Privacy policy
Nuby UK are committed to respecting and protecting your privacy as a User of the Website. The purpose of this statement is to communicate how Nuby UK will use any personal information that is obtained from you.
Nuby UK LLP (company registration no: OC348931) is owned by Luv n’ Care Ltd. Nuby UK registered office is 13 Burford Way, Boldon Business Park, Boldon Colliery, Tyne and Wear. NE35 9PZ.
Nuby UK is the controller and responsible for all personal data handled through the Website.
Data Protection Act 2018 (‘the Act’)
We comply with the Act in all our dealings with your personal data. If you have questions or complaints you would like to raise with us, please contact our data controller on this email enquiries@nuby-uk.com. Use and collection of personal information Personal data, or personal information, means any information about a living individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data) or where the personal data has been aggregated to provide generalised statistics (this is data derived from your personal data, but it no longer directly nor indirectly reveals your identity). However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.
You can visit the Website without sharing any personal data however, if you use the Website and register an account, make a purchase, or sign up for marketing communications you will be asked to provide certain personal information such as your contact details. We set out in the table below the types of personal data we might collect from you and the basis on which we process it as well as the purpose for which we process it.
Type of Personal Data | Nuby's Purpose | Who it's shared with? | Legal Basis for Processing |
Register you as a user of the Website and create an account for you. | IT systems providers and support servicers may access the live system to maintain or provide emergency IT services | Contract, Ligitimate interests | |
To place your order and complete your purchase | Contract | ||
Complete your payment | Payment service providers such as Klarna, Shopify or Paypal | Contract | |
Fulfill your order (processing of order for packing and delivery) | Logistics, distribution and delivery services | Contract | |
Website performance analysis | Legitimate interest | ||
For marketing purposes | Only if you consent to your personal data being shared with other parties | Consent |
Usually, we retain your personal data for seven years after the last contact we had with you , for legal and tax reasons. For example, we may retain your personal data for up to seven years from the date of your last order placed with us over the Website. Where or when your personal data is no longer relevant, we will ensure it is deleted or anonymised so that it is no longer personal data or within our ability to access it.
Security
Nuby keeps your personal data securely and we have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality. We conduct regular hacker and pen testing of our IT systems and security as well as conducting annual data audits. Your personal data is shared in certain circumstances under obligation of confidentiality and security, and for very limited purposes only.
Nuby UK will comply with any legal obligation to disclose or share your personal data with law enforcement authorities or court order.
In order to ensure personal data security, all personal data processed is reviewed and updated or minimised as appropriate to ensure we never hold more personal data than is necessary for the purposes we collected it from you.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Disclosures of your personal data
We may share your personal data with selected third parties for the purposes set out in the table above.
We may also share personal data with third parties to whom we may choose to sell, transfer or merge parts of our business or our assets, or where we work with third parties in a joint venture arrangement. Alternatively, we may seek to acquire other businesses or merge with them. If a change in structure or ownership happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law, and we enter into data processing or data sharing agreements with third parties to ensure the continued safety and security of your personal data. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
International transfers
Nuby UK LLP is the controller of all personal data collected through this website and will ensure no personal data is knowingly shared against EU and UK data protection laws.
Nuby UK is a UK company and part of a group of companies owned by Luv’n’Care, our American parent company. As a result, we may from time to time transfer your personal data to our parent company in the US, a third country (that is any territory outside the UK and EEA) where necessary to be processed by essential personnel for essential business purposes only. When we do so, we ensure a similar degree of protection of your personal data in the US as you would expect to benefit from in the UK, by implementing one of the appropriate safeguarding measures required by law, for example the International Data Transfer Agreement (issued under Section 119A of the Data Protection Act 2018 following UK Parliamentary approval, in force since 21 March 2022). We have also conducted a transfer risk assessment for the transfer of the personal data to the US, and take steps to ensure that your personal data is treated as confidential to Nuby when processed by Luv’n’Care in the US.
Your rights
As a data subject, you have certain legal rights in relation to your personal data, which are set out below. If you would like to exercise any of these legal rights, please contact us to let us know, you can use the email enquiries@nuby-uk.com.
1. Right of access: this is the right to access the personal data that is held about you, which can be exercised on request.
2. Right to rectification: where the personal data is inaccurate or needs to be updated, data subjects have the right to rectify the personal data held about them
3. Right to erasure: dta subjects may exercise their right to erase/ delete their personal data from the records held by a controller and their processors; this may mean that certain orders or services cannot be fulfilled.
4. Right to restrict processing: a data subject may request that their data be continued to be stored but no longer actively processed for any purpose other than storage, either for a period or permanently (until the controller deletes it in line with their policies). This may apply when personal data needs to be retained by the controller, but the data subject does not want further use to be made of it.
5. Right to data portability: a data subject may request that a controller transfers their personal data to another party.
6. Right to object: a data subject may object to the processing of their personal data for certain purposes while allowing it to be processed for other purposes.
7. Right not to be subject to automated decision making: a data subject has the right not to be subject to automated decision making without a human review of the decision reached (where automated decision making is used).
Marketing communications
Nuby UK will not use any personal data provided for marketing communications unless you have expressly consented to this previously. You can opt out of marketing communications at any time by using the unsubscribe link in the received communication.
How to complain
If you have a complaint about the way in which your data is collected or processed, we would like you to direct your complaint to us first by email to enquiries@nuby.com.
Or in writing to Nuby UK, 13 Burford Way, Boldon Business Park, Boldon Colliery, Tyne and Wear. NE35 9PZ
If we cannot resolve your complaint, you also have the right to contact the ICO:
Information Commisioner’s Office. Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF
Helpline number: 0303 123 1113
Online: www.ico.org.uk
This policy was last updated: February 2023