PRIVACY POLICY

Who we are?

We are a group of companies which includes Mamas & Papas (Stores) Limited, Mamas & Papas (Digital) Limited and Mamas & Papas (Concessions) Limited (collectively called “Mamas & Papas”). Each is a Data Controller responsible for deciding how your personal information is collected, stored and used.

What information Do We Collect and How We Use It?

We collect the personal information that you provide when you:

• Browse our website;
• Create an account with us;
• Purchase vouchers or redeem vouchers;
• Purchase products;
• Enter any prize draws or competitions;
• Complete surveys;
• Comment on or review our products or services;
• Sign up for news, offers, events and new product launches;
• Book an appointment for a Car Seat Fitting Appointment, Parent to Be Event or a Personal Shop;
• Contact us via the website or telephone

This is in order to fulfil the specific process that you have asked for. We will never collect more than is necessary in line with the Data Minimisation Principle of GDPR.

We will hold about you:

• Your Name;
• Your Address and Delivery Address if different;
• A contact telephone number and e-mail address;
• Your marketing preferences;
• When buying a Gift Card online, as well as the above, the e-mail address of the recipient

When you make an appointment at a Car Seat Fitting, Parent to be Event or a Personal Shop we may request your baby’s due date or child’s birthday. We use this information to be able to deliver a tailored experience for you and your baby.

We use the above data to carry out your instructions to us i.e. when you buy something from us online, we use your information to take payment and deliver the items to you.

When you have an “Authorised Person” on your account, we will need to take the same personal information relating to them, so that they can access your account and go through the Identification and Verification Process. In your account, we also have a notes section in which we record details of conversations that we have with you; this is so that we have an audit trail and for dispute resolution.

We use cookies on our website which collect information from you such as your browsing patterns. Please see our Cookie Policy for more information.

We operate CCTV monitoring to ensure staff and customer safety and for the prevention and detection of crime. Please see our CCTV notices displayed in store for further information.

back to top

What information Do We Collect from Third Parties?

We do not collect any information from Third Parties.

back to top

What is Our Legal Basis for Processing?

Our legal basis for processing your information is “for the performance of a contract”. This is applicable when you buy something from us or create an account or use or buy vouchers from us.

For Marketing we use the basis of Consent for processing. In limited circumstances we may also rely on legitimate interests instead of consent where we have used “Soft-Opt in”.

A legitimate Interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests.

When you book a Car Seat Fitting Appointment, Parent to be Event or a Personal Shop we use the legal basis of taking preliminary steps for a contract as our legal basis as this is at your request prior to you potentially purchasing goods from us.

For our mailing and marketing lists, we use the basis of consent for processing. This can be withdrawn at any time by using the unsubscribe link contained within each e-mail.

For meeting legal and compliance obligations, we rely on the basis for compliance with a legal obligation.

back to top

What Happens If I don’t Provide My Information?

We will not be able to process your order, as we will be unable to enter into a contract with you or respond to you or meet our obligations under it.

back to top

Will we use your Personal Information for Automated Decision-Making?

We do not use your personal information to make automated decisions about you.

back to top

Will We Change the Purpose for Using your Information?

We will only use your personal information for the purposes set out above.

back to top

How Long Do We Keep Your Information?

We will keep your personal information in our active systems for six years in accordance with our Records Retention Policy. The personal information will then be moved to a secure deep archive where it will be stored for up to Ten years to satisfy legal obligations relating to product recalls and child personal injury claims. Where you have consented for us to contact you for marketing purposes we will store your personal information for up to three years before asking you to re-consent to our contacting you for marketing purposes.

back to top

Who Do We Share Your Information with?

We may share your personal information with trusted third parties from time to time. We will not, however, share your personal information with a third party for marketing purposes. We do not sell any personal information to any third party so that they can send you their marketing material.

We have set out below the third parties we may share your personal information with. We will put in place technical and organisational measures to protect your data and how your personal information may be used in accordance with data protection laws:

• Group Companies:
  We may share your personal information with companies forming part of the Mamas & Papas group for the purposes of order fulfilment. This is necessary for the performance of a contract.
• Card Payment Processor:
  We work with trusted third party payment processing providers in order to securely take and manage payments. This is necessary for the performance of a contract.
• IT Suppliers:
  We use third parties to provide us with our IT systems and support for them. They may access your personal information to the extent that they need to in order to provide their services.
• Delivery Companies:
  We use third parties to deliver your order to you or to deliver it to store for collection.
• Finance Company:
  If you choose to apply for credit, we will share the information collected to set up a Mamas & Papas account (full name, address, telephone number and email address) with the provider of the credit. This information will auto populate into our finance company’s portal. They then become the controller of that information and will ask for additional information in order to undertake credit checks and process your application. They will have their own privacy policy relating to how this information is used by them and this is necessary for performance of a contract.
• Website Analysis and Profiling Companies:
  We use third parties to analyse how our website is used such as analysis of browsing or customer traffic patterns to enable us to improve our website and your experience of it. They also help us to tailor the information and offers we send to you.
• Survey and Marketing Companies:
  We use third parties to send out and administer our surveys and send out some of our marketing like Dotmailer, Survey Monkey, Text Anywhere and Feefo.
• Legal and Regulatory Requirements:
  We will share your personal information with entities, companies or individuals where this is necessary to comply with any law, rule, regulation, legal procedure.
• Professional Advisors:
  We may also share your personal information with our professional advisors (including lawyers, insurers and/or insurance brokers) to take advice e.g. in connection with any complaint or claim which you make.
• Merger:
  In the unlikely event that we sell all or part of our business, or merge with another organisation, we may transfer personal information that we have collected as described in this privacy policy, along with our other business assets, to the organisation that we are selling to or merging with.
• Klarna:
  If you decide to take advantage of Klarna’s payment options, we will pass onto Klarna the personal information you provided us including contact and billing plus order details. This is in order for Klarna to assess whether you qualify for their payment options and to tailor the payment options for you.

  We will then redirect you to Klarna’s website where your personal data is handled in accordance with applicable data protection law and in accordance with the information in Klarna’s privacy policy and general information on Klarna you can find here.

  We will only disclose such personal information to any third party as is necessary to enable them to carry out the function or purpose for which it is disclosed. For example, we will only disclose such personal information to a carrier as is necessary to enable them to deliver or collect your product.

  Our legal basis for sharing your personal information with the other organisation’s set out above is that it is in our legitimate interests to do this to run our business effectively and to provide the best customer experience to you. If you would like further information about our legitimate interests, then please contact our DPO.

back to top

Do We Transfer Information Outside the UK/EEA?

We may, from time to time, transfer information outside of the European Economic Area (EEA). When we do, we will ensure that the same level of protections are in place as if your data were processed within the EEA.

back to top

How Do We Keep Your Information Secure?

We have put in place technical and organisational measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties (see above) who have a business need-to-know. They are subject to a duty of confidentiality.

We have put procedures in place to deal with any suspected data security incident and will notify you and any applicable regulator of a suspected incident where we are legally required to do so.

Our security procedures mean that we may occasionally request proof of identity before we are able to disclose personal information to you.

back to top

What Are Your Rights?

You have a number of rights over your personal information, which are:

• the right to ask us what personal information we have about you and to have a copy of your personal information from us;
• the right to ask us to correct any errors in your personal information;
• the right to object to our legitimate interests and our profiling activities where these are based on our legitimate interests;
• the right to object to us sending you marketing communications;
• the right to ask us to delete your personal information. In certain circumstances we may object to this right as it is not absolute. This could be where we need to retain the information in defence of any possible future claims and warranties. We will inform you in this is the case;
• the right to ask us to restrict the use that we are making of your personal information;
• the right to ask us to transfer your personal information in certain circumstances; and
• where our use of your personal information is based on your consent, the right to withdraw your consent at any time by contacting us at: [email protected] or 01484 438200 or Mamas & Papas Limited, Colne Bridge Road, Huddersfield, HD5 0RH, UK.

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), (the UK regulator for data protection issues. See www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO and so, if you are happy to do so, please contact us in the first instance and we will try to resolve your issue

back to top

Does This Policy Cover Other Websites?

Links within our website to other websites, such as Facebook and LinkedIn, are not covered by this privacy policy. You should review the privacy information on those other websites to find out how they may use your personal information.

back to top

How You Can Contact Us

If you have any questions about this privacy policy or about the ways we use your personal information, please contact our Data Protection Officer at [email protected] or 01484 438200 or Mamas & Papas Limited, Colne Bridge Road, Huddersfield, HD5 0RH, UK.