Privacy Policy

Last updated: 14 September 2026

Mum Bub Hub CIC ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect when you visit or shop at mumbubhub.co.uk (our "site"), why we collect it, who we share it with, and what rights you have over it.

We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our details are:

Mum Bub Hub CIC
43 Woodside Road, Plaistow, London, E13 8RX
Company registration number: 11053842
ICO registration number: ZB893709
Contact: hello@mumbubhub.co.uk

1. Information we collect

We collect the following categories of personal data:

• Account and order data: name, delivery and billing address, email address, phone number, order history and order value, collected when you create an account, place an order, or contact us.
• Payment data: we do not store your full card details. Payments are processed securely by Shopify Payments, which collects and processes your payment information directly under its own privacy policy.
• Marketing data: your email address and marketing preferences, if you opt in to receive updates from us. We use Shopify Email to send these.
• Reviews: if you leave a product review, we collect your name and review content via Judge.me.
• Correspondence: records of any emails, messages or survey responses you send us.
• Site usage and device data: IP address, browser and device type, pages viewed, referral source, and general browsing behaviour on our site, collected automatically via cookies and similar technologies (see section 3).
• Wholesale enquiries: business contact details submitted through Faire or directly to us, if you are a wholesale customer or applicant.

2. How and why we use your data, and our legal basis

Purpose	Legal basis
Processing and fulfilling your order, including delivery and customer service	Performance of a contract
Taking payment	Performance of a contract
Sending you marketing emails	Consent (you can withdraw this at any time)
Responding to enquiries and correspondence	Legitimate interest, in running our customer service
Publishing product reviews you submit	Consent
Analysing site traffic and improving our site and products	Consent (analytics cookies) or legitimate interest (aggregated, non-identifying analysis)
Running advertising and measuring ad performance	Consent (advertising cookies)
Preventing fraud and protecting our business	Legitimate interest / legal obligation
Managing wholesale relationships	Performance of a contract / legitimate interest

3. Cookies and tracking technologies

Our site uses cookies and similar technologies. When you first visit, our cookie banner lets you choose which non-essential cookies to accept.

• Strictly necessary cookies: set by Shopify to run core site functions such as your cart, checkout and account login. These cannot be switched off as the site will not work correctly without them.
• Analytics cookies: Google Analytics, used to understand how visitors use our site so we can improve it.
• Advertising cookies: Google Ads, Meta (Facebook and Instagram) Pixel, Pinterest Tag, and TikTok Pixel, used to measure the performance of our advertising and, where you have consented, to show you relevant ads on those platforms.

You can change or withdraw your cookie choices at any time through the cookie preferences link at the bottom of our site, or through your browser settings. Blocking some cookies may affect how our site works.

4. Who we share your data with

We share personal data with the following categories of third party, each of whom processes it under their own privacy policy:

• Shopify — our e-commerce platform, which hosts our site and processes order and account data
• Shopify Payments — payment processing
• Shopify Email — marketing email delivery
• Google (Analytics and Ads) — site analytics and advertising measurement
• Meta (Facebook and Instagram) — advertising measurement and targeting, where you have consented
• Pinterest — advertising measurement and targeting, where you have consented
• TikTok — advertising measurement and targeting, where you have consented
• Judge.me — product review collection and display
• Faire — wholesale account and order management, for wholesale customers only
• Couriers and delivery partners, to fulfil your order
• Professional advisers, regulators and law enforcement, where we are legally required to

We do not sell your personal data to third parties.

5. International transfers

Some of the third parties listed above, including Google, Meta, Pinterest and TikTok, may process data outside the UK and European Economic Area. Where this happens, we rely on safeguards such as the UK's International Data Transfer Addendum or the provider's own certified transfer mechanisms, to make sure your data stays protected to UK standards.

6. How long we keep your data

• Order and account data: for as long as your account is active, and for 6 years afterwards to meet our accounting and tax obligations
• Marketing data: until you unsubscribe or withdraw consent
• Reviews: for as long as the product listing is active, unless you ask us to remove it
• Analytics and advertising cookie data: as set by each provider, typically between 30 days and 2 years, and no longer than the maximum period allowed under their own retention policy

7. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Ask us to delete your data, where applicable
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent at any time, without affecting processing carried out before withdrawal

To exercise any of these rights, contact us at hello@mumbubhub.co.uk. We will respond within one month. There is no charge for a standard request.

If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

8. Children's data

Our site and products are intended for adults. We do not knowingly collect personal data from children.

9. Data security

We use industry-standard technical and organisational measures, including secure hosting through Shopify and encrypted payment processing, to protect your data. No method of transmission over the internet is completely secure, but we take reasonable steps to keep your data safe and to limit access to those who need it.

10. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. The "last updated" date at the top of this page shows when it was last revised. We encourage you to review it periodically.

11. Contact us

Questions about this policy or how we handle your data can be sent to:

Mum Bub Hub CIC
43 Woodside Road, Plaistow, London, E13 8RX
hello@mumbubhub.co.uk