Last updated October 2026
Who is responsible for your data
Bambuu Baby is the data controller for the information collected through this website. You can contact us about your data at info@bambuubaby.co.uk or by post at 2 Malthouse Cottages, Wisborough Green, West Sussex, RH14 0ES.
Bambuu Baby and Settle & Soothe (settleandsoothe.co.uk) are both run by Annie and share one customer account system. An account created on either site can be used on both, and the same contact details are held once. Each business only uses your data for its own purposes as set out in its privacy policy.
What we collect and why
- Order details - your name, email, delivery and billing address, phone number and what you bought. We need these to fulfil your order (performance of a contract) and to keep accounting records (legal obligation).
- Account details - an account is created when you first order so you can see your orders; you may set a password. We keep a hashed version of any password, never the password itself.
- Payment - card payments are processed by Stripe. We never see your full card number; we hold a reference to the payment and the receipt.
- Gift-card recipients - the name, email and message you give us for a gift card, used only to deliver that card.
- Enquiries - your name, email and message when you use the contact form, so we can reply (legitimate interests).
- Newsletter - your email and first name if you sign up (consent). You can unsubscribe from any email at any time.
- Basket reminders - if you enter your email at checkout and don’t complete the order, we may send one reminder email about the items you left (legitimate interests; you can unsubscribe).
- Technical data - our hosting provider keeps standard server logs (IP address, browser, pages requested) for security and reliability.
Who we share it with
- Stripe (payment processing) - see stripe.com/privacy.
- Royal Mail - your name and address, to deliver your parcel.
- Postmark (ActiveCampaign) - to send our order and account emails.
- Amazon Web Services - hosts the website, database and product images (UK/EU regions).
- We never sell your data and we don’t share it with anyone else unless the law requires it.
How long we keep it
Order and payment records are kept for six years after the order to meet UK tax rules. Enquiries are kept for up to two years. Newsletter details are kept until you unsubscribe. You can ask us to delete your account at any time; we will keep only what we must for legal reasons.
Your rights
You can ask to see the data we hold about you, have it corrected or deleted, object to or restrict how we use it, and ask for a copy in a portable format. Email info@bambuubaby.co.uk and we’ll respond within one month. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk).
Cookies
See our Cookie Policy for the cookies this site uses.