Effective Date: 17/05/2025
At Bud and Friends, we are committed to protecting your privacy and handling your personal information with care. This Privacy Policy explains what data we collect, how we use it, and your rights as a customer.
1. Who We Are
Bud and Friends is a UK-based business providing monthly educational activity boxes for children. If you have any questions about this policy, you can contact us at:
📧 learn@budandfriends.com
2. What Information We Collect
We collect and process the following types of personal data:
- Name and contact details (email address, postal address, phone number)
- Payment information (processed securely via Stripe, PayPal, etc. — we do not store card details)
- Order history and preferences
- Optional: Your child’s name or age if provided to tailor activities
3. How We Use Your Information
We use your data to:
- Process and deliver your subscription boxes
- Communicate with you about your order or account
- Send you service emails (e.g., shipping notifications)
- Improve our products and customer experience
- Send occasional marketing emails (only if you’ve opted in)
4. Legal Basis for Processing
Under UK data protection law, we process your data on the following bases:
- Contract – to fulfil your subscription and deliver your boxes
- Consent – where you’ve opted into marketing
- Legitimate interests – such as improving our services
5. Marketing Preferences
You’ll only receive marketing emails if you explicitly opt in. You can unsubscribe at any time using the link in the email or by contacting us directly.
6. Sharing Your Data
We never sell your data. We may share your data with trusted third parties who help us run our service (e.g., payment processors, couriers, email providers). These partners are GDPR-compliant and only process your data for the intended purpose.
7. Data Storage and Security
We store your data securely using reputable cloud-based platforms. We use encryption and access controls to protect your personal information.
8. How Long We Keep Your Data
We retain your data only as long as necessary to provide our service and meet legal obligations (e.g., tax/accounting purposes). You can request deletion of your account at any time.
9. Your Rights Under UK GDPR
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate information
- Request deletion of your data (“right to be forgotten”)
- Object to or restrict how we use your data
- Withdraw consent (where processing is based on consent)
To exercise your rights, email us at [Insert email address].
10. Cookies
We use cookies on our website to improve functionality and gather basic analytics (e.g., via Google Analytics). You can manage your cookie preferences through your browser settings.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be posted on our website with the effective date.
12. Complaints
If you’re unhappy with how we handle your data, please contact us first. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
📍 www.ico.org.uk
