Privacy policy

1. Who we are

PINKBLUEMOMS LTD (“PinkBlueMoms”, “we”, “us”) is the controller of the personal data described in this policy. We’re a company registered in England and Wales (company no. 12193655), registered office 24-26 Arcadia Avenue, Fin009, London N3 2JU, United Kingdom.

For anything about your privacy, contact us at hello@pinkbluemoms.com or through our contact form (choose “Privacy or data request”).

2. The data we collect

Information you give us

• Order and account details: name, email, phone number (optional), billing and shipping address, order history and account password (stored encrypted).
• Personalization: the names, dates and text you add to products, and any photos you upload. These may include your family members’ or children’s names.
• Messages: what you send us by email, the contact form, the withdrawal form or social media.
• Newsletter: your email address and the date you joined, if you sign up.
• Reviews: your name as you choose to show it, rating and review text.

Information collected automatically

• Technical data: IP address, browser and device type, pages visited and the site you came from. Security logs are kept by our hosting provider.
• Cookies: essential cookies always, and analytics or marketing cookies only if you allow them. See our cookie policy.

Information from others

• Payment providers: confirmation of payment, the last digits and type of your card, and fraud checks. We never receive your full card number.
• Shipping carriers and our print partner: production and delivery updates.

3. How we use it and our legal basis

Under the UK GDPR and EU GDPR we must have a legal basis for each use of your data:

We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects. Providing order details is needed to buy from us. Everything else is optional.

4. Your personalization and photos

We use the names, text and photos you add only to make your order, check it and help you if there’s a problem. We don’t use them for marketing, and we don’t use them to train AI models. Uploaded photos are deleted automatically 180 days after upload. The personalization text stays in your order record (see section 8).

5. Children

Our website is for adults. It isn’t directed at children, and we don’t knowingly collect personal data from children under 16. Parents and family members often add children’s names to products. We use those names only to make the order. If you believe a child has given us personal data, contact us and we’ll delete it.

6. Who we share data with

We share personal data only as needed with:

• Our print and fulfilment partner(s), who make and ship your items (name, shipping address, phone if given, personalization and photos).
• Payment providers such as Stripe and PayPal, who process payments and check for fraud. They act as independent controllers for some of this processing under their own privacy policies.
• Shipping carriers, who deliver your parcel and may send you tracking updates.
• Service providers who run our website, hosting, email and customer support, under contracts that let them use the data only for us.
• Analytics and advertising partners (Google, Meta, TikTok, Pinterest), only if you accept those cookies.
• Professional advisers such as accountants and lawyers, and authorities where the law requires it.
• A buyer or successor if our business is sold or reorganized, under this policy.

We don’t sell personal data for money.

7. International transfers

We’re based in the UK. Some of our providers process data in other countries, including the United States and the EU. When data leaves the UK or EU, we rely on adequacy decisions or regulations (including the EU-US Data Privacy Framework and its UK Extension, where the provider is certified) or on the European Commission’s Standard Contractual Clauses with the UK Addendum, together with appropriate safeguards. Contact us for a copy of the relevant safeguards.

8. How long we keep it

9. Your rights (UK and EU)

You have the right to:

• access your personal data and get a copy;
• have inaccurate data corrected;
• have your data deleted, unless we must keep it, for example for tax records;
• restrict or object to our use of your data, including objecting to direct marketing at any time;
• receive your data in a portable format;
• withdraw consent at any time, without affecting what we did before (for cookies, use “Cookie settings” at the bottom of any page).

To use your rights, email hello@pinkbluemoms.com. We’ll reply within one month and may ask you to confirm your identity. It’s free.

You can complain to the UK Information Commissioner’s Office (ico.org.uk) or to the data protection authority in the EU country where you live (list of EU authorities). We’d appreciate the chance to help first.

10. Your rights in the United States

Depending on your state (for example California, Colorado, Connecticut, Virginia, Texas or Oregon), you may have the right to:

• know what personal information we collect, use and disclose, and get a copy;
• correct or delete it;
• opt out of the “sale” or “sharing” of personal information and of targeted advertising;
• not be treated differently for using your rights.

Sale and sharing: we don’t sell personal information for money. If you allow marketing cookies, advertising partners receive identifiers and browsing activity on our site, which some state laws treat as a “sale” or “sharing” for targeted advertising. You can opt out at any time on our Your privacy choices page. We honor Global Privacy Control (GPC) browser signals as an opt-out. We don’t knowingly sell or share the personal information of consumers under 16.

Categories collected in the last 12 months: identifiers (name, email, address, IP address); customer records (phone, payment confirmation); commercial information (orders); internet activity (pages viewed, with consent); approximate location from IP address; images you upload. Sources, purposes and recipients are described in sections 2, 3 and 6. Retention is in section 8. We don’t use sensitive personal information to infer characteristics about you.

To make a request, email hello@pinkbluemoms.com. You can use an authorized agent, and we may ask you to verify your identity. If we decline your request, you can appeal by replying to our decision with “Appeal”. If you’re unhappy with the outcome, you can contact your state Attorney General.

11. Canada

If you’re in Canada, you can ask to access and correct your personal information by emailing hello@pinkbluemoms.com. You can also contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).

12. Marketing emails

We only send marketing emails if you’ve signed up. Every email has a one-click unsubscribe link. Order and shipping emails are part of your order and are always sent.

13. Security

Our site uses encrypted connections (HTTPS). Payments are handled by PCI-compliant payment providers, and access to customer data is limited to people who need it. No system is perfectly secure, so please use a strong, unique password for your account.

14. Changes to this policy

We’ll update this page when our practices change and show the date at the top. If changes are significant, we’ll tell you by email or on the site.