Privacy Policy

Privacy Notice & Data Protection Policy

Last updated: July 2026

Welcome to Hey There Cherry Baby ("we", "us", "our").

Hey There Cherry Baby also trades as Cherrybaby and Cherry on Top Printables and publishes content through Cherry Pip.

We are committed to protecting your privacy and handling your personal information with transparency, care and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Notice explains:

  • What personal information we collect
  • How we use it
  • How we store and protect it
  • Who we share it with
  • Your rights under UK data protection law

By using our website or purchasing our products, you agree to the practices described in this Privacy Notice.

1. Who We Are

Trading Name:
Hey There Cherry Baby
(also trading as Cherrybaby, Cherry on Top Printables and Cherry Pip)

Website:
https://www.cherrybaby.co.uk

Business Location:
United Kingdom

For any privacy-related inquiries, please contact:

📧 hello@cherrybaby.co.uk

You may contact us at any time to:

  • Request a copy of the personal information we hold about you
  • Correct inaccurate information
  • Request deletion of your information where applicable
  • Exercise any of your rights under UK GDPR

2. What Personal Data We Collect

We collect information you provide directly, information generated automatically through your use of our website, and information received from trusted third parties where necessary to fulfil your order.

Information you provide to us

This may include:

  • Name
  • Billing address
  • Delivery address
  • Email address
  • Telephone number (where provided)
  • Order information
  • Personalisation or customisation requests
  • Enquiry messages
  • Marketing preferences

Payment Information

Payments are processed securely through trusted payment providers including, where selected:

  • Shopify Payments
  • PayPal
  • Klarna
  • Apple Pay
  • Google Pay

We do not store or have access to your full debit or credit card details.

Information collected automatically

When you browse our website, certain information may be collected automatically, including:

  • IP address
  • Device information
  • Browser type
  • Operating system
  • Pages viewed
  • Time spent on our website
  • Referral website
  • Cookies and similar technologies

This information helps us:

  • Improve website performance
  • Understand how visitors use our website
  • Prevent fraud
  • Maintain website security
  • Improve the products and services we offer

3. How We Use Your Information

We only use your personal information where we have a lawful reason to do so.

Your information may be used for:

Processing your orders

Including:

  • Processing payments
  • Preparing your order
  • Delivering physical products
  • Providing digital downloads and printable products
  • Delivering Canva template links where applicable
  • Managing returns or exchanges

Customer Service

Including:

  • Responding to inquiries
  • Resolving issues
  • Providing order updates
  • Handling complaints

Business Administration

Including:

  • Maintaining business records
  • Accounting
  • HMRC compliance
  • Fraud prevention
  • Maintaining website security

Marketing

Where you have given your consent, or where permitted by law, we may send you:

  • Newsletters
  • Product launches
  • Offers and promotions
  • Seasonal collections
  • Marketing emails

If you have purchased from us, we may also send service-related communications such as:

  • Order confirmations
  • Dispatch notifications
  • Digital download information
  • Post-purchase emails
  • Customer service updates

Where you have subscribed to receive marketing communications, you may also receive automated emails, such as welcome emails or carefully timed follow-up communications, based on your interactions with our business.

You can unsubscribe from marketing communications at any time using the unsubscribe link included in our emails.

4. Our Legal Basis for Processing Personal Data

Under UK GDPR, we process personal information using one or more of the following lawful bases:

Contract

Where processing is necessary to fulfill your order or provide a service you have requested.

Legitimate Interests

We may process personal information where it is necessary for our legitimate business interests, provided these interests do not override your rights.

Examples include:

  • Improving our website
  • Understanding customer behaviour
  • Preventing fraud
  • Providing customer support
  • Improving our products and services
  • Responding to inquiries
  • Managing our business efficiently

Legal Obligation

Where we are required to keep records for:

  • Tax purposes
  • Accounting
  • HMRC requirements
  • Legal compliance

Consent

Where required, we rely on your consent for activities such as:

  • Email marketing
  • Certain cookies
  • Website analytics
  • Other optional marketing technologies

You may withdraw your consent at any time.

5. Use of AI Tools

We may use trusted AI-powered tools to assist with administrative tasks, research, drafting written content and improving customer communications.

Where personal data is processed using these tools, we take reasonable steps to ensure it is handled securely and only where appropriate.

We do not use AI to generate product photography, product mock-ups or artwork representing products for sale. Product photographs and product imagery are created using original photography, licensed design assets or original designs unless clearly stated otherwise.

We do not knowingly use customer personal information to train public AI models.

6. How Orders Are Fulfilled

We sell both physical and digital products.

Physical products

Some products are prepared and dispatched directly by us.

Others may be shipped by carefully selected fulfillment partners based in the UK, including SDConnect.

Where necessary to fulfill your order, we may share:

  • Your name
  • Delivery address
  • Items ordered

Our fulfillment partners do not receive your payment details.

Digital products

Our digital products include downloadable files and editable Canva templates sold through Hey There Cherry Baby, Cherry on Top Printables and Cherry Pip.

To provide these products, we may process:

  • Your name
  • Email address
  • Order details
  • Download information

This information is used solely to deliver your purchase, provide customer support and maintain purchase records.

7. Who We Share Personal Data With

We do not sell, rent or trade your personal information.

We only share your information where necessary to operate our business, fulfill your order or comply with legal obligations.

This may include:

  • Shopify (our eCommerce platform and website hosting provider)
  • Shopify Payments
  • PayPal
  • Klarna
  • Apple Pay
  • Google Pay
  • Royal Mail
  • Evri
  • DPD
  • SDConnect (where applicable for order fulfillment)
  • Shopify Email (for customers who have chosen to receive marketing communications)
  • Google Analytics (where enabled)
  • Pinterest (where applicable through Pinterest integrations)

If you choose to interact with our Instagram Shop, your information may also be processed by Meta in accordance with their own Privacy Policy.

Each provider processes information only as required for the services they provide and is responsible for protecting your information in accordance with applicable data protection laws.

8. Data Retention

We only keep personal information for as long as necessary for the purpose it was collected or where required by law.

Typical retention periods include:

  • Order records: up to 6 years to meet accounting and legal obligations.
  • Customer service inquiries: up to 24 months.
  • Marketing information: until you unsubscribe or ask us to remove your details.
  • Website analytics: retained in accordance with the settings of the relevant analytics provider.

Where there is no legal reason to retain your information, we will securely delete or anonymise it.

9. Your Rights Under UK GDPR

You have the right to:

  • Request access to the personal information we hold about you.
  • Request correction of inaccurate or incomplete information.
  • Request deletion of your personal information where applicable.
  • Request restriction of processing.
  • Object to certain types of processing.
  • Request a copy of your information in a portable format where appropriate.
  • Withdraw consent where processing is based on consent.

To exercise any of these rights, please contact:

📧 hello@cherrybaby.co.uk

If you are unhappy with how we have handled your personal information, you also have the right to complain to the Information Commissioner's Office (ICO).

Further information can be found at:

https://ico.org.uk/

10. Cookies and Website Analytics

Our website uses cookies and similar technologies to ensure it functions correctly, improve your browsing experience and help us understand how visitors use our website.

These may include:

  • Strictly Necessary Cookies – essential for the website, shopping basket and checkout.
  • Performance and Analytics Cookies – to help us understand website usage and improve performance.
  • Security Cookies – to protect against fraud and maintain website security.
  • Preference Cookies – to remember your settings where applicable.

Where required, you will be asked for your consent before optional cookies are placed on your device.

You can choose to accept, reject or manage your cookie preferences using our cookie consent banner or by adjusting your browser settings.

For more detailed information, please see our Cookie Policy.

11. Marketing Communications

We will only send marketing communications where:

  • You have subscribed to receive them.
  • You have provided your consent where required.

Marketing communications may include:

  • Newsletters
  • Promotions
  • Product launches
  • Seasonal collections
  • Business updates

Where appropriate, we may also send carefully timed automated emails relating to your customer journey, including welcome emails and post-purchase communications.

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link included within our emails or by contacting us at:

📧 hello@cherrybaby.co.uk

12. Children's Privacy

Our website and products are intended for use by adults.

We do not knowingly collect personal information from anyone under the age of 18 without appropriate consent.

If we become aware that we have unintentionally collected such information, we will take reasonable steps to delete it.

13. Security

We take appropriate technical and organisational measures to protect your personal information.

These include:

  • Secure encrypted connections (SSL/HTTPS)
  • Secure website hosting through Shopify
  • Access controls
  • Password protection
  • Trusted third-party service providers

We regularly review our security measures and only work with reputable third-party providers that implement appropriate technical and organisational safeguards to protect personal data.

Although we take reasonable steps to protect your information, no method of electronic transmission or storage can be guaranteed to be completely secure.

14. International Transfers

Although we are based in the United Kingdom, some of the third-party providers we use may process personal information outside the UK.

Where this occurs, appropriate safeguards are in place to protect your information, including:

  • UK adequacy regulations where applicable.
  • The UK International Data Transfer Agreement (IDTA) or other approved transfer mechanisms where required.

These safeguards help ensure your personal information receives an appropriate level of protection.

15. Automated Decision-Making

We do not make decisions about customers based solely on automated processing that produces legal or similarly significant effects.

Where automated systems are used to support services such as fraud prevention, marketing or website functionality, meaningful human oversight remains in place where appropriate.

16. Third-Party Websites

Our website may contain links to third-party websites and services, including social media platforms and online marketplaces.

These may include:

  • Etsy
  • Instagram
  • Pinterest
  • YouTube
  • TikTok

We are not responsible for the privacy practices or content of external websites.

We encourage you to read their privacy notices before providing personal information.

17. Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our business, legal requirements or the services we use.

Any updates will be published on this page and the "Last Updated" date at the top of this notice will be amended accordingly.

18. Contact Us

If you have any questions about this Privacy Notice or wish to exercise any of your rights, please contact us:

Hey There Cherry Baby

📧 hello@cherrybaby.co.uk

Collections