1. Who we are (Data Controller)

This website is operated by AIKO BABY LTD (“Aiko Baby”, “we”, “us”, “our”). We are the data controller for personal data collected through aikobaby.co.uk.

• Company number: 16557361
• Registered office: Suite 71, 61 Bridge Street, Kington, Herefordshire, United Kingdom, HR5 3DJ
• Email: contact@aikobaby.co.uk
• Phone: 07897021795

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What data we collect

• Identity & Contact Data: name, billing/delivery address, email address, phone number.
• Order & Support Data: items purchased, order numbers, returns/exchanges, communications with our support team.
• Payment Data: processed exclusively via PayPal. We do not store full card numbers or bank details.
• Technical & Usage Data: IP address, device/browser information, pages viewed, referring URLs, and cookie identifiers.
• Marketing Preferences: your choices about receiving email marketing.

Age restriction: Our site and checkout are intended for adults (18+). We don’t knowingly collect data from children.

3. Why we use your data (lawful bases)

• To fulfil your order (contract): process payments via PayPal, deliver goods, provide tracking, returns and refunds.
• Customer service & warranty (contract/legitimate interests): handle queries, exchanges and fault investigations.
• Fraud prevention & security (legitimate interests/legal obligation): verify identity, protect accounts and our services.
• Service improvement & analytics (legitimate interests): understand site performance and improve user experience.
• Marketing (consent): send offers/newsletters if you opt in; you can withdraw consent at any time.
• Legal & compliance (legal obligation): record keeping for tax/audit; handling statutory consumer rights.

4. Sharing your data

We do not sell your personal data. We share it only with:

• Payment processor: PayPal (payment authorisation, refunds, fraud checks).
• Delivery partners: UK couriers/postal services for shipping and returns.
• IT & hosting providers: to run our website, email and customer service systems.
• Analytics & security tools: to help secure and improve our site. All providers process data under appropriate contracts and must protect it in line with data protection law.

5. International transfers

Some service providers may process data outside the UK. Where this occurs, we use appropriate safeguards (e.g., UK International Data Transfer Agreement or equivalent contractual clauses).

6. Retention

We keep personal data only as long as necessary for the purposes collected, and to meet legal/accounting requirements. Typical periods:

• Orders & invoices: up to 6 years after the end of the financial year (tax/audit).
• Customer service records: up to 2 years after resolution.
• Marketing data: until you withdraw consent or after 24 months of inactivity.
• Cookies: per cookie type/expiry (see Section 9).

When data is no longer needed, we will securely delete or anonymise it.

7. Your rights

Under UK GDPR, you have the right to:

• Access your personal data.
• Rectify inaccurate or incomplete data.
• Erase data in certain circumstances.
• Restrict or object to processing in certain circumstances.
• Data portability for information you provided to us.
• Withdraw consent to marketing at any time (use the unsubscribe link in emails or contact us).

To exercise your rights, contact contact@aikobaby.co.uk. We may ask for proof of identity. We aim to respond within one month.

8. Marketing choices

We send marketing emails only with your consent. You can opt out at any time by clicking Unsubscribe in our emails or emailing contact@aikobaby.co.uk. Opting out won’t affect service emails (order confirmations, delivery updates, returns).

9. Cookies & similar technologies

We use:

• Strictly necessary cookies (essential for checkout, security and account features).
• Performance/analytics cookies (to measure and improve the site).
• Preference cookies (to remember choices like currency or region).

You can manage cookies in your browser settings. If you use a cookie banner on Shopify, link it to this section or a dedicated Cookie Policy page. Blocking some cookies may impact site functionality.

10. PayPal payments

All payments are processed by PayPal. Depending on your PayPal settings, PayPal may act as an independent controller for some processing (e.g., fraud prevention). Please refer to PayPal’s privacy notices for details. We receive confirmation of payment, refunds and limited fraud-screening results; we don’t receive full card numbers.

11. Children’s privacy

We don’t knowingly collect information from children or allow them to make purchases. If you believe a child has provided data, please contact us so we can delete it.

12. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

13. Changes to this policy

We may update this policy from time to time. We’ll post the latest version on this page and change the Effective date above. For significant changes, we’ll give a prominent notice on our website.

14. How to contact us & complaints

Questions or requests about this policy: contact@aikobaby.co.uk or 07897021795.

If you are not satisfied with our response, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.