Privacy Policy

The Kiddie Cove ("The Kiddie Cove", "we", "us" or "our") respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you visit or use our online store, place an order, contact us, or otherwise interact with us.

Our online store is operated using Wix and sells children's and toddler clothing and essentials to customers in the United Kingdom, European Union and United States.

This Privacy Policy is intended to comply with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), the Data Protection Act 2018, and applicable electronic-communications and cookie requirements.

 

1. Who We Are

The data controller responsible for your personal data is:

The Kiddie Cove
13 Courtenay Rd.
Woking
GU215HG
United Kingdom

Email: info@thekiddiecove.com

For data-protection enquiries or to exercise any of your rights, please contact us using the email address above.

Where another company processes personal data on our behalf, that company may act as a data processor. Where a third party processes information for its own independent purposes, it may act as a separate data controller.

 

2. What Personal Data We Collect

Depending on how you interact with our store, we may collect the following categories of personal data:

Information you provide to us

This may include:

• Your name;

• Billing and delivery address;

• Email address;

• Telephone number;

• Order details and purchase history;

• Information you provide when contacting customer support;

• Information contained in communications with us;

• Account or login information, if you create an account;

• Marketing preferences;

• Information you provide when participating in promotions, competitions or surveys; and

• Any other information you voluntarily provide to us.

Payment information

When you make a purchase, payment information is processed by the relevant payment service provider. Depending on the payment method you select, this may include PayPal, Apple Pay and the payment provider used to process credit or debit card payments through our Wix store.

We generally do not receive or store your complete payment-card number, security code or full payment credentials. Those details are handled by the applicable payment provider in accordance with its own privacy policy and security requirements.

Automatically collected information

When you visit our website, certain technical information may be collected automatically, including:

• IP address;

• Browser type and version;

• Device type;

• Operating system;

• Approximate location derived from technical information;

• Referring website;

• Pages visited and interactions with our website;

• Date and time of visits;

• Website performance and diagnostic information; and

• Information collected through cookies and similar technologies.

 

3. How We Use Your Personal Data

We may use personal data for the following purposes:

• To provide, operate and maintain our online store;

• To process and fulfil orders;

• To arrange delivery of products;

• To communicate with you about your orders;

• To process payments and refunds;

• To respond to enquiries and provide customer service;

• To manage customer accounts;

• To prevent fraud, abuse and other unlawful activity;

• To maintain the security of our website and systems;

• To improve our products, website and customer experience;

• To analyse website performance and usage;

• To send marketing communications where permitted by law and where required, with your consent;

• To comply with legal, tax, accounting and regulatory obligations;

• To establish, exercise or defend legal claims; and

• To protect our rights, property and the safety of our customers and others.

We will not use your personal data for purposes that are incompatible with the purposes described in this Privacy Policy unless we are permitted or required to do so by law.

 

4. Legal Bases for Processing

Where the EU GDPR or UK GDPR applies, we process personal data only where we have a lawful basis for doing so.

Depending on the circumstances, the legal basis may include:

PurposeLegal basis

Processing and fulfilling your orderNecessary for performance of a contract

Processing paymentsNecessary for performance of a contract and compliance with legal obligations

Delivering your orderNecessary for performance of a contract

Responding to customer enquiriesNecessary for performance of a contract, taking steps at your request, or our legitimate interests

Preventing fraud and protecting our websiteOur legitimate interests and, where applicable, legal obligations

Accounting, tax and record keepingCompliance with legal obligations

Website securityOur legitimate interests

Improving our services and websiteOur legitimate interests, or consent where required

Non-essential cookies and analyticsYour consent, where required

Marketing communicationsYour consent where required, or another lawful basis where applicable

Establishing or defending legal claimsOur legitimate interests and/or compliance with legal obligations

Where we rely on legitimate interests, we will consider those interests against your rights and freedoms and will not rely on this basis where your interests or fundamental rights override our legitimate interests.

Where we rely on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

 

5. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Cookies are small text files placed on your device that can help websites operate, remember preferences, maintain security, understand website usage and provide other functionality.

We may use the following categories of cookies:

Strictly necessary cookies

These cookies are required for essential website functions, such as:

• Shopping-basket functionality;

• Checkout;

• Login or account functionality;

• Security;

• Fraud prevention;

• Load balancing; and

• Remembering privacy or cookie preferences.

These cookies generally cannot be disabled through our cookie-management system where they are necessary for the website or a service you have requested.

Functional cookies

These cookies may remember choices and preferences to improve your experience.

Where consent is legally required, we will ask for your consent before placing these cookies.

Analytics cookies

We may use analytics technologies to understand how visitors use our website, such as which pages are visited and whether technical problems occur.

Where required by applicable law, these technologies will only be activated after you provide consent.

Advertising and marketing cookies

If we use advertising, retargeting, social-media or similar technologies, these may be used to measure advertising effectiveness or display more relevant advertising.

Where required by law, we will obtain your consent before using these technologies.

You can manage non-essential cookie preferences through our cookie-consent mechanism and may also control cookies through your browser settings.

Because our website is operated through Wix and may use third-party applications or integrations, the specific cookies and similar technologies used on the website may change over time. Our cookie-management tools should therefore be consulted for the current list and purposes of non-essential technologies.

UK rules governing cookies and similar technologies generally require clear information and consent for non-essential technologies, subject to limited exceptions. IICO+1

 

6. Third-Party Service Providers

We use selected third-party companies to operate our business and provide services to customers.

These may include:

Wix

Our online store is hosted and operated using Wix. Wix may process personal data on our behalf in connection with website hosting, ecommerce functionality, security and related services.

Wix states that, for site visitor/customer data processed on a site owner's behalf, the site owner is generally the controller and Wix acts as a processor subject to its data processing arrangements. WWix Support+1

Payment providers

We use payment service providers, including:

• PayPal;

• Apple Pay; and

• Providers enabling credit/debit-card payments through our ecommerce platform.

Payment providers may process payment, transaction, fraud-prevention and related information according to their own privacy policies and terms.

Suppliers and dropshipping partners

Because The Kiddie Cove operates using a dropshipping business model, we may provide relevant customer information to suppliers, fulfilment companies, manufacturers, distributors and/or logistics providers where necessary to fulfil an order.

For example, we may provide a supplier with:

• Customer name;

• Delivery address;

• Email address or telephone number where necessary for delivery;

• Products ordered; and

• Information necessary to process returns, replacements or customer-service requests.

We only disclose information reasonably necessary for the relevant business purpose.

Where a supplier or service provider processes personal data on our behalf, we will seek to ensure appropriate contractual and data-protection safeguards are in place.

Delivery and logistics providers

We may share relevant information with postal services, couriers, freight companies and other delivery providers so that your order can be delivered.

Professional advisers and other providers

We may also disclose personal data to service providers such as:

• Accountants;

• Legal advisers;

• IT and security providers;

• Website and software providers;

• Customer-service providers;

• Fraud-prevention providers; and

• Government, regulatory or law-enforcement authorities where required or permitted by law.

We do not sell your personal data to third parties.

 

7. International Data Transfers

Because we operate internationally and use service providers that may operate in different countries, your personal data may be transferred to and processed in countries outside the United Kingdom or European Economic Area (EEA), including countries such as the United States.

Where a transfer is subject to UK GDPR or EU GDPR international-transfer requirements, we will take appropriate steps to ensure that the transfer is lawful and that appropriate safeguards are in place.

Depending on the circumstances, safeguards may include:

• An adequacy decision or adequacy regulations;

• Standard Contractual Clauses approved or recognised under applicable data-protection law;

• The UK International Data Transfer Agreement or UK Addendum, where applicable;

• Binding Corporate Rules, where applicable; or

• Another lawful transfer mechanism permitted by applicable data-protection law.

The UK ICO's current guidance confirms that international transfers must be assessed under the applicable UK transfer rules and that appropriate safeguards may be required. IICO+1

Some service providers may rely on recognised transfer mechanisms for transfers to the United States or other countries. For example, the UK has a separate adequacy arrangement relating to qualifying organisations participating in the relevant US data-transfer framework. IICO

You may contact us at info@thekiddiecove.com if you would like further information about the safeguards applicable to a particular international transfer.

 

8. How Long We Keep Personal Data

We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, accounting, tax, reporting and dispute-resolution requirements.

Retention periods may vary depending on the type of information.

For example:

• Order and transaction information: generally retained for the period required by applicable tax, accounting and legal requirements;

• Customer-service correspondence: retained for as long as reasonably necessary to resolve the matter and maintain appropriate business records;

• Marketing information: retained until you unsubscribe or withdraw consent, subject to any limited period necessary to maintain suppression records;

• Customer-account information: retained while the account remains active and for a reasonable period thereafter where necessary;

• Website and technical information: retained according to the applicable service provider's retention settings and our legitimate business and security requirements; and

• Information subject to a legal dispute: retained for as long as necessary to establish, exercise or defend legal claims.

When personal data is no longer required, we will securely delete it, anonymise it or otherwise dispose of it in accordance with applicable law.

 

9. Data Security

We take reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures may include:

• Access controls;

• Password and account-security measures;

• Encryption or secure transmission where appropriate;

• Security monitoring;

• Limiting access to personal data to people who need it;

• Use of reputable service providers; and

• Appropriate procedures for responding to security incidents.

No internet transmission or electronic storage system can be guaranteed to be completely secure. You should therefore take appropriate precautions when communicating sensitive information online.

 

10. Children's Privacy

Our products are intended for parents, guardians and other adults purchasing clothing and essentials for children and toddlers.

Our website is not intended to be used independently by children to make purchases or provide personal information.

We do not knowingly seek to collect personal information directly from children for marketing or account-creation purposes.

If you believe that a child has provided us with personal information improperly, please contact us at info@thekiddiecove.com so that we can investigate and, where appropriate, delete the information.

Where a parent, guardian or other adult provides information about a child for the purpose of fulfilling an order—for example, a child's name or measurements—that information will be processed only for the relevant business purpose and in accordance with applicable data-protection law.

 

11. Your Data Protection Rights

Depending on where you live and subject to applicable legal conditions and exemptions, you may have the following rights:

Right of access

You may ask for a copy of the personal data we hold about you.

Right to rectification

You may ask us to correct inaccurate or incomplete personal data.

Right to erasure

You may ask us to delete your personal data in certain circumstances.

This is sometimes called the "right to be forgotten". It is not an absolute right and legal exceptions may apply.

Right to restriction

You may ask us to restrict processing of your personal data in certain circumstances.

Right to data portability

Where applicable, you may request certain personal data in a structured, commonly used and machine-readable format and ask that it be transferred to another organisation.

Right to object

You may object to certain processing based on our legitimate interests.

You also have an absolute right to object to direct marketing.

Right to withdraw consent

Where we process your information based on consent, you may withdraw that consent at any time.

Rights relating to automated decision-making

Where applicable, you may have rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.

We do not intend to make decisions about customers solely by automated means that produce such effects. If this changes, we will provide the information and rights required by applicable law.

 

12. How to Exercise Your Rights

To exercise your rights, please contact:

Email: info@thekiddiecove.com

Please provide enough information for us to identify you and understand your request.

We may need to verify your identity before responding to a request in order to protect personal data from unauthorised disclosure.

We will normally respond to valid data-protection requests within the period required by applicable law. Under the GDPR, this is generally one month, although the period may be extended in certain circumstances permitted by law.

We will not normally charge a fee for exercising your rights. However, applicable law permits us to charge a reasonable fee or refuse a request where requests are manifestly unfounded or excessive.

 

13. Right to Lodge a Complaint

If you believe that we have not handled your personal data appropriately, please contact us first at:

info@thekiddiecove.com

You also have the right to lodge a complaint with a competent data-protection supervisory authority.

For customers in the United Kingdom, the relevant supervisory authority is generally the:

Information Commissioner's Office (ICO)
United Kingdom

You may find information about contacting the ICO through its official website.

For customers in the European Union, you may generally lodge a complaint with the data-protection supervisory authority in the EU Member State where you normally live, work, or where you believe an infringement has occurred.

You do not have to contact us before contacting a supervisory authority.

 

14. Marketing Communications

Where permitted by law, we may send you information about our products, offers and promotions.

Where consent is required, we will only send marketing communications after obtaining the required consent.

You can unsubscribe from marketing communications at any time by:

• Using the unsubscribe link contained in the relevant email; or

• Contacting us at info@thekiddiecove.com.

Please note that even if you opt out of marketing communications, we may still send you necessary transactional or service messages, such as order confirmations, delivery information, payment notices or responses to your enquiries.

 

15. Third-Party Websites and Services

Our website may contain links to third-party websites, applications or services.

We are not responsible for the privacy practices, content or security of third-party websites or services.

When you access a third-party service, you should review its privacy policy before providing personal information.

 

16. US Customers

Customers located in the United States may have additional privacy rights under applicable state privacy laws.

The rights and obligations applicable to US customers can vary depending on the customer's state of residence and the nature of the information and processing involved.

Nothing in this Privacy Policy is intended to limit any rights that cannot lawfully be excluded under applicable US privacy legislation.

Where applicable law requires us to provide additional privacy notices, rights or disclosures, we will do so.

 

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• Our business practices;

• Our services or technology;

• The third parties we use;

• Applicable laws and regulations; or

• Data-protection requirements.

When we make material changes, we will take reasonable steps to bring those changes to your attention.

The "Last updated" date at the beginning of this Privacy Policy indicates when it was most recently revised.

 

18. Contact Us

If you have questions about this Privacy Policy, our use of personal data, or your data-protection rights, please contact us:

The Kiddie Cove
13 Courtenay Rd.
Woking
GU215HG
United Kingdom

Email: info@thekiddiecove.com

We aim to respond to privacy enquiries promptly and in accordance with applicable data-protection law.