Politique de confidentialité
1. Who we are
Nappyworld UK ("we", "us") runs the online shop at nappyworlduk.com. We are the data controller for the personal information described in this policy, which explains what we collect, why, and the choices you have. It applies to our website, our orders and our customer service.
Nappyworld UK is the trading name of Elizabeth Flanagan, a sole trader, based at:
Unit 311 Ringwood Road (next to 319), Ferndown, Dorset, BH22 9AD, United Kingdom
- Email: nappyworlduk@gmail.com
- Phone: 07957 730268 (Monday to Saturday, 8am to 5pm)
Please contact us using these details about anything in this policy, including to use any of your rights.
2. Information we collect
Information you give us
- Order details: your name, delivery and billing address, email address, phone number and the items you buy.
- Payment details: card and wallet payments (including Shop Pay, Apple Pay and Google Pay) are processed securely by our payment providers. We do not see or store your full card number.
- Account details: if you create an account, your login details and order history.
- Messages: anything you send us by email, phone or our contact form, such as questions or returns requests.
- Marketing choices: whether you have agreed to receive marketing emails or texts.
Information collected automatically
When you visit our website we collect technical information, such as your IP address, browser and device type, approximate location, the pages you view, how you arrived at our site (for example, from a Google search or ad), and what you add to your basket. Some of this is collected using cookies and similar technologies — see section 5.
3. How we use your information
UK data protection law (the UK GDPR and the Data Protection Act 2018) requires a lawful reason for each use. Ours are:
| What we use it for | Our lawful reason |
|---|---|
| Processing, packing and delivering your order, and sending order and delivery updates | To perform our contract with you |
| Taking payment and preventing fraud | Contract, and our legitimate interest in preventing fraud |
| Handling returns, refunds and customer service | Contract, and our legal obligations under consumer law |
| Keeping accounting and tax records | Legal obligation |
| Sending marketing emails or texts | Your consent — you can unsubscribe at any time |
| Measuring how our website and ads perform, and improving our shop | Your consent (cookies), and our legitimate interest in running our business |
| Showing you our ads on Google, Facebook and Instagram | Your consent (cookies) |
We do not sell your personal information, and we do not make decisions about you using fully automated processing.
4. Sensitive products and health information
Some of our products, such as incontinence and personal care items, could suggest something about your health. We treat these purchases as sensitive.
- We use this information only to fulfil, deliver and support your order.
- We do not use it to target you with personalised advertising, and we do not add you to advertising audiences based on these purchases.
- These items are shipped in plain, discreet packaging.
- Only the people and services who need it to handle your order can see it.
5. Cookies, analytics and advertising
Cookies are small files stored on your device. When you first visit, our cookie banner asks for your choice. Only essential cookies are used until you agree to more.
- Essential cookies keep your basket, checkout and login working. These are always on.
- Analytics cookies — we use Google Analytics to understand how visitors use our site, such as which pages are viewed and which products are added to the basket.
- Advertising cookies — we use Google Ads and the Meta (Facebook) Pixel to show our products on Google, Facebook and Instagram, and to measure which ads lead to sales.
If you decline analytics or advertising cookies, those cookies are not set on your device. Google may still receive limited, cookieless signals (for example, that a purchase happened) so we can measure our ads in aggregate, without identifying you.
You can change your choice at any time using the cookie settings link at the bottom of our website. You can also limit ad personalisation in your Google account at adssettings.google.com, opt out of Google Analytics at tools.google.com/dlpage/gaoptout, and manage Facebook and Instagram ad preferences at facebook.com/adpreferences.
6. Who we share your information with
We share only what each service needs to do its job:
| Who | Why |
|---|---|
| Shopify | Runs our online shop, checkout and order system |
| Payment providers (Shopify Payments, Shop Pay, Apple Pay, Google Pay) | Take payment securely and prevent fraud |
| Delivery companies (DHL, Royal Mail, FedEx and our next-day courier) | Deliver your order — they receive your name, address and contact details |
| Google (Analytics, Ads and Merchant Center) | Measure our website and ads, and show our products on Google, according to your cookie choices |
| Meta (Facebook and Instagram) | Measure our ads and show our products on Facebook and Instagram, according to your cookie choices |
| Our accountant and HMRC | Keep legally required financial records |
We may also share information if the law requires it, to protect our rights, or if our business is sold (in which case the buyer must protect it in the same way).
7. International transfers
Some of the services above, including Shopify, Google and Meta (Facebook), store or process information outside the UK, for example in Canada, Ireland and the United States. When this happens, it is protected by approved safeguards, such as UK adequacy regulations or the UK International Data Transfer Agreement or Addendum. If we deliver your order abroad, your delivery details are shared with carriers in the destination country.
8. How long we keep your information
| Information | How long |
|---|---|
| Orders and payment records | 6 years from the end of the financial year, as required for tax |
| Customer account | Until you ask us to close it, or after 3 years without activity |
| Customer service messages | 2 years after your last contact |
| Marketing preferences | Until you unsubscribe, then a suppression record so we don't contact you again |
| Website analytics (Google Analytics) | Up to 14 months |
After these periods we delete or anonymise the information.
9. Your rights
Under UK data protection law you have the right to:
- Access the personal information we hold about you
- Correct information that is wrong or incomplete
- Delete your information, where we have no legal reason to keep it
- Restrict or object to how we use it, including for marketing
- Withdraw consent at any time, for example to marketing or cookies
- Data portability — receive information you gave us in a usable format
To use any of these rights, email nappyworlduk@gmail.com or call 07957 730268. We will reply within one month. There is normally no charge.
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113.
10. Security, children and changes
Security. Our website uses an encrypted (HTTPS) connection, and payments are handled by secure, PCI-compliant providers. Access to customer information is limited to those who need it.
Children. Our shop is for adults. We do not knowingly collect information from anyone under 18; if you believe a child has given us information, contact us and we will delete it.
Changes to this policy. We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.
Last updated: 7 November 2026