Cookie Policy
GDPR & ePrivacy Compliant
1. Introduction
This Cookie Policy explains how Boutallion ("we", "us", "our") uses cookies and similar technologies when you visit our website at boutallion.com. This policy complies with the EU General Data Protection Regulation (GDPR) and the ePrivacy Directive (2002/58/EC as amended).
Cookies are small text files stored on your device when you visit a website. By continuing to use our website, you consent to our use of cookies in accordance with this policy, except where your consent is required by law for non-essential cookies.
2. What Are Cookies
Cookies are small data files placed on your device. We may also use local storage, session storage, and similar technologies. Cookies can be "first-party" (set by us) or "third-party" (set by a different domain).
Persistent cookies remain on your device for a set period. Session cookies are deleted when you close your browser.
3. Types of Cookies We Use
Boutallion uses cookies to ensure a seamless, secure, and personalised experience.
Essential Cookies We Use:
| Cookie Name | Purpose | Provider | Duration |
|---|---|---|---|
| cookie_consent | Stores your cookie preferences and consent choices | Boutallion | 1 year |
| _Secure-next-auth.session-token | Session authentication and security | Boutallion | Session |
| _stripe_mid | Fraud prevention and secure payment processing | Stripe | 1 year |
| _stripe_sid | Fraud prevention for payment security | Stripe | 30 minutes |
| CSRF-TOKEN | Cross-site request forgery protection | Boutallion | Session |
Legal Basis: These cookies are strictly necessary for the website to function under GDPR and the ePrivacy Directive. They do not require consent.
Strictly necessary cookies: Essential for the website to function. We process these based on our legitimate interest (GDPR Art. 6(1)(f)).
Functional cookies: Remember your choices (e.g. preferred language). Based on your consent (GDPR Art. 6(1)(a)).
Analytics cookies: Help us understand how visitors interact with our website. Used only with your consent.
4. Lawful Basis and Consent
Where cookies require consent under GDPR and the ePrivacy Directive, we obtain your explicit consent before placing non-essential cookies. You may withdraw consent at any time through your browser settings or our cookie banner. Withdrawal does not affect the lawfulness of processing before its withdrawal.
5. Cookie Retention
Session cookies are deleted when you close your browser. Persistent cookies remain for a set period, typically no longer than 24 months. You can delete cookies at any time through your browser settings.
6. Managing Cookies
Most web browsers allow you to control cookies through their settings. Disabling certain cookies may affect the functionality and your experience of our website.
7. Your Rights
Under the GDPR, you have the right to: access data we hold about you; rectify inaccurate data; erase your data where applicable; restrict processing; data portability; object to processing; withdraw consent; and lodge a complaint with a supervisory authority in your country.
8. Copyright Notice
All content on this website is the exclusive property of Boutallion and is protected by copyright and intellectual property laws. No content may be copied, reproduced, distributed, or used without prior written permission from Boutallion.
9. Changes to This Policy
We may update this Cookie Policy from time to time. The "Last updated" date indicates when the policy was last revised. We encourage you to review this policy periodically.
10. Contact Us & Data Protection Officer
If you have questions about our use of cookies, this Cookie Policy, or wish to exercise your data protection rights, please contact us:
11. Legal Compliance
Legal Compliance & Version Information
Last Updated: February 8, 2026
Effective Date: February 8, 2026
Version: 2.0
This policy complies with:
- GDPR: EU General Data Protection Regulation (EU) 2016/679
- ePrivacy Directive: Directive 2002/58/EC (as amended by Directive 2009/136/EC)
- PECR: Privacy and Electronic Communications Regulations 2003 (UK)
- UAE Federal Law: Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data
- EU Cookie Directive compliance
Boutallion is committed to transparency and full compliance with all applicable data protection, privacy, and electronic communications regulations.