Website: www.babyaiden.online

Last Updated: April 2026

***

1. INTRODUCTION

Baby Aiden ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit www.babyaiden.online and make purchases through our website.

We are a reseller of baby products, including prams, pushchairs, travel systems, car seats, and accessories. Our products are sourced from Johnston Prams & Buggies Ltd (www.johnstonprams.com).

This policy is in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025.

Please read this policy carefully. If you do not agree with the terms of this policy, please do not use our website.

***

2. WHO WE ARE

Data Controller: Baby Aiden

Website: www.babyaiden.online

Location: cwmbran, Wales, United Kingdom

Contact: jamie@babyaiden.online

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us using the details above.

***

3. WHAT PERSONAL DATA WE COLLECT

3.1 Information You Provide Directly

- Identity data: Full name

- Contact data: Email address, phone number, delivery address, billing address

- Payment data: Payment card details (processed securely via our payment providers — we do not store full card details)

- Account data: Username and password if you create an account

- Communication data: Messages, queries, or complaints you send to us

3.2 Information Collected Automatically

- Technical data: IP address, browser type and version, device type, operating system

- Usage data: Pages visited, time spent on pages, links clicked, referring URLs

- Cookie data: See Section 9 (Cookies) for full details

3.3 Information from Third Parties

- Payment processors: Transaction confirmation and fraud-prevention data

- Analytics providers: Aggregated usage statistics

***

4. HOW WE USE YOUR PERSONAL DATA

We will only use your personal data when the law permits. Below are the purposes for which we use your data and the lawful basis we rely on.

Processing and fulfilling your order — Contractual necessity

Sending order confirmation and shipping updates — Contractual necessity

Managing returns, refunds, and complaints — Contractual necessity

Processing payments and preventing fraud — Contractual necessity / Legal obligation

Maintaining tax and accounting records — Legal obligation

Sending marketing emails (if opted in) — Consent

Improving our website and user experience — Legitimate interests

Responding to your enquiries — Legitimate interests

Complying with legal and regulatory requirements — Legal obligation

***

5. SHARING YOUR PERSONAL DATA

We do not sell or rent your personal data to third parties. We may share your data with the following categories of recipients where necessary:

- Product supplier — Johnston Prams & Buggies Ltd (www.johnstonprams.com): We may share your delivery information with our supplier to facilitate order fulfilment and direct despatch where applicable.

- Payment processors: To securely handle payment transactions via Stripe and PayPal.

- Delivery and logistics providers: To arrange delivery of your order to your specified address.

- IT and platform providers: Hosting, website infrastructure, and e-commerce platform providers.

- Legal and regulatory authorities: Where required by law, court order, or to protect our legal rights.

All third parties are required to handle your personal data in compliance with UK data protection law.

***

6. INTERNATIONAL DATA TRANSFERS

Where any of our third-party service providers are based outside the UK, we take steps to ensure your personal data is protected to an equivalent standard. This includes relying on UK adequacy regulations for certain countries, or standard contractual clauses approved by the ICO.

***

7. DATA RETENTION

We retain your personal data only for as long as necessary for the purposes set out in this policy.

Order and transaction records — 7 years (for tax/legal compliance)

Customer account data — Duration of account + 2 years after last activity

Marketing preferences — Until you withdraw consent

Website analytics — 26 months

Customer communications — 3 years from last contact

***

8. YOUR RIGHTS

Under UK GDPR, you have the following rights regarding your personal data:

- Right of access: Request a copy of the personal data we hold about you (Subject Access Request).

- Right to rectification: Request correction of inaccurate or incomplete data.

- Right to erasure ("right to be forgotten"): Request deletion of your personal data, subject to certain legal exceptions.

- Right to restrict processing: Request that we limit how we use your data in certain circumstances.

- Right to data portability: Receive your data in a structured, commonly used, machine-readable format.

- Right to object: Object to processing based on legitimate interests or for direct marketing purposes.

- Rights related to automated decision-making: Not be subject to solely automated decisions that significantly affect you.

- Right to withdraw consent: Where we rely on your consent to process data, you may withdraw it at any time.

To exercise any of these rights, please contact us at the details in Section 2. We will respond within one calendar month. We may need to verify your identity before processing your request.

If you are unsatisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

ICO: www.ico.org.uk | Tel: 0303 123 1113

***

9. COOKIES

Our website uses cookies and similar tracking technologies to enhance your experience, analyse traffic, and support marketing.

Strictly necessary — Essential for the website to function (e.g. shopping basket, login session) — No consent required

Performance/Analytics — Measure how visitors use our site (e.g. Google Analytics) — Consent required

Functionality — Remember your preferences (e.g. language, location) — Consent required

Marketing/Targeting — Serve relevant ads and track campaign performance — Consent required

You can manage your cookie preferences at any time via our Cookie Settings tool on our website, or by adjusting your browser settings. Note that disabling certain cookies may affect website functionality.

***

10. CHILDREN'S PRIVACY

Our website is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately so we can delete it.

***

11. SECURITY

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include:

- SSL/TLS encryption for all data transmitted via our website

- Restricted access to personal data on a need-to-know basis

- Secure payment processing via Stripe and PayPal (we do not store full payment card numbers)

- Regular review of our security practices

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

***

12. LINKS TO THIRD-PARTY WEBSITES

Our website may contain links to third-party websites, including www.johnstonprams.com. These sites operate under their own privacy policies, and we are not responsible for their content or data practices. We encourage you to review their policies before providing any personal data.

***

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our business practices. The updated policy will be posted on this page with a revised "Last Updated" date. We encourage you to review this policy periodically. For significant changes, we will notify you by email (if you have an account) or by a prominent notice on our website.

***

14. CONTACT US

Baby Aiden

Cwmbran, Wales, United Kingdom

Email: jamie@babyaiden.online

Website: www.babyaiden.online

This Privacy Policy was last reviewed and updated in April 2026, in accordance with the UK GDPR, the Data Protection Act 2018, and the Data (Use and Access) Act 2025.