Privacy and Cookies Policy
Version number: 2.0
Effective date: 28 October 2026
1. Who are we?
1.1 We are Bump, Baby & You Ltd (“Bump, Baby & You”, “we”, “us”). We are the controller of your personal information under UK data protection law. For privacy queries, contact us at hello@bumpbabyandyou.com. Our other contact details are on our website.
2. What’s the point of this policy?
2.1 It tells you what to expect when we collect your personal information through our website, social media (including Facebook and Instagram lead forms), campaign applications or otherwise. Please only use our service if you are happy with this policy.
2.2 This policy covers only information provided to us. If you give personal information to others, such as other websites or the brands we work with, please check their privacy policies.
3. Might the policy change?
3.1 Yes. We will post any new version on our website and, where the changes are significant, tell you by email, SMS or otherwise. The version number and effective date at the top show when it was last updated.
4. What do we collect?
4.1 Information you give us, such as:
- your name and contact details (email, phone number, postcode or address);
- information you provide when you register with us or later, such as your date of birth, number and ages of children, pregnancy due date, occupation, household income and shopping preferences;
- information you provide when you apply for a campaign, event or opportunity through us, such as your location, your availability and details of your vehicle or other products you own;
- information in your username, bio, social media links, profile photo, posts or reviews, or in messages you send us; and
- contact or other information you give or allow us to use for newsletters or other marketing.
4.2 Automated information about your use of our service, such as: your IP address, browser type and version, device type and identifier, operating system, mobile network data, a unique reference linked to the data you enter, login details, the site you came from, and the pages you visited and searches you made, with dates and times.
4.3 Information other people may give us about you:
- if you log in with Facebook: your name, email address, profile photo and date of birth from Facebook; and
- if you fill in a lead form on one of our Facebook or Instagram ads: the details you submit, sent to us by Meta. Meta may pre-fill some fields from your profile; you can edit them before submitting.
5. What’s our legal basis for using your information?
5.1 Because it’s needed to take steps at your request before entering into a contract with you, or to perform that contract. This covers enquiries, campaign and opportunity applications, and contact details.
5.2 Because it’s in our legitimate interests, e.g. to manage and improve our service, track usage patterns and prevent or detect fraud or abuse. This covers automated usage data, and posts, reviews and similar information you display on or send through our service. We may also use your contact details for customer satisfaction surveys.
5.3 Because you’ve agreed (e.g. by ticking a consent box). This covers information you give or allow us to use for newsletters or other marketing, and non-essential cookies. You can withdraw consent at any time as explained on our service or by emailing us.
5.4 If you give us a friend’s contact details, to send that person an invitation message.
6. How long do we keep personal information?
6.1 Until you ask us to delete it by emailing us. We will delete your information and account if you have been inactive for 12 months.
6.2 We may keep some information longer (typically up to six years) where reasonably needed for legal, regulatory or tax reasons, to deal with disputes, prevent fraud or abuse, or enforce our terms.
6.3 We keep information used only for newsletters or other marketing until you tell us to stop sending you those messages.
6.4 We generally keep automated browsing information for up to 18 months.
6.5 We keep campaign and opportunity applications for up to 12 months after the campaign ends, unless you agree to stay on file for future opportunities.
6.6 We keep friend referral contact details for up to 6 months.
7. Who do we share your personal information with?
7.1 Companies that provide us with a service, e.g. website hosts and businesses that help us send communications, monitor our website, and provide e-commerce, online advertising, analytics and other IT services.
7.2 Other businesses, so they can send you marketing messages, if you have given permission. You can withdraw permission at any time as explained on our service or by emailing us.
7.2A Brands and partners running a campaign, event or opportunity you have applied for through us, as far as needed to assess your application and arrange your participation. For example, we may share your name, contact details, location and vehicle details with the brand. We only share what is needed for that purpose, and the brand may contact you directly about it.
7.3 Other users of our service, if you include your real name in your username or display personal information in a bio, photo, post, comment, review or other public action on our service (which we advise against).
7.4 Regulators, the police and other law enforcement authorities, to help deal with fraud and abuse or to comply with legal requirements.
7.5 Insurers and professional advisers, in connection with our insurance cover or legal claims.
7.6 Potential buyers, as far as reasonably necessary, in the case of an actual or proposed sale, merger or business combination involving all or part of our business.
8. Do we send your information outside the UK?
8.1 Your personal information is stored in the UK or the European Economic Area (EEA), which the UK recognises as providing adequate protection, except as follows.
8.2 Some of your personal information (e.g. IP address, browsing information, email address) may be transferred to the US by these companies: Google (analytics, email services, advertising, data storage), Meta (Facebook and Instagram advertising and lead forms), Amazon (hosting), Heroku (hosting), PubNub (user comments), Mailchimp (mailshots), and the social media companies listed under section 10. These transfers rely on the UK–US data bridge, where the company is certified under it, or on the UK International Data Transfer Agreement or Addendum to the EU standard contractual clauses, which provide appropriate safeguards.
9. What rights do you have?
9.1 Where the legal requirements are met, you have the right to: access your personal information; correct it if it’s wrong; have it deleted or its use restricted in certain circumstances; data portability; and withdraw any consent you’ve given (e.g. to marketing).
9.2 You may also have the right to object to our use of your personal information in certain circumstances, and you can always object to direct marketing.
9.3 If you have a complaint about how we handle your personal information, please email us first. If you’re not happy with our response, or think we are not handling your information in line with the law, you can complain to the Information Commissioner’s Office (ICO).
9.4 For more information about your rights, visit the ICO’s website: www.ico.org.uk.
10. Cookies and other tracking technologies
10.1 We and other companies use cookies and similar technologies on our website. A cookie is a small file of letters and numbers sent to your browser. Cookies help websites work, or work better, and give information to the site owner or others. “Session” cookies last until you close your browser; “persistent” cookies last longer. Except for strictly necessary cookies, we only set cookies with your consent, which you can change at any time through our cookie banner. To block or delete cookies in your browser, visit www.allaboutcookies.org. Parts of our site may not work if you reject cookies.
10.2 Cookies we place ourselves:
| Type of cookie | Purpose |
|---|---|
| Logged-in status | Checks whether you are logged in to our site |
| “Remember me” | Remembers you and speeds up login when you return |
| Authentication | Identifies you so you can move easily through the site |
| Preferences | Stores your choices (e.g. favourites, wishlists) and personalises the site |
| Affiliate | Tracks whether you came from a site affiliated with us, so we can pay affiliates and measure our links |
| Security | Protects our site, e.g. helps stop fraudulent logins |
| Cookie notice | Stores your response to our cookie notice |
10.3 Cookies placed by companies that provide us with a service. Some (e.g. Google cookies) may send information such as your IP address and the page you’re visiting to the company concerned.
Analytics cookies count visitors and show how they use the site, so we can improve it. Provided by Google Analytics. See Google’s privacy policy for how it uses data and how to opt out.
Advertising cookies personalise ads on this or other sites, measure how well ads work, and stop you seeing the same ad repeatedly. Provided by: Google (including AdSense and DoubleClick); Meta (including the Meta Pixel for Facebook and Instagram); and Microsoft Bing. See each company’s cookies and privacy policy for how to control them. You can opt out of many advertising cookies at once at www.youronlinechoices.com and optout.aboutads.info.
Social media cookies are placed when you use social features on our site, e.g. playing embedded video or clicking “like”. Provided by: Facebook, Instagram, X (formerly Twitter) and YouTube.
Third-party login cookies are placed by Facebook if you log in with it.
Affiliate tracking technologies let us track your journey from our site to a retailer so sales can be attributed to us:
| Company | Policy |
|---|---|
| Affiliate Window (AWIN) | https://www.awin.com/gb/legal/privacy-policy |
| Amazon | https://www.amazon.co.uk/gp/help/customer/display.html?nodeId=GX7NJQ4ZB8MHFRNJ |
| Webgains | https://www.webgains.com/public/en/privacy-2/ |
| Linkshare / Rakuten Advertising | https://rakutenadvertising.com/en-uk/legal-notices/services-privacy-policy/ |
| Commission Junction / Conversant Media | https://www.conversantmedia.com/legal/privacy |
| Impact | https://impact.com/privacy-policy/ |
| Partnerize | https://www.partnerise.co.uk/cookies-policy |
| SkimLinks | https://skimlinks.com/privacy-policies/ |
| eBay Affiliate / eBay | https://pages.ebay.in/affiliates/affiliates-privacy-policy.html |
| ShareASale | https://www.shareasale.com/PrivacyPolicy.pdf |
| Affiliate Future | https://affiliatefuture.com/Legal/privacy |
| Paid On Results | https://www.paidonresults.com/privacy.html |
| Monetise | https://www.monetise.co.uk/privacy-policy/ |
| Tradedoubler | https://www.tradedoubler.com/en/privacy-policy/ |
| TradeTracker | https://tradetracker.com/privacy-policy/ |
| Visualsoft | https://visualsoft-site.s3.amazonaws.com/pdf/privacy_policy.pdf |
| Inflecto Media | https://www.inflectomedia.com/privacy.html |
| Planit / Lead Intelligence | https://www.planit.co.uk/privacy-policy |
| Brandcycle | https://brandcycle.com/privacy-policy/ |
| Kelkoo | https://www.kelkoo.co.uk/company-pages/privacy-policy/ |
| FlexOffers | https://www.flexoffers.com/privacy-policy/ |
| Geek Core | https://www.geekcore.co.uk/cookies-privacy |
| Monotote | https://www.monotote.com/privacy-policy/ |
| RewardStyle | https://about.rewardstyle.com/privacy-policy |
| Groupon Partner Network | https://www.groupon.co.uk/legal/privacy |
| Veneficus | https://www.veneficus.co.uk/network/publisher_privacy_policy.html |
| Affiliate Gateway | https://www.theaffiliategateway.com/privacy |
| Impact – Ticketmaster | https://help.ticketmaster.com/s/article/Ticketmaster-Privacy-Policy?language=en_US |