Privacy Policy

Privacy Notice — For-Your-Little-One Ltd

Last updated: 5 November 2025

For-Your-Little-One Ltd (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This notice explains what we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contents

1. Introduction
2. The legal bases we rely on
3. When we collect your personal data
4. What personal data we collect
5. How and why we use your personal data
6. Marketing, advertising & social media
7. Combining your data for personalised marketing
8. How we protect your data
9. How long we keep your data
10. Who we share your data with
11. Where your data may be processed
12. Your rights under UK GDPR
13. Contacting the Regulator
14. If you live outside the UK
15. Contact us

1. Introduction

We may update this notice from time to time to reflect changes in law, guidance or our processes. Please check back for the latest version.

2. The legal bases we rely on

We process personal data under one or more of the following lawful bases:

• Consent – e.g. when you opt in to email or SMS marketing.
• Contract – to process your order, take payment and deliver goods.
• Legal obligation – e.g. tax/audit, fraud prevention, product safety.
• Legitimate interests – to operate and improve our services, prevent fraud, and conduct direct marketing in ways that do not override your rights. Where we rely on legitimate interests, we consider your reasonable expectations and conduct balancing tests.

3. When we collect your personal data

• When you create an account, place an order or request a return/refund.
• When you subscribe to newsletters or set your marketing preferences.
• When you contact us via email, phone or chat for support or enquiries.
• When you engage with us on social media.
• When you enter competitions or complete surveys/reviews.
• When you browse our site (via cookies and similar technologies—see our Cookie Policy).
• When you visit our premises (CCTV may operate for safety and security).

4. What personal data we collect

• Identity and contact data (name, email, phone, billing/delivery addresses).
• Account and transaction data (order history, receipts, returns, warranty info).
• Payment details (handled securely by our payment providers; we do not store full card numbers).
• Technical and usage data (IP address, device/OS, pages viewed, interactions, referring sites, approximate location).
• Marketing preferences and engagement (e.g. email opens/clicks where permitted).
• Social media identifiers if you interact with our accounts.
• CCTV images if you visit our premises.

5. How and why we use your personal data

• To process orders, payments, deliveries and returns, and provide customer support (contract).
• To communicate service messages (e.g. order updates, policy changes) (legal obligation/contract).
• To prevent and detect fraud or misuse of our services (legitimate interests/legal obligation).
• To improve our website, products and services, including testing and analytics (legitimate interests/consent for cookies where required).
• To send marketing communications by email/SMS where you have consented, or by email under the PECR soft opt-in where applicable (you can opt out at any time).
• To run promotions, surveys and competitions (consent/legitimate interests).

6. Marketing, advertising & social media

We use digital advertising tools to promote our products, including Meta (Facebook/Instagram), Google Ads & YouTube, Microsoft Advertising (Bing), TikTok, and email marketing platforms (e.g. Klaviyo/Shopify Email).

Custom & Lookalike Audiences

We may upload hashed customer contact data (e.g. email addresses) to advertising platforms to create custom or lookalike audiences so we can show relevant ads to existing customers or similar audiences. We rely on legitimate interests for this, assess necessity and balance your rights, and only use customer data collected after this notice date for these purposes. You can opt out at any time by emailing help@foryourlittleone.com or by adjusting your marketing preferences.

Email & SMS marketing

We will send marketing by email and/or SMS where you have given consent, or (for email) under the PECR soft opt-in if you purchased from us and did not opt out at the time of purchase. Every message includes a clear unsubscribe link or instructions. You can withdraw consent or opt out at any time.

Cookies & tracking

We use cookies and similar technologies to measure performance, personalise content and advertising, and understand how our site is used. See our Cookie Policy for details and controls.

7. Combining your data for personalised marketing

We may combine account, order and on-site activity to understand preferences and provide more relevant recommendations and offers. You can object to profiling at any time (see “Your rights”).

8. How we protect your data

• HTTPS encryption across transactional areas of our website.
• Access controls for authorised personnel only.
• Tokenised payment processing via certified providers.
• Security monitoring and periodic testing.

9. How long we keep your data

• Orders and payment records: normally 5 years (legal/accounting).
• Marketing data: retained until you unsubscribe/opt out or your consent is withdrawn, then suppressed to honour your preference.
• CCTV: typically 30 days unless required for investigation.

10. Who we share your data with

We share personal data with trusted service providers acting under our instructions, including:

• Website & IT: Shopify, hosting, support and analytics providers.
• Payments: Shopify Payments, PayPal, Klarna (or similar), fraud prevention tools.
• Delivery: DPD, Evri, Royal Mail, Amazon Shipping (as applicable).
• Marketing: Meta, Google, Microsoft, TikTok, email service providers (e.g. Klaviyo/Shopify Email), review platforms.

We require all processors to protect your data and use it only for our specified purposes. We do not sell your personal data.

11. Where your data may be processed

Some partners may process data outside the UK/EEA (e.g. the United States). Where this occurs, we implement appropriate safeguards, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, and carry out transfer risk assessments as required.

12. Your rights under UK GDPR

You have the right to:

• Be informed about how we use your data (this notice).
• Access your personal data and receive a copy.
• Rectify inaccurate or incomplete data.
• Erase your data in certain circumstances.
• Restrict our processing in certain circumstances.
• Object to processing, including direct marketing and profiling.
• Port your data to another provider where technically feasible.
• Not be subject to decisions based solely on automated processing where they have legal or similarly significant effects.

To exercise your rights, email help@foryourlittleone.com. We may need to verify your identity before responding.

13. Contacting the Regulator

If you are unhappy with our response, you can contact the Information Commissioner’s Office (ICO): www.ico.org.uk/concerns or by phone on 0303 123 1113.

14. If you live outside the UK

Your data may be transferred to and processed in the UK. We will use appropriate safeguards for any international transfers in accordance with UK GDPR.

15. Contact us

Controller: For-Your-Little-One Ltd
Registered office / postal address: For Your Little One, Unit 12, Zion Street, Tipton, DY4 9DP
Email: help@foryourlittleone.com
Company number: 08286532 (England & Wales)