep audit trails where needed.
Lawful basis: legitimate interests in running our business and providing customer support; and, where applicable, compliance with legal obligations.
To prevent fraud, abuse and misuse of our services
We may use technical, transaction and correspondence data to verify orders, detect suspicious behaviour, protect the business, and support payment or fraud checks.
Lawful basis: legitimate interests in preventing fraud and protecting our business, customers and platform partners. Shopify also uses certain automated measures for fraud prevention.
To comply with legal and regulatory obligations
We may use or disclose personal data where necessary to:
- Comply with legal obligations;
- Respond to lawful requests from courts, regulators, law enforcement or tax authorities;
- Establish, exercise or defend legal claims.
Lawful basis: compliance with legal obligations and legitimate interests in protecting our legal rights.
To send marketing communications
Where permitted by law, we may send marketing emails or similar communications about products, services, stock and offers.
Lawful basis: consent where required, and in some cases legitimate interests where permitted by applicable law.
You can unsubscribe from marketing at any time by using the unsubscribe link in emails or by contacting us.
To use non-essential cookies and similar technologies
We may use analytics, advertising or preference cookies where enabled on the site.
Lawful basis: consent, where required under PECR and applicable data protection law.
5. Who we share your personal data with
We share personal data only where reasonably necessary for the purposes set out above. This may include:
- Shopify, which powers our online store and processes certain customer and storefront data;
- Payment providers, to process payments, manage fraud checks and handle disputes;
- Shipping and logistics providers, to deliver items and provide tracking;
- IT, hosting, website and analytics providers, to support the operation and security of the website;
- Marketing providers, where you have consented or where permitted by law;
- Professional advisers, including solicitors, accountants, insurers and debt recovery providers where reasonably necessary;
- Regulators, law enforcement, courts and public authorities, where required by law or to protect our rights.
We do not sell your personal data.
6. International transfers
Some of our service providers, including Shopify and certain technology partners, may process personal data outside the UK. Where this happens, we take steps intended to ensure appropriate safeguards are in place in accordance with applicable data protection law. Shopify explains that personal data may be processed in countries outside Europe, including Canada and the United States.
7. How long we keep your personal data
We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including satisfying legal, tax, accounting, dispute-resolution and record-keeping requirements. The ICO expects organisations to explain retention periods or the criteria used to determine them.
Typical retention periods may include:
- Order and transaction records: up to 7 years after the end of the relevant financial year, or longer where reasonably necessary for tax, accounting or legal claims;
- Customer enquiries and support correspondence: typically up to 24 months from the last meaningful contact, unless longer retention is justified by a dispute, legal issue or ongoing customer relationship;
- Marketing consent / suppression records: for as long as needed to maintain your preferences and demonstrate compliance;
- Technical logs and security records: for as long as reasonably necessary for security, fraud prevention and troubleshooting;
- Dispute, chargeback or legal matter files: for as long as reasonably necessary to establish, exercise or defend legal claims.
We may retain data for longer where required by law or where reasonably necessary in connection with actual or anticipated legal proceedings.
8. Automated decision-making and fraud screening
We do not carry out solely automated decision-making that produces legal or similarly significant effects on individuals.
However, Shopify and certain payment or fraud-prevention providers may use limited automated tools to detect suspicious or potentially fraudulent activity. These measures are intended to protect both merchants and customers and do not ordinarily involve fully automated decisions with significant legal effects.
9. Your data protection rights
Depending on your location and the circumstances, you may have the right to:
- Request access to your personal data;
- Request correction of inaccurate or incomplete personal data;
- Request erasure of your personal data;
- Request restriction of processing;
- Object to processing based on legitimate interests;
- Request portability of certain personal data;
- Withdraw consent where processing is based on consent.
The ICO states that individuals should be told what rights they have and how to exercise them.
To exercise any of these rights, please contact us at info@bcbootsuk.com.
We may need to request information to verify your identity before responding.
10. Complaints
If you have concerns about how we handle your personal data, please contact us first and we will try to resolve the issue.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters. The ICO expects privacy notices to tell people how they can complain.
11. Cookies and similar technologies
Our website uses cookies and similar technologies to:
- Enable core site functionality;
- Remember customer preferences;
- Support checkout and security;
- Understand how visitors use the site;
- Improve website performance;
- Support marketing and analytics where enabled.
Shopify storefronts use various cookies and similar technologies, and Shopify updates its own cookie documentation from time to time.
Some cookies are strictly necessary for the website and checkout to work. Others, such as analytics or advertising cookies, may only be used with your consent where required by law. Under UK rules, non-essential cookies generally require consent.
You can manage your preferences through our cookie banner or relevant settings tools on the site. You can also control cookies through your browser settings, although blocking certain cookies may affect site functionality.
For more information about Shopify’s cookies, you can refer to Shopify’s cookie documentation.
12. Third-party links and platforms
Our website or communications may contain links to third-party websites, services or social media platforms. If you follow those links or interact with those platforms, their own privacy policies and terms will apply. We are not responsible for the privacy practices of third-party websites or services that we do not control.
13. Data security
We use reasonable technical and organisational measures to help protect personal data against unauthorised access, loss, misuse, alteration or disclosure. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
14. Children
Our website and services are not directed to children, and we do not knowingly collect personal data from children.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, legal obligations, technologies or practices. The latest version will always be posted on our website with the “Last updated” date shown above.