​​

Who We Are

 

NICU Essentials is a UK-based small business offering handmade crochet baby items and educational content for parents with babies in the Neonatal Intensive Care Unit (NICU).

​

 What Information We Collect

​

We collect and process the following types of information:

 

• Personal details – your name, email address, postal address, and phone number when you place an order or contact us.

• Payment information – processed securely through trusted third-party platforms.

• Order and delivery information – to fulfill and deliver your purchases.

• Website usage data – including IP address, browser type, and pages visited (collected via cookies and analytics tools).

• Marketing preferences – if you choose to subscribe to our newsletter or community updates.

 

 How We Use Your Information

​

​

We only use your information where we have a legal basis to do so, including:

 

• To process and deliver your orders

• To communicate with you about your purchase or queries

• To improve our website and services

• To send you newsletters or offers (if you have consented)

• To comply with legal and tax obligations

​

 Legal Bases for Processing

​​

We rely on the following lawful bases to process your data:

​

• Contractual necessity: to fulfill your order or provide a service you requested.

• Consent: for email marketing or newsletter subscriptions.

• Legitimate interests: to improve website functionality and customer experience.

 

Sharing Your Information

​

We do not sell or rent your personal data.

We may share necessary information with:

 

• Trusted service providers (e.g. couriers, payment processors, website hosting platforms)

• Regulatory or legal authorities, if required by law

 

 

All third parties we work with are required to keep your data secure and use it only for the purposes we specify.

​

Cookies and Analytics

​

Our website uses cookies to improve your browsing experience and track performance.

You can manage or disable cookies through your browser settings.

 

 

Data Retention

 

We will only keep your personal data for as long as necessary to fulfill the purposes we collected it for — typically up to 6 years.

​

Your Data Protection Rights

 

 

Under UK GDPR, you have the right to:

 

• Access the personal data we hold about you

• Request correction of inaccurate information

• Request erasure of your data (“right to be forgotten”)

• Object to or restrict certain processing activities

• Withdraw consent at any time (for marketing or communications)

​

 Data Security

 

We use secure SSL encryption and trusted platforms to protect your data. While we take every precaution, no online system can be guaranteed 100% secure.

 

 Updates to This Policy

​

​

We may update this Privacy Policy occasionally to reflect changes in our practices or legal requirements. The latest version will always be posted on our website.​​

​

​

​

A Legal Disclaimer 

Last updated: October 2025