Privacy Policy
This policy explains what we do with your personal data, and it is separate from our Cookie Policy. It is written to the UK GDPR and the Data Protection Act 2018.
Who is responsible
The data controller for this store is Hushly LLC, a single member limited liability company formed in the State of New Mexico, United States, New Mexico Secretary of State entity ID 0008107153, registered office 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, United States, trading as Hushly Kids. Hushly LLC decides the purposes and the means of the processing described here. Full company detail is on our Company Information page.
For anything to do with your personal data, including a request to see, correct or delete it, write to us through our contact page and mark your message for the attention of the data controller, or write to the registered office address above. We do not currently appoint a data protection officer, as our processing does not meet the thresholds that require one.
What we collect and why
| Purpose | Data | Lawful basis (UK GDPR) | Retention |
|---|---|---|---|
| Processing and delivering your order | Name, address, email, phone, order detail | Performance of a contract | 7 years, to meet tax and accounting obligations |
| Payment and fraud prevention | Payment metadata handled by our payment provider | Legal obligation and legitimate interests | 7 years |
| Customer service | Correspondence and order history | Contract and legitimate interests | 3 years from last contact |
| Marketing emails | Email address, engagement data | Consent | Until you withdraw consent |
| Analytics and site performance | Usage data, device data | Consent, via our cookie banner | As set out in the Cookie Policy |
Most of this comes straight from you. Some technical browsing data is collected automatically when you visit. Required fields on our forms are marked as such: if you leave them out, we may not be able to process your order or your request. We never ask you for your full card number, and it never reaches our own systems.
Who we share it with
Our ecommerce platform, payment provider, delivery carriers, returns provider, email and analytics providers, all acting on our instructions. We do not sell your personal data.
Shopify Inc. hosts this store and processes your order and your payment on our behalf, under its own data processing terms. Royal Mail carries our parcels and receives what it needs to deliver one: your name, your delivery address and a contact detail for the delivery. Where we add another service, such as a further delivery carrier, a returns provider or an email provider, it is added to this list before it begins processing your data. We do not sell your personal data, and we do not share it for advertising by third parties.
We may also have to disclose data to a public authority or a court where the law requires it.
International transfers
Where a provider processes data outside the UK, we rely on UK adequacy regulations or the International Data Transfer Agreement.
The controller itself is established in the United States, so your data is transferred to and processed in the United States as a matter of course. Our platform provider also processes data outside the United Kingdom. Every such transfer is covered either by UK adequacy regulations, or by the International Data Transfer Agreement, or by the UK Addendum to the European Commission standard contractual clauses, together with any additional technical and organisational measures the transfer calls for. You can ask us for a copy of the safeguards that apply, or for information on where to obtain one.
Your rights
You have the right to be informed, and rights of access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw consent at any time. To exercise any of them, contact us using the details above. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
We may ask you to confirm who you are before we act, so that we never hand your data to someone else. We answer within one month of receiving your request. Where a request is complex, we may extend that by up to two further months, and we will tell you if we do.
Security
We use appropriate technical and organisational measures to protect your data against loss, alteration, unauthorised access and disclosure. The site runs over HTTPS, and payments are secured by our payment provider. Access to data is limited to people who need it and who are bound to keep it confidential. No transmission over the internet can be guaranteed completely secure. If a breach happens that is likely to result in a high risk to your rights and freedoms, we will tell you, as the law requires.
Children's data
Our products are for parents and other responsible adults. This site is not aimed at children and we do not knowingly collect personal data about a child. The information you give us concerns you, the buyer, not your child: we do not ask for your child's name or date of birth, and the age range you select is a product size, not a record about a person. If you believe a child has sent us personal data without the agreement of a parent or guardian, tell us through our contact page and we will delete it.
Changes to this policy
We may update this policy, in particular to reflect a change in the law, in technology or in how we work. The date below tells you when the current version was published. Where a change is significant we will bring it to your attention. Please check this page from time to time.
Contact
For any question about this policy or about how we handle your personal data, write to us at hello@hushlykids.com, through our contact page, or by post to Hushly LLC, 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, United States.
Last updated: 30 August 2026.
