Privacy Notice
This privacy policy explains how Cambridge Baby uses and protects any information that you provide when using this website.
Cambridge Baby is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, you can be assured it will only be used in accordance with this privacy notice.
This policy is effective from 15th November 2019. We may update this page from time to time, so please check back periodically.
What we collect
To fulfil your order and provide our services, we may collect the following information:
How We Use Your Information
We process your data based on the following lawful bases under the General Data Protection Regulation (GDPR):
- Contract: To fulfil your order and manage customer service requests
- Legitimate Interests: To improve our services and understand customer purchasing trends
Specifically, we use your information to:
- Process and deliver your order
- Contact you if there's a delay or issue with your order
- Ask for feedback or reviews on items you've purchased
- Improve our website and product offerings using aggregated purchase data
- Send marketing emails (if you have opted in)
Sharing Your Information
To provide our services, we share limited personal data with third parties, including:
- Delivery providers: (e.g., Royal Mail, DPD) to deliver your order and send tracking updates
- Mailchimp: to send newsletters and marketing emails (if you have opted in)
Security
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.
Data Retention
We retain your data only as long as necessary:
- For order fulfilment and customer service: typically 6 years (for accounting and legal purposes)
- For marketing purposes: until you withdraw consent
Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right to access your data
- Right to rectify inaccurate data
- Right to erasure (“right to be forgotten”)
- Right to restrict processing
- Right to object to processing
- Right to data portability
- Right to withdraw consent at any time (where applicable)
