The Baby Cot Shop is a trading name of Little Sequoia Ltd, a limited company registered in England and Wales.

Company Registration Number: 08341824

Registered Address: 408 King’s Road, Chelsea, London SW10 0LJ

VAT Number: 187510395

ICO Registration Number: ZA899076

Data Protection Contact: [email protected]

We are committed to protecting your personal data and handling it in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We may collect and process the following categories of personal data:

Contact and Identity Information

• Full name

• Postal address, including delivery and installation address

• Email address

• Telephone number, including WhatsApp number where provided

Order and Transaction Information

• Products and services purchased

• Order history and correspondence

• Bespoke and custom order specifications, including fabric, finish, and dimension selections

• Delivery and installation records

Financial Information

We do not store payment card details. All payments are processed securely by our third party payment processors. We retain only payment confirmations and transaction references.

Marketing Preferences

• Email marketing consent and preferences

• WhatsApp marketing consent and preferences

Technical and Usage Data

Website usage data collected via cookies and analytics tools, including device type, browser information, pages visited, and website interactions. Please refer to our Cookie Policy for further information.

We collect personal data in the following ways:

• When you place an order online, in-store, or by telephone

• When you enquire about our products or services

• When you provide your WhatsApp number in-store, during a consultation, or at the point of enquiry, and consent to receiving communications via WhatsApp

• When you subscribe to our marketing emails via our website

• When you visit our website through cookies and analytics tools

• When you correspond with us by email, telephone, or WhatsApp

• When you attend our Chelsea boutique or Harrods concession

We use your personal data for the following purposes:

To Fulfil Your Order and Provide Our Services

• Processing and managing your order

• Arranging delivery and installation

• Communicating with you about your order, including bespoke specifications and design sign-off

• Sharing necessary details with approved third party delivery and installation contractors

Legal basis: Performance of a contract.

To Process Payments

• Verifying payment

• Maintaining financial records

Legal basis: Performance of a contract and compliance with legal obligations, including HMRC record-keeping requirements.

To Send Marketing Communications

• Sending marketing emails about our products, services, and promotions through Omnisend, our email marketing platform

• Sending marketing messages via WhatsApp where you have provided your number in-store, during a consultation, or at the point of enquiry, and consented to receive such communications

Legal basis: Consent.

You may withdraw your consent at any time by clicking unsubscribe in any marketing email or by contacting us directly at [email protected].

To Manage Our Client Relationship

• Maintaining your client record within Zoho CRM

• Personalising communications and services based on your purchase history and preferences

Legal basis: Legitimate interests.

To Improve Our Website and Services

• Analysing website usage data to improve our website and customer experience

Legal basis: Legitimate interests.

To Comply With Legal Obligations

• Maintaining financial and transaction records

• Complying with applicable laws and regulations

Legal basis: Legal obligation.

We do not sell your personal data.

We may share your personal data with trusted third parties only where necessary to fulfil your order or provide our services, including:

• Shopify, our e-commerce platform

• Zoho CRM, our customer relationship management platform

• Omnisend, our email marketing platform

• WhatsApp Business, where consent has been provided for communications

• Approved delivery and installation contractors

• Secure payment processors

• Google Analytics and related analytics providers

We require all third parties to process personal data in accordance with applicable data protection laws and only for authorised purposes.

We may also disclose personal data to comply with legal obligations, to enforce our terms and conditions, or to protect the rights, property, or safety of The Baby Cot Shop, our clients, or others.

Some of our third party service providers may process personal data outside the United Kingdom. Where personal data is transferred outside the UK, we ensure that appropriate safeguards are in place in accordance with UK GDPR requirements. These safeguards may include adequacy regulations issued by the UK government or the use of approved standard contractual clauses.

If you are located outside the United Kingdom, your personal data may be processed in the UK and in other countries where our trusted service providers operate.

We retain personal data only for as long as necessary for the purposes for which it was collected. Our retention periods are generally as follows:

• Customer purchase and transaction records: 7 years from the date of purchase

• Delivery and installation records: 7 years from the date of delivery or installation

• Enquiry and lead data where no purchase was made: 2 years from the date of last interaction

• Marketing consent and subscription data: retained for as long as you remain subscribed. Following unsubscribe, your details may be retained on a suppression list to ensure that you do not receive further marketing communications

• WhatsApp contact data: retained for as long as the client relationship remains active and reviewed periodically

After the relevant retention period, personal data will be securely deleted or anonymised where appropriate.

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access – to request a copy of the personal data we hold about you

• Right to rectification – to request that we correct inaccurate or incomplete data

• Right to erasure – to request that we delete your personal data in certain circumstances

• Right to restrict processing – to request that we limit how we use your data in certain circumstances

• Right to data portability – to receive your data in a structured, commonly used format

• Right to object – to object to our processing of your data based on legitimate interests

• Right to withdraw consent – where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at [email protected]. We aim to respond within one calendar month of receiving your request.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Website: www.ico.org.uk

Telephone: +44 (0) 303 123 1113

Our website uses cookies and similar technologies to improve your browsing experience, analyse website traffic, and support certain marketing activities.

Some cookies are necessary for the operation of our website, while others, including analytics and marketing cookies, are used only with your consent where required by law.

We use Google Analytics to help us understand how visitors use our website. Information collected is aggregated and anonymised where possible.

You can manage or disable cookies through your browser settings and through our website cookie preferences tool. Please note that disabling certain cookies may affect website functionality.

For further information about the cookies we use and how to manage your preferences, please refer to our Cookie Policy available on our website.

We take the security of personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, misuse, or disclosure.

Where we use third party service providers, we select providers that maintain appropriate security standards and comply with applicable data protection legislation.

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner’s Office where required by law and, where necessary, notify affected individuals.

Our products and services are intended for purchase by adults. We do not knowingly collect personal data directly from children.

Any information relating to children, including nursery design preferences or bespoke requirements, is provided by parents, guardians, or authorised adults solely for the purpose of providing our products and services.

We may update this Privacy Policy from time to time to reflect changes in our practices, operational requirements, or applicable law.

The most current version will always be available on our website: www.thebabycotshop.com/pages/privacy-policy

Where appropriate, we may notify clients of material changes by email.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

Email: [email protected]

Post: The Baby Cot Shop, 408 King’s Road, Chelsea, London SW10 0LJ

Telephone: +44 (0) 203 3717530

If you are not satisfied with our response, you have the right to contact the Information Commissioner’s Office (ICO):

Website: www.ico.org.uk

Telephone: +44 (0) 303 123 1113

Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF