Privacy Policy — Hey There Cherry Baby / Cherrybaby / Cherry on Top Printables
Last updated: 1/12/25
Welcome to Hey There Cherry Baby / Cherry on Top / Cherrybaby (“we”, “us”, “our”).
We are committed to protecting your privacy and handling your personal information with transparency, care and compliance with UK data protection laws.
This Privacy Policy explains:
-
what information we collect,
-
how we use it,
-
how it is stored,
-
who we share it with,
-
your rights under GDPR.
By using this website or purchasing our products, you agree to the practices described below.
1. Who We Are
Trading name: Cherrybaby / Hey There Cherry Baby
Website: https://www.cherrybaby.co.uk
Business location: United Kingdom
For privacy enquiries, email:
📩 hello@cherrybaby.co.uk
You can request your data, make corrections or ask to delete your information via this address.
2. What Personal Data We Collect
We collect information you provide directly, information generated automatically through website use, and information from third parties where required to fulfil your order.
A. Information you provide to us
Examples include:
-
Name
-
Billing and delivery address
-
Email address
-
Phone number (if provided)
-
Order information
-
Customisation notes
-
Enquiry messages
-
Marketing preferences
B. Payment data
Payments are handled securely by our payment processors (Shopify Payments, PayPal, Klarna, Google Pay, Apple Pay, etc.).
We never store or have access to your full card details.
C. Automatically collected information
When you browse our website, we may collect:
-
IP address
-
Device information
-
Browser type
-
Pages visited
-
Time spent on site
-
Referral URL
-
Cookies (see Section 9)
This information is used for analytics, website performance and fraud prevention.
3. How We Use Your Information
We use your data to:
-
Process and fulfil orders
-
Order management
-
Delivery
-
Handling returns or support
-
Digital file delivery (if applicable)
-
Customer service
-
Respond to enquiries
-
Provide updates
-
Handle issues or complaints
-
Legal or tax obligations
-
Accounting requirements
-
HMRC reporting
-
Business record keeping
-
Marketing (if you opt-in)
-
Email newsletters
-
Offers and product updates
-
Product launches
You may unsubscribe at any time.
4. Legal Basis for Processing (UK GDPR)
We process your information under the following legal grounds:
-
Contractual necessity: To fulfil your order or provide a service you request.
-
Legitimate interest: Website analytics, fraud prevention, customer communication.
-
Legal obligation: Record keeping, tax and regulatory requirements.
-
Consent: Email marketing, cookies, certain analytics tools.
5. How Your Orders Are Fulfilled
We operate both self-fulfilled and partner-fulfilled products.
A. Items shipped directly by us
Example: Cherrybaby wax melts or handmade goods.
We process your order using the details you provide and ship via trusted carriers.
B. Curated items
Some home decor, accessories, mugs or similar items may be dispatched directly by our UK fulfilment partner(s), including SDConnect.
These providers receive:
-
Your name
-
Delivery address
-
Items ordered
They do not receive your payment details.
We only share information necessary to fulfil your order.
6. Who We Share Personal Data With
We do not sell or trade your information.
We may share limited information with:
-
Payment processors (Shopify Payments, PayPal, Klarna etc.)
-
Delivery couriers (Royal Mail, Evri, DPD, etc.)
-
Fulfilment partners (SDConnect or other suppliers)
-
Shopify (hosting and e-commerce platform)
-
Email marketing software (if subscribed voluntarily)
-
Analytics and anti-fraud tools
All third-party services are required to meet GDPR standards and process your data securely.
7. Data Retention
We keep your data only as long as necessary for the purpose collected.
Examples:
-
Order records: up to 6 years, for tax and legal obligations
-
Customer service enquiries: up to 24 months
-
Marketing data: until you unsubscribe or request deletion
You may request deletion earlier where no legal obligation prevents it.
8. Your Rights Under GDPR
You have the following rights:
-
Right to access — request the data we hold about you
-
Right to rectification — correct inaccurate information
-
Right to erasure (“right to be forgotten”)
-
Right to restrict processing
-
Right to data portability
-
Right to object to processing
-
Right to withdraw consent
-
Right to lodge a complaint with the ICO
To exercise your rights, contact:
📩 hello@cherrybaby.co.uk
If you are unsatisfied, you may contact the UK Information Commissioner’s Office:
https://ico.org.uk/
9. Cookies & Analytics
Our website uses cookies to enhance browsing and support core functionality.
Types of cookies we may use:
-
Strictly necessary (cart, checkout, session login)
-
Performance/Analytics (Google Analytics or Shopify analytics)
-
Security & fraud prevention
-
Marketing & preference cookies
You can manage cookies via your browser settings or consent controls on our site.
10. Marketing Communications
We only send marketing emails if:
-
You sign up voluntarily, or
-
You opt-in at checkout
You can unsubscribe at any time using the link in the footer of our emails or by emailing
📩 hello@cherrybaby.co.uk
11. Children’s Privacy
Our site is not intended for children under 13.
We do not knowingly collect personal data from minors without parental consent.
12. Security
We use appropriate technical and organisational safeguards, including:
-
Encrypted connections (SSL / HTTPS)
-
Secure hosting
-
Access controls
-
Shopify platform protections
No system is 100% secure, but we take reasonable steps to protect your information.
13. International Transfers
Some service providers (for example Shopify or cloud storage) may process data outside the UK or EU.
Where this occurs, it is protected through:
-
Adequacy decisions, or
-
Standard Contractual Clauses (SCCs)
This ensures GDPR compliance.
14. Third-Party Links
Our website may include links to third-party platforms (Etsy, Instagram, TikTok, etc.).
We are not responsible for the privacy practices of external websites.
We encourage you to review their privacy policies separately.
15. Changes to This Privacy Policy
We may update this Privacy Policy as our business practices evolve.
The date above will always reflect the most recent version.
16. Contact
For questions or requests, please email:
