Privacy Policy

Mommy's wear sells The Snuggle Hoodie directly to parents worldwide through this store. When this policy says “we”, it means Mommy's wear, and we are the data controller for the information described below. Privacy questions go to service@thesnugglewear.shop.

• Order details — your name, email address, shipping and billing address, phone number if you give one, plus the sizes and colours you ordered.
• Payment information — handled entirely by our payment processor. Card numbers never reach our servers and we cannot see them; we only ever see the last four digits, the card brand and whether the payment succeeded.
• Account information — if you create an account, your email and an encrypted password, plus any saved addresses.
• Messages you send us — the contents of contact-form messages and emails, so we can actually help you.
• Usage information — pages viewed, device type, approximate location from your IP address, and referral source. Only collected when you allow analytics cookies.
• Marketing preferences — whether you subscribed to emails, and whether you opened them.

We do not knowingly collect information from children, and we never ask for data about your baby beyond the size you choose.

• To take your order, charge you correctly and ship the right hoodie to the right door.
• To send order confirmations, dispatch notices, tracking links and batch updates.
• To answer your messages and handle returns, exchanges and refunds.
• To prevent fraudulent orders and chargebacks.
• To understand which pages and products work, so the store gets better.
• To send marketing emails — only if you opted in, and every one has an unsubscribe link.
• To meet our legal obligations, such as keeping sales and tax records.

Our legal bases, in GDPR terms: performing our contract with you (orders and delivery), legitimate interests (fraud prevention, improving the store), consent (analytics, marketing cookies and marketing email), and legal obligation (accounting records).

We never sell your personal information. We share only what a partner needs to do its job:

• Payment processors — to authorise and settle your payment, and to process refunds.
• Shipping carriers and our fulfilment partner — your name, address, phone number and email, so the parcel arrives and you get tracking.
• Email service provider — to send order confirmations, shipping notifications and, where you opted in, marketing email.
• Analytics provider — to measure store traffic, only where you allowed analytics cookies.
• The platform that hosts this store — which stores the order data on our behalf.
• Authorities — where the law requires it, or to defend our legal rights.

Because we ship worldwide, these partners may process your data outside your own country. Where data leaves the EEA or UK, it is covered by Standard Contractual Clauses or an equivalent safeguard.

We use essential cookies to keep your cart and checkout working, plus analytics and marketing cookies that only load after you accept them. You can change your mind at any time using the Manage Cookies link in the footer. Full detail lives in our Cookie Policy.

• Order and invoice records: up to 7 years, because tax law says so.
• Account data: until you ask us to delete the account.
• Support messages: 24 months after the conversation ends.
• Marketing contacts: until you unsubscribe, then we keep a suppression record so we do not email you again by mistake.
• Analytics data: up to 14 months, in aggregated form wherever possible.

Wherever you live, you can ask us to do the following, and we will answer within 30 days:

• Access a copy of the personal information we hold about you.
• Correct anything that is wrong or out of date.
• Delete your data, where we are not legally required to keep it.
• Restrict or object to how we use it, including profiling for marketing.
• Receive your data in a portable, machine-readable format.
• Withdraw consent at any time — for cookies, or by unsubscribing from email.

If you are in California, the same requests apply under the CCPA/CPRA, including the right to know what is collected and to opt out of any sale or sharing of personal information. We do not sell or share personal information as those laws define it, and we will never treat you differently for exercising a right. If you are in the EEA or UK, you also have the right to complain to your local data protection authority.

The store runs over encrypted HTTPS connections, passwords are hashed, and access to order data is limited to the people who need it to pack and support orders. No system is perfect — if a breach ever affects your data, we will tell you and the relevant authority without undue delay.

If we change this policy, the updated version appears on this page with a new date. If the change is significant, we will email anyone with an active order or account.