Legal Document

Privacy Policy

Last updated: 1 November 2025

Your privacy is important to us. This policy explains how we collect, use, and protect your personal information.

Introduction

Baby Fat Ltd ("we", "us", "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website babyfat.co.uk or engage our services. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1 Information We Collect

1.1 Information You Provide

When you contact us or engage our services, we may collect:

  • Contact Information: Name, email address, phone number, company name
  • Project Information: Details about your project requirements, budget, and timeline
  • Communication Records: Correspondence, meeting notes, and project documentation
  • Payment Information: Billing address and payment details (processed securely through third-party providers)

1.2 Information Collected Automatically

When you visit our website, we automatically collect:

  • Technical Data: IP address, browser type and version, device information, operating system
  • Usage Data: Pages visited, time spent on pages, navigation patterns, referring website
  • Location Data: General geographic location based on IP address

2 How We Use Your Information

We use your personal information for the following purposes:

📧
Communication: To respond to inquiries, provide quotes, and communicate about projects
⚙️
Service Delivery: To deliver, maintain, and improve our development services
💳
Billing: To process payments and manage contracts
🔒
Security: To protect against fraud, unauthorized access, and security threats
📊
Analytics: To understand how our website is used and improve user experience
⚖️
Legal Compliance: To comply with legal obligations and enforce our terms

3 Legal Basis for Processing

Under UK GDPR, we process your personal data based on the following legal grounds:

  • Contract: Processing necessary to fulfill our contractual obligations to you
  • Consent: You have given explicit consent for specific processing activities
  • Legitimate Interests: Processing necessary for our legitimate business interests (e.g., fraud prevention, direct marketing)
  • Legal Obligation: Processing required to comply with legal requirements

4 Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information with:

  • Service Providers: Third-party vendors who assist with hosting, email delivery, payment processing, and analytics
  • Legal Authorities: When required by law or to protect our rights, safety, or property
  • Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to affected parties)

All third-party service providers are contractually obligated to maintain the confidentiality and security of your information.

5 Data Security

We implement industry-standard security measures to protect your personal information:

🔐 Encryption

SSL/TLS encryption for data transmission

🛡️ Access Controls

Restricted access to authorized personnel only

🔄 Regular Backups

Secure data backup and recovery procedures

👁️ Monitoring

Continuous security monitoring and auditing

6 Your Data Protection Rights

Under UK GDPR, you have the following rights:

Right of Access: Request copies of your personal data
Right to Rectification: Request correction of inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data
Right to Restrict Processing: Request limitation on how we use your data
Right to Data Portability: Request transfer of your data to another organization
Right to Object: Object to processing based on legitimate interests or direct marketing

To exercise any of these rights, please contact us at info@babyfat.co.uk. We will respond within one month.

7 Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy:

  • Active Clients: Duration of project plus 6 years (UK tax and legal requirements)
  • Inquiries: 2 years from last contact (unless you request earlier deletion)
  • Website Analytics: 26 months maximum

8 Cookies and Tracking Technologies

Our website uses minimal cookies to enhance user experience:

  • Essential Cookies: Required for basic website functionality (session management, security)
  • Preference Cookies: Remember your settings (e.g., dark mode preference)

You can control cookies through your browser settings. Disabling cookies may limit website functionality.

9 Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

10 Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting a notice on our website or sending an email to registered users. Continued use of our services after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions, concerns, or wish to exercise your data protection rights, please contact us:

🏢
Baby Fat Ltd
Stockport, United Kingdom

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues: www.ico.org.uk