Privacy Policy
Last updated:
This Privacy Policy describes how Dulce Bonito ("Dulce Bonito", "we", "us") collects, uses, stores, and shares personal information when you visit dulcebonito.com, browse our shop, customize kilts, place an order, track a shipment, or contact us.
Who we are
Dulce Bonito is a luxury Highland craft brand offering utility kilts, sporrans, dress sporrans, and bespoke studio services. For privacy enquiries, contact us at hello@dulcebonito.com.
Information we collect
Depending on how you use the site, we may collect:
- Identity & contact: name, email, phone number, billing and shipping address, country, and postal code.
- Order & product details: items in your bag, kilt options (colour, size, waist, length), measurements you provide for bespoke work, order notes, and order history when you use order tracking.
- Payment-related data: when Stripe, Apple Pay, Google Pay, or PayPal are connected, payment tokens and transaction references are processed by those providers. We do not store full card numbers on our servers.
- Communications: messages you send via our contact form, email, WhatsApp, or social channels.
- Technical data: browser type, device type, approximate region (from IP at the server or CDN), pages viewed, and referral source where analytics are enabled.
- Preferences stored on your device: shopping bag contents, theme (light/dark), and locally saved order lookup details in your browser storage.
How we use your information
We use personal data to:
- Process and fulfill orders, including production, shipping, and customer support.
- Calculate applicable taxes (for example, estimated Canadian tax from postal code at checkout).
- Send order confirmations, tracking updates, and responses to your enquiries.
- Improve our website, products, sizing guidance, and checkout experience.
- Meet legal, accounting, and fraud-prevention obligations.
- Send marketing only where you have opted in; you may unsubscribe at any time.
We do not sell your personal information to third parties.
Legal bases (EEA / UK visitors)
Where GDPR or UK GDPR applies, we rely on: contract (to fulfill your order), legitimate interests (site security, fraud prevention, product improvement), legal obligation (tax and record-keeping), and consent where required (marketing, non-essential cookies).
Sharing with service providers
We may share data with trusted processors who help us operate the business, such as:
- Payment processors (e.g. Stripe, PayPal) for secure checkout.
- Shipping carriers and fulfillment partners to deliver your order.
- Email and messaging tools to send transactional messages.
- Hosting, CDN, and security providers for site performance and protection.
These providers are permitted to use your data only to perform services for us and must protect it appropriately.
International transfers
If you order from outside our primary country of operation, your information may be processed in other countries with different data-protection laws. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.
Retention
We keep order and contact records for as long as needed to fulfill the order, handle warranty or alteration requests, and comply with tax and commercial laws—typically several years for financial records. Browser-stored cart and theme data remain on your device until you clear site data or we update the site.
Security
We use HTTPS, strict transport security, content security policies, and other measures to protect data in transit and at rest. No method of transmission over the internet is 100% secure; please use a strong, unique password for any account features we add in future.
Cookies & local storage
Our site uses local storage and similar browser technologies for:
- Your shopping bag and checkout session.
- Theme preference (light or dark mode).
- Order tracking lookups you initiate on your device.
We do not require third-party advertising cookies to complete a purchase. If we add analytics or marketing cookies later, we will update this policy and, where required, ask for consent.
Children
Our shop is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
Your rights
Depending on your location, you may have the right to:
- Access a copy of the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete data where there is no compelling reason to keep it.
- Restrict or object to certain processing.
- Data portability for information you provided in a structured format.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with your local data protection authority (EEA/UK/Canada).
To exercise these rights, email hello@dulcebonito.com. We may need to verify your identity before responding.
California (CCPA/CPRA) notice
California residents may request to know, delete, or correct personal information, and opt out of "sale" or "sharing" of personal information. We do not sell personal information. Submit requests to hello@dulcebonito.com.
Canada (PIPEDA)
Canadian customers may contact us regarding collection, use, and disclosure of personal information. Tax at checkout for Canada is estimated from postal code; final tax on invoices may be adjusted to match applicable provincial rules.
Order terms & checkout consent
By placing an order you confirm that your details are accurate, you accept our shipping and return policies communicated at checkout, and you agree to this Privacy Policy. Custom and bespoke items may have separate lead times and measurement policies stated on the product or contact pages.
Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top will change, and material changes may be highlighted on the site or by email where appropriate.
Contact
Privacy questions or requests: hello@dulcebonito.com · Contact form · Track order