Last updated: 16 June 2026
WHO WE ARE
This Privacy Policy applies to bundlesofjoy.org.uk, the website of Bundles of Joy.
This policy explains how we collect, use, store, and protect personal information when you visit or interact with our website.
INFORMATION WE COLLECT
We may collect personal information when you use our website, leave a comment, submit a contact form, upload media, interact with embedded content, or use website features that rely on cookies or analytics.
The information we collect depends on how you use the website.
COMMENTS
When visitors leave comments on the Site, we collect the information shown in the comment form, along with the visitor’s IP address and browser user agent string. This helps us detect and prevent spam.
An anonymised string created from your email address, also known as a hash, may be provided to the Gravatar service to check whether you use it. You can review Gravatar’s privacy policy at: https://automattic.com/privacy/.
After your comment is approved, your profile picture, if connected to Gravatar, may be visible to the public next to your comment.
CONTACT FORMS
If you contact us through a form on the website, we may collect your name, email address, message content, and any other details you choose to provide.
We use this information to respond to your enquiry, provide support, manage communication, and keep reasonable records where needed.
We do not sell, rent, or lease contact form information to third parties.
MEDIA UPLOADS
If you upload images or files to the website, you should avoid uploading files that contain embedded location data, including EXIF GPS data.
Visitors to the website may be able to download and extract location data from uploaded files.
COOKIES
Our website may use cookies and similar technologies to make the website work, improve user experience, remember preferences, support comments, help with security, and understand general visitor behaviour.
Some cookies are necessary for the website to function. Other cookies, such as analytics or marketing cookies, are only used where appropriate consent has been given.
For more details, please read our Cookie Policy.
EMBEDDED CONTENT FROM OTHER WEBSITES
Articles or pages on this website may include embedded content, such as videos, images, social media posts, maps, or other third-party content.
Embedded content from other websites behaves in the same way as if you visited those websites directly. These websites may collect data about you, use cookies, embed additional tracking, and monitor your interaction with the embedded content, especially if you are logged in to that third-party service.
We are not responsible for the privacy practices of third-party websites.
ANALYTICS
We may use analytics tools to understand general visitor trends, such as which pages are visited, how visitors find the website, device type, browser type, approximate location, and general usage patterns.
Where possible, analytics information is aggregated or anonymised. We use this information to improve the website and understand how visitors use it.
LAWFUL BASIS FOR PROCESSING
Where UK data protection law applies, we rely on one or more lawful bases to process personal data, including:
- Consent, where you have given clear permission for a specific purpose.
- Legitimate interests, where processing is necessary to operate, secure, improve, and manage the website.
- Legal obligation, where we need to process or retain information to comply with the law.
- Contractual necessity, where processing is needed to respond to a request or provide a service you have asked for.
HOW LONG WE KEEP YOUR DATA
If you leave a comment, the comment and its metadata may be retained indefinitely. This helps us recognise and approve follow-up comments automatically instead of holding them for moderation.
If user registration is available and you create an account, we store the personal information provided in your user profile. Registered users can usually view, edit, or delete their personal information at any time, except they may not be able to change their username. Site administrators may also be able to view and edit that information.
Contact form messages may be retained for as long as necessary to respond to your enquiry and maintain reasonable records.
Analytics data may be retained for a limited period depending on the analytics tool used.
We may retain certain information for longer where required for legal, administrative, security, fraud prevention, or dispute resolution purposes.
WHO WE SHARE YOUR DATA WITH
Visitor comments may be checked through automated spam detection services, such as Akismet or similar tools.
We may use trusted third-party service providers for website hosting, analytics, security, spam prevention, email delivery, and website functionality. These providers may process limited personal data on our behalf.
We do not sell, rent, or lease your personal information to third parties for marketing or advertising purposes.
WHERE YOUR DATA IS SENT
The website is operated from the United Kingdom. Depending on the services we use, your information may be processed by third-party service providers located in the United Kingdom, the European Economic Area, the United States, or other countries.
Where personal data is transferred internationally, we take reasonable steps to ensure appropriate safeguards are in place where required by applicable data protection law.
YOUR DATA RIGHTS
Depending on your location and applicable law, you may have rights in relation to your personal data, including the right to:
- Request access to the personal data we hold about you.
- Request correction of inaccurate or incomplete personal data.
- Request deletion of your personal data.
- Object to certain types of processing.
- Request restriction of processing.
- Request transfer of your personal data, where applicable.
- Withdraw consent where we rely on consent as the lawful basis for processing.
If you have left comments or created an account, you may request an exported file of the personal data we hold about you. You may also request that we delete personal data we hold about you.
This does not include data we are required to keep for legal, administrative, security, or operational purposes.
To make a data rights request, please contact us through our Contact page.
DATA SECURITY
We use reasonable technical and administrative measures to protect personal information from unauthorised access, disclosure, misuse, alteration, or loss.
These measures may include SSL encryption, secure hosting, access controls, spam prevention tools, and limiting access to personal data to authorised personnel only.
However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.
CHILDREN’S PRIVACY
The website is not directed at children under the age of 13, and we do not knowingly collect personal information from children.
If you believe that a child has provided personal information through the website, please contact us so we can take appropriate action.
THIRD-PARTY LINKS
The website may contain links to external websites. We are not responsible for the content, privacy policies, or practices of third-party websites.
When you leave our website, we encourage you to read the privacy policy of every website you visit.
COMPLAINTS
If you are concerned about how we handle your personal data, please contact us first so we can try to resolve the issue.
If you are based in the United Kingdom, you may also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection matters.
UPDATES TO THIS POLICY
We may update this Privacy Policy from time to time. Any changes will be posted on this page, along with the updated date at the top.
Your continued use of the website after changes are posted means that you accept the updated Privacy Policy.