Privacy Policy
We take your privacy very seriously.
If you change your mind about being contacted after agreeing, just get in touch, we will ensure you do not receive any marketing or promotional information.
Any person accessing, browsing, or otherwise using our site, either manually or via an automated device or program, shall be considered a 'User'. All users are bound by the terms of this Privacy Policy. Users consent to the collection, use and disclosure of personally identifiable user information pursuant to the terms of this Privacy Policy.
Purpose of Policy
-
Compliance with the law (the General Data Protection Regulation (GDPR) (EU) 2016/679)
-
Adherence to best practice
-
Protection of clients, staff, customers, and other individuals
-
Protection of the company’s interests
Types of Data
The Red Kite Baby Co Ltd collects personal data only when essential. We do not collect special category data (e.g., health or ethnic information). If such a request is made, please refuse and notify the Data Protection Officer immediately.
Policy Statement
Red Kite Baby Co Ltd implements this Data Policy to:
-
Comply with legal obligations and best practices
-
Respect individuals’ rights
-
Be transparent with those whose data we hold
-
Provide training and support to staff handling personal data
-
Voluntarily notify the Information Commissioner’s Office (ICO), even if not mandatory
To prepare for potential data breaches, Red Kite Baby Co Ltd commits to:
-
Identifying security incidents early
-
Understanding that breaches go beyond theft or loss
-
Following our dedicated action plan for breaches
-
Assigning responsibility for managing breaches
-
Ensuring staff know how to escalate incidents
In the event of a breach, we will:
-
Notify all affected parties promptly
-
Notify the ICO within 72 hours of identifying the breach
-
Document all breaches, even if reporting isn't required
-
Follow internal protocol to assess risk levels and notify individuals at high risk to their rights and freedoms
-
Report processing activities to relevant supervisory authorities as needed
Red Kite Baby Co Ltd ensures individuals have the following rights:
-
The right to be informed
-
The right of access
-
The right to rectification
-
The right to erasure (“right to be forgotten”)
-
The right to restrict processing
-
The right to data portability
-
The right to object
We do not engage in automated decision-making or profiling.
Security Measures
Our safeguards include, but are not limited to:
-
Secure, locked storage facilities
-
Password-protected databases and computers
-
Controlled access via keypads
-
Clear desk policy and CCTV coverage
-
Malware and virus detection software
Procedure for Making Requests
Access requests must be made in writing. Please send requests to customerservice@redkitebaby.com, or mail them to our registered address.
We are committed to informing data subjects about:
-
What data is processed and why
-
Who the data is shared with
-
How they can exercise their rights
The Red Kite Baby Co Ltd is committed to ensuring that Data Subjects are aware that their data is being processed, including:
· The purposes for which it is being processed
· The types of disclosure involved
· How to exercise their rights in relation to the data
Opting Out
If you do not wish for your data to be retained, processed, or collected, please opt out at the appropriate stage.
Please note that failure to provide some essential data may result in our inability to supply certain services or products.
Withdrawing Consent
The Red Kite Baby Co Ltd acknowledges that, once given, consent can be withdrawn - but not retrospectively. In some cases, we may be required to retain data for a specified period, even if consent to use it has been withdrawn.