Privacy policy

Privacy and Cookie Policy

Last updated: 16 September 2026

This Privacy and Cookie Policy explains how Birth Bumps collects, uses, stores and shares personal information when you:

  • visit or interact with our website;

  • place or manage an order;

  • create or use a customer account;

  • subscribe to email updates;

  • contact us;

  • submit a professional enquiry;

  • leave a review;

  • apply for or participate in a Clinic Partnership; or

  • otherwise interact with Birth Bumps.

It also explains how cookies and similar technologies are used and the rights available to you under UK data-protection law.

Who We Are

Birth Bumps is operated by:

Jenny Parsons trading as Birth Bumps
Tudor Cottage
Pilgrims Way
Westhumble
RH5 6AW
United Kingdom

Email: info@birthbumps.com

Jenny Parsons trading as Birth Bumps is the data controller responsible for the personal information described in this policy.

Our store is hosted by Shopify, which provides the ecommerce platform used to operate our website and process customer transactions.

Personal Information We Collect

The information we collect depends on how you interact with Birth Bumps.

Information you provide

We may collect:

  • your name;

  • email address;

  • billing and delivery addresses;

  • telephone number, if you choose to provide one for an order;

  • order and transaction details;

  • customer-account information;

  • your email-marketing preferences;

  • communications and customer-service enquiries;

  • return and refund information;

  • reviews and feedback;

  • information included in general or professional enquiry forms;

  • your organisation, clinic or professional role;

  • information connected with a Clinic Partnership;

  • referral codes, attributed sales and commission records; and

  • payment details needed to pay Clinic Partner commissions.

Payment information

Payments are processed through Shopify Payments or another payment provider offered at checkout.

Birth Bumps does not normally receive or store your complete payment-card number or security code. Payment providers collect and process payment information in accordance with their own privacy information and security requirements.

We may receive limited payment information, such as:

  • payment status;

  • payment method;

  • transaction reference;

  • billing details; and

  • partial or masked card information.

Information collected automatically

When you use our website, Shopify and approved technologies may collect:

  • IP address;

  • browser and device information;

  • cookie and similar technology identifiers;

  • website pages viewed;

  • links and buttons selected;

  • referring website;

  • products viewed;

  • items added to a basket;

  • checkout activity;

  • approximate location derived from an IP address;

  • date and time of visits; and

  • information about how the website performs.

The use of non-essential analytics and advertising technologies is subject to your cookie choices where consent is required.

Information from other sources

We may receive information from:

  • Shopify;

  • Shopify Payments and other payment providers;

  • Shop and Shop Pay;

  • Royal Mail and delivery services;

  • Google;

  • Meta, including Facebook and Instagram;

  • TikTok;

  • advertising and analytics providers;

  • referral and commission providers;

  • professional partners;

  • accounting providers; and

  • fraud-prevention or security services.

We only use information received from these sources where we have an appropriate lawful basis.

Health and Pregnancy Information

Birth Bumps does not need detailed medical or health information to sell and deliver its products.

Please do not include confidential medical information in general Contact or Professional Enquiry forms.

Because Birth Bumps relates to pregnancy and birth, you may voluntarily mention information about your pregnancy, health or birth experience when communicating with us. Health information may receive additional protection under data-protection law.

If you provide this information unexpectedly, we will limit its use to what is reasonably necessary to respond to you, protect someone’s vital interests where appropriate, comply with the law or manage a legal claim. We will not use it for advertising without an appropriate legal basis and any additional permission required by law.

If we later invite customers to provide birth stories, health-related testimonials or other sensitive information, we will explain separately how that information will be used and obtain any permission required before publication.

How We Use Personal Information and Our Lawful Bases

UK data-protection law requires us to have a lawful basis for each use of personal information.

Orders and customer transactions

We use personal information to:

  • process payments;

  • accept and fulfil orders;

  • prepare products for dispatch;

  • arrange delivery;

  • send order and service communications;

  • manage cancellations, returns and refunds;

  • provide customer support; and

  • maintain customer accounts.

We do this because it is necessary to perform our contract with you or take steps at your request before entering into a contract.

We may also use relevant records to comply with tax, accounting and consumer-law obligations.

Customer accounts

If you choose to create a customer account, Shopify uses your email address to authenticate you, including by sending secure sign-in codes.

We use account information to let you view and manage relevant order details. Creating an account is optional and is not required to place an order.

A Shopify customer record created for order administration or marketing consent is not necessarily the same as an activated Birth Bumps customer account.

Shop Pay and a customer’s wider Shop account are operated by Shopify and may be subject to Shopify’s own privacy information.

Customer service and enquiries

We use information submitted through Contact and Professional Enquiry forms to:

  • respond to questions;

  • provide customer support;

  • discuss professional products;

  • explore wholesale, class-use or partnership opportunities; and

  • maintain relevant business correspondence.

Our lawful basis is normally our legitimate interest in responding to enquiries and operating our business, or taking steps requested before entering into a contract.

Contact-form messages are delivered to our Google Workspace email account.

Email updates and marketing

If you actively subscribe to stay in touch, Shopify records your email address and marketing consent within our customer records.

We use this information to send Birth Bumps news, product information, offers and relevant updates.

Our lawful basis is normally your consent. You can withdraw that consent at any time by:

  • using the unsubscribe method included in a marketing message; or

  • emailing info@birthbumps.com.

Withdrawing consent will not affect the lawfulness of messages sent before withdrawal.

We may keep a minimal suppression record after you unsubscribe so that we do not accidentally add you back to marketing communications.

Service messages about an order, account, return or enquiry are not marketing messages and may still be sent when necessary.

We do not currently use abandoned-basket or automated product-recommendation emails. If this changes, we will update this policy and our marketing settings where appropriate.

Analytics and website improvement

Subject to your cookie choices, we use Shopify Analytics and Google Analytics to understand:

  • how visitors find our website;

  • how the website is used;

  • which pages and products attract interest;

  • whether the website functions effectively; and

  • how we might improve the customer experience.

Where information is stored or accessed on your device for non-essential analytics, our lawful basis is your consent.

For subsequent analysis of appropriately collected information, we may also rely on our legitimate interest in understanding and improving our website and business.

Advertising

Subject to your cookie choices, we may use:

  • Google Ads;

  • Meta advertising tools, including Facebook and Instagram;

  • TikTok advertising tools; and

  • related advertising technologies.

These services may measure advertising performance, attribute website visits or purchases to campaigns and help show more relevant advertising.

Where advertising cookies or similar technologies are used, we rely on your consent. You can refuse or withdraw that consent through our cookie controls.

We do not sell personal information for money.

Reviews

Customers may be invited by Shopify’s Shop service to leave a product rating or review after an eligible purchase.

Shop reviews are managed through Shopify and may be displayed through the Shop service. Shopify’s own privacy information also applies.

If we later install a separate review app to display reviews on the Birth Bumps website, we will review and update this policy before activating it.

Security and fraud prevention

We use relevant information to:

  • protect customer accounts;

  • secure payments and transactions;

  • identify suspected fraud;

  • prevent misuse of the website; and

  • protect Birth Bumps, Shopify, our customers and other people.

Our lawful bases are our legitimate interests in operating a safe and secure business and, where applicable, compliance with legal obligations.

Legal, accounting and record-keeping purposes

We may use and retain information to:

  • maintain tax and accounting records;

  • comply with consumer and ecommerce law;

  • respond to lawful requests from public authorities;

  • establish, exercise or defend legal claims;

  • enforce our contractual terms; and

  • obtain professional advice.

Our lawful bases are compliance with legal obligations and our legitimate interests in managing and protecting the business.

Clinic Partnerships and Commission Information

If you apply for or participate in a Birth Bumps Clinic Partnership, we may process:

  • your name;

  • clinic or organisation name;

  • professional and business contact information;

  • partnership correspondence;

  • referral or discount code;

  • purchases attributed to that code;

  • commission or thank-you payment amounts;

  • payment history;

  • bank or payment details needed to make payments; and

  • tax or accounting information where required.

We use this information to administer the partnership, attribute eligible purchases, calculate payments, prevent misuse and maintain financial records.

Our lawful bases are taking steps before entering into a partnership, performing our agreement with the Clinic Partner, complying with legal obligations and our legitimate interests in operating and reviewing the partnership programme.

A specialist referral or commission service may process some of this information on our behalf. We will review the selected provider’s privacy and international-transfer arrangements before using it and update this policy where necessary.

Referral and commission tracking cookies will not be placed without consent where consent is legally required.

Who We Share Personal Information With

We may share relevant information with trusted providers where necessary to operate the store and business.

These may include:

  • Shopify, which hosts the store and provides ecommerce, customer-account, Shop, Shop Pay, analytics and related services;

  • Shopify Payments and other payment providers, which process transactions;

  • Royal Mail, including Click & Drop, to deliver orders;

  • Google Workspace, which provides business email and related services;

  • Google Analytics and Google Ads, where enabled and consented to;

  • Meta, including Facebook and Instagram advertising services, where enabled and consented to;

  • TikTok, where its advertising technology is enabled and consented to;

  • accounting software providers, when selected and where needed for business records;

  • referral and commission providers, when selected for Clinic Partnerships;

  • professional advisers, such as accountants or legal advisers, where access is reasonably necessary;

  • technology and security providers supporting the website and business; and

  • public authorities or courts, where disclosure is legally required.

We only share the information reasonably necessary for the relevant purpose.

We do not use an external fulfilment company. Birth Bumps currently prepares and packs its own orders.

Our Relationship With Shopify

Our store is hosted by Shopify.

Shopify collects and processes personal information to provide the store, checkout, customer accounts, Shop, Shop Pay, payment, security, analytics and related services.

Some Shopify services may use information about interactions with Birth Bumps and other Shopify merchants. In some circumstances, Shopify acts as an independent data controller for its own purposes.

You can learn more through the Shopify Consumer Privacy Policy and exercise relevant Shopify privacy choices through the Shopify Privacy Portal.

International Transfers

Some providers—including Shopify, Google, Meta and TikTok—may process information outside the United Kingdom.

Where personal information is transferred outside the UK, we expect the relevant provider to use an approved legal safeguard. This may include:

  • UK adequacy regulations;

  • the UK International Data Transfer Agreement;

  • the UK Addendum to approved standard contractual clauses; or

  • another transfer mechanism permitted under UK data-protection law.

Information about a provider’s international transfers can also be found in that provider’s privacy information.

You may contact us if you would like further information about the safeguards relevant to your personal information.

How Long We Keep Personal Information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting and dispute-resolution requirements.

Our normal retention approach is:

  • orders, payments, returns and tax records: normally up to six years after the relevant transaction or accounting period;

  • customer-service correspondence connected with an order: normally up to six years where needed as part of the transaction record;

  • general enquiries that do not lead to a transaction: normally up to two years after the enquiry is closed;

  • professional and partnership enquiries: while discussions continue and normally up to two years afterwards, unless a longer period is needed for an active relationship or legal reason;

  • Clinic Partnership and commission records: for the duration of the partnership and normally up to six years afterwards where needed for payment, tax or contractual records;

  • customer accounts: while the account remains active and for a reasonable period afterwards, subject to transaction-record requirements;

  • marketing records: until consent is withdrawn, the person objects or the information is no longer useful, with a minimal suppression record retained where necessary;

  • reviews: while the review remains relevant and published, subject to Shopify’s own retention practices; and

  • cookie information: for the lifespan described through our cookie controls or by the relevant provider.

We may keep information for longer if required by law or reasonably necessary to establish, exercise or defend a legal claim.

We may retain anonymous information that can no longer identify you.

Security

We take reasonable technical and organisational measures to protect personal information against accidental loss, unauthorised access, alteration or disclosure.

These measures include using established ecommerce, payment, email and delivery providers and limiting access to information according to business need.

No internet transmission or storage system can be guaranteed to be completely secure. Please do not send payment-card information, passwords or confidential medical information by ordinary email.

Your UK Data-Protection Rights

Depending on the circumstances, you may have the right to:

  • request access to the personal information we hold about you;

  • ask us to correct inaccurate or incomplete information;

  • ask us to delete personal information;

  • ask us to restrict how information is used;

  • object to processing based on legitimate interests;

  • object at any time to direct marketing;

  • receive certain information in a portable format;

  • withdraw consent where processing relies on consent; and

  • complain to the Information Commissioner’s Office.

These rights are not absolute and may be subject to legal exceptions. For example, we may need to retain transaction information to comply with tax or accounting obligations.

To exercise a right, email info@birthbumps.com.

We may ask for information reasonably needed to confirm your identity. We will normally respond within one month, although the law permits additional time in certain circumstances.

Automated Decision-Making

Birth Bumps does not make decisions that produce legal or similarly significant effects about customers solely through automated processing.

Shopify and payment providers may use automated tools to identify possible fraud or security risks. Their privacy information explains how those systems operate and what rights may apply.

Complaints

If you have a concern about how Birth Bumps uses your personal information, please contact us first at info@birthbumps.com so we can try to resolve it.

You also have the right to complain to the UK supervisory authority:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

Website: ico.org.uk

Contacting us first does not affect your right to complain to the ICO.

Cookie Policy

What Cookies Are

Cookies are small text files stored on a computer, phone or other device when a website is visited.

Cookies and similar technologies can:

  • enable the website and checkout to work;

  • remember choices;

  • maintain security;

  • understand website use;

  • measure advertising performance; and

  • support referral or commission attribution.

Some cookies last only for the browsing session. Others remain for a set period or until deleted.

Types of Cookies We Use

Personalization cookies

These cookies remember information about your choices and actions so that the website can provide a more personalised experience on future visits.

They may remember preferences or support optional Shopify features.

Where consent is legally required, Personalization cookies will only be used after you have agreed to them.

Marketing cookies

Subject to your consent, Shopify, Google Ads, Meta and TikTok may use cookies, pixels or similar technologies to:

  • measure the effectiveness of marketing campaigns;

  • attribute website visits or purchases to advertising;

  • limit how often advertising is shown;

  • create advertising audiences; and

  • show advertising that may be more relevant to you on other websites and services.

These technologies may collect information about activity across different websites or services.

Marketing cookies will only be used where you have provided the consent required by law. You can refuse or withdraw consent through our cookie controls.

Referral and commission cookies

When the Clinic Partnership programme is activated, cookies or similar technologies may record that a visitor arrived using a Clinic Partner’s referral link or discount code.

Depending on how the selected app operates, these cookies will be classified as either Marketing or Analytics within our cookie controls.

Where they are not strictly necessary, they will only be used after the required consent has been provided.

Cookie Providers

Cookies and similar technologies may be placed or accessed by:

  • Birth Bumps;

  • Shopify;

  • Google;

  • Meta, including Facebook and Instagram;

  • TikTok; and

  • an approved referral or commission provider once selected.

The particular cookies may change as providers update their services.

Further information is available in the providers’ own notices:

Managing Cookie Choices

When you first visit the website, you will be offered cookie choices through our consent controls.

You can:

  • accept non-essential cookies;

  • reject non-essential cookies; or

  • manage the categories you wish to allow.

You can change or withdraw your choice later through the cookie-preference control available on the website.

Withdrawing consent does not affect the lawfulness of processing that occurred before withdrawal.

You can also delete or block cookies through your browser settings. Browser controls vary, and blocking strictly necessary cookies may prevent the basket, checkout, customer account or other parts of the website from working properly.

Cookie Duration

Some cookies are deleted when the browser is closed. Others remain for a limited period so that they can remember choices, measure website activity or perform another stated purpose.

The duration depends on the cookie and the provider placing it. Current information about provider cookies and their duration is available through our cookie controls and the provider notices linked above.

We periodically review the cookies and similar technologies used on the website and update this policy when our use changes materially.

Changes to This Policy

We may update this Privacy and Cookie Policy when our practices, providers, website features or legal obligations change.

The revised version will be posted on this website and the “Last updated” date will be changed. Where required, we will provide additional notice or request renewed consent.

In particular, we will review this policy when:

  • an accounting platform is selected;

  • a Clinic Partnership or commission app is installed;

  • a storefront product-review app is introduced;

  • automated marketing is enabled; or

  • new analytics or advertising technologies are added.

Contact Us

If you have a question about this policy, our use of personal information or your data-protection rights, please contact:

Jenny Parsons trading as Birth Bumps
Tudor Cottage
Pilgrims Way
Westhumble
RH5 6AW
United Kingdom

Email: info@birthbumps.com