At Leticia Boutique, we believe in “data minimization.” This means we only collect the information we need, and we only keep it for as long as it serves a legitimate business or legal purpose.
1. Purpose
This policy outlines the timeframes for which Leticia Boutique retains user data and the secure methods we use to destroy that data when it is no longer required.
2. Retention Periods
We categorize data into different retention periods:
| Data Category | Retention Period | Reason |
| Customer Order History | 7 Years | For accounting, tax audits, and legal records. |
| Customer Account Info | Until Account Deletion | To allow you to log in and view your history. |
| Marketing Emails | Until Unsubscribe | To send you updates you have requested. |
| Payment Details | Not Retained | We do not store full credit card numbers on our servers. |
| Customer Support Logs | 2 Years | To ensure quality of service and follow up on issues. |
3. Data Storage and Security
All retained data is stored on secure, encrypted servers. Access is restricted to authorized personnel only (e.g., our management team at Empire Diamond Tower) who require the data to perform their duties.
4. Data Destruction Standards
When the retention period expires, or when a customer requests data deletion, Leticia Boutique follows these destruction protocols:
Digital Data: Files are permanently deleted using “secure erase” methods that overwrite the data, making it unrecoverable by standard forensic tools.
Physical Records: Any physical documents (such as printed invoices or shipping labels) containing personal information are destroyed using a cross-cut shredder.
Third-Party Services: We ensure that our third-party partners (like shipping couriers) also adhere to strict data disposal standards once the delivery is complete.
5. Right to Erasure (Right to be Forgotten)
As a customer of Leticia Boutique, you have the right to request that we delete your personal information before the standard retention period ends.
To request deletion, please email info@leticiaboutique.com.
Note: We may be legally required to keep certain data (like tax invoices) even if a deletion request is made, to comply with Iraqi financial laws.
6. Policy Review
This policy is reviewed annually to ensure compliance with international data protection standards and the local regulations of Erbil, Iraq.
7. Contact Information
For any questions regarding your data, please contact our Data Protection Coordinator:
Leticia Boutique
Address: Empire Diamond Tower, Block A G-2, Peshawa Qazi, Erbil, Iraq
Email: info@leticiaboutique.com