null

Privacy Policy


Data Protection

Last Updated Jun 2nd  2026

Gifting Studio Ltd is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

Who We are

nappycakeshop.co.uk, which is a website owned by Gifting Studio Ltd, the personal information given by you when you shop on our website. is  to process your order and to keep you informed with the progress of it. Where "we" or "Us" used in this document will refer to Gifting Studio Ltd

1. Data Controller
For the purposes of the GDPR, the data controller is:
  • Gifting Studio Ltd: 
  • Registered Address: Suite 6, The Workshop, Wharf Road, Eastbourne, East Sussex, England, BN21 3FG
  • Email Address: sales@giftingstudio.co.uk

How do we use the Personal information we collect about you when an order is placed?

  • Your Name and address and delivery address (if this is different) so we can prepare and deliver your order as you have requested. 
  • Your email address. This allows us send you an order confirmation and to let you know how and when your order left our premises and how you can trace its progress.
  • Gifting Studio Ltd will use your personal information to send invoices where appropriate 
  • Your telephone number is requested in case we need to call (or text) you if we have a query about your order.
  • Your credit card details go directly onto the servers of PayPal, Apple Pay or Braintree when you enter them during the checkout process. No credit card or other payment information is ever stored on any of our servers or retained in any form.
  • Some of your personal data has to be passed to other companies for the purposes of taking payment of your order (eg. card processing companies) and delivering it to you (eg. couriers, third party suppliers) but they only receive the information necessary to complete their function.
  • Any information given to a third party for receiving a delivery is only used for completing the function of the delivery and the information will be passed on to the courier companies to fulfill that function.

 

The indirect data that we collect may automatically be combined with other information that you provide and may be aggregated and used for statistical purposes. It helps us to improve our Website and to deliver better and more personalised products, services and advertisements. It also helps us to estimate how many people may be interested in certain products, store your user preferences allowing us to customise the Website to your individual interests, recognise you when you revisit our Website, and speed up your online experience with Gifting Studio. 

What information we send to you ?

When you place your order you will receive an e-mail confirming your order and delivery instructions. On Occasion we may have to call you regarding your order.

Our information gathering techniques.

Gifting Studio does not sell your personal information to third parties. However, we may disclose the personal information that we collect or that you provide to us as described in this Privacy Policy to our subsidiaries and affiliates or to carefully selected third parties that we use to support our business and bring products to you, such as our payment processors, couriers and delivery partners, marketing partners, and suppliers who deliver products on our behalf. Where we do share your information, we do so under strict contract terms and only share the minimum amount of personal information needed for the specific purpose.

We may use the services of third parties to collect indirect data about your visits and interactions with our Website through the use of technologies such as cookies to personalise advertisements for goods and services. Please see our Cookie Policy for further information.

Your personal information may also be disclosed to enforce our terms of use, to comply with any court order, law or legal process, or government or regulatory request, or if we believe that disclosure is necessary or appropriate to protect the rights, property, or safety of Gifting Studio, our customers or others. This may include exchanging information with other companies or organisations for the purposes of fraud protection and credit risk reduction.

If Gifting Studio is involved in a merger, acquisition, asset sale, bankruptcy or reorganisation, your personal information may be shared, as well as retained by us.

1. Business Transfers and Asset Sales
We may sell, transfer, or otherwise share some or all of our business assets in connection with a corporate transaction. This includes, but is not limited to, an asset sale, merger, acquisition, joint venture, corporate reorganization, bankruptcy, or dissolution.
  • Transfer of Data: In the event of an asset sale where our customer databases, user records, or digital platforms form part of the sold assets, your personal data will be transferred to the acquiring entity ("Buyer").
  • Buyer Obligations: Any Buyer or successor entity will assume the rights and obligations regarding your personal data as described in this Privacy Policy. The Buyer will be legally required to process your personal data in accordance with this policy unless they formally notify you of updates or seek fresh consent for new processing purposes.
  • Notification: If an asset sale occurs, we or the Buyer will notify you via email and/or a prominent notice on our website. This notice will outline the change in ownership, the identity of the new Data Controller, and any choices you have regarding your data.
2. Legal Basis for Processing (Asset Sales)
Under Article 6 of the GDPR, we must have a lawful basis to process and transfer your data.
  • Legitimate Interests: Our legal basis for transferring personal data during an asset sale is our legitimate interest (Article 6(1)(f) GDPR). We have a legitimate commercial interest in selling, structuring, and transitioning our business assets effectively. We ensure that your fundamental privacy rights and freedoms do not override these interests by requiring the Buyer to maintain equivalent data protections.
  • Performance of a Contract: If you have an active contract with us, transferring your data may be necessary for the performance of a contract (Article 6(1)(b) GDPR) to ensure your services continue without interruption under the Buyer.
3. Due Diligence and Data Minimisation
Prior to the completion of an asset sale, potential buyers may review our business records for evaluation purposes ("Due Diligence").
  • We strictly limit the data shared during this phase.
  • Wherever possible, data is anonymised, pseudonymised, or aggregated.
  • Any potential buyer reviewing data is bound by strict, legally binding confidentiality agreements and non-disclosure agreements (NDAs) that prohibit them from using or retaining your data outside the evaluation process.
4. Your Data Protection Rights
Under the GDPR, you hold specific rights regarding your personal data. You can exercise these rights at any time before or after an asset sale by contacting us:
  • Right of Access: Request a copy of the data we hold about you.
  • Right to Rectification: Correct inaccurate or incomplete data.
  • Right to Erasure ("Right to be Forgotten"): Request that we delete your data under certain conditions.
  • Right to Restrict Processing: Restrict how we use your data.
  • Right to Object: Object to our processing of your data based on legitimate interests.
  • Right to Data Portability: Request the transfer of your data to another organisation.
5. International Data Transfers
If the acquiring company is located outside the United Kingdom (UK) or the European Economic Area (EEA), your personal data may be transferred to a country that does not have the same level of data protection laws.
In such cases, we will ensure that appropriate safeguards are implemented in compliance with the GDPR (such as executing UK/EU Standard Contractual Clauses) to guarantee your data remains protected.
6. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy at any time. We encourage you to review this page periodically for updates.

The procedures we have in place to safeguard your privacy.

We have put in place various security procedures to safeguard your personal information, including a secure server using Secure Sockets Layer (SSL) for encryption of your credit / debit card details, (view Security information) these details are taken using Braintree and Paypal and Apple Pay, so we will never see your credit card details.

Our website uses secure server software which will protect your information at all times. Once captured your personal information (excluding payment card information) is held on our own internal system to assist with processing your order only, where it is regarded as strictly confidential. Customer account information is restricted to those who need to access it for the performance of their job and their access is subject to login and password controls.

 

Gifting Studio stores and processes your personal information on its computers and servers in the United Kingdom. However, we may share your personal information with third parties who are based overseas where this is within our legitimate interests or where you have consented to our use of cookies and tracking technologies. The GDPR covers the processing of data within the EEA and, where third parties are based outside the EEA, we require them to apply the same standards to the processing of that data as is required by the GDPR

Third Party Links

 

Our Website may contain links to other websites that are not operated by us. If you click on a third party link, you will be directed to that third party's site. We recommend that you review the Privacy Policy of each site you visit. Party Delights does not control, and assumes no responsibility for the content, privacy policies or practices of any third party sites or services

Social Media Advertising

Retargeting

We use Facebook, Instagram,Twitter and Pintrest tracking pixels to collect browser data, which we use to send personalised Facebook, Instagram, Twitter and Pinterest ads to users who have recently visited our website. 

When you sign up for our email newsletter, your email address may be uploaded to Facebook, Instagram, Twitter and Pinterest so that we can send you personalised social media ads.

 

Email Communications

We may use your personal information to contact you with email newsletters that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link in any of our emails. By signing up to our email newsletter you are confirming that you are age 16 or over and you have read and understood this privacy policy. 

 

How long we keep your information

Gifting Studio will keep your information for as long as it is needed for the processing purpose, when it is no longer needed it will be securely destroyed or deleted. For example, where you have created an online account, your information is retained for a period of 7 years following account closure, to allow for any related queries or legal claims. Accounting and payment information is generally retained for 6 years from the end of the applicable financial year in accordance with general accounting practices / HMRC guidelines

Your Rights
You can at anytime request us to remove your data from our system or if the information is incorrect you can contact us to correct the data. Please contact us at:
 
Gifting Studio Ltd
Email: sales@giftingstudio.co.uk
Gifting Studio - 12 Woodlands Close, Christian Malford SN15 4AU

 

Data Protection

Gifting Studio Ltd is UK registered (Reg No:05623937). We have appointed an internal Data Protection Officer to take responsibility for the care we take with your personal information and this person can be contacted through email at sales@giftingstudio.co.uk

 

If you have any questions please email us sales@giftingstudio.co.uk