Privacy Policy

Effective Date: 30 October 2026

1. Introduction

Little Needs App Ltd ("Company", "we", "our", or "us") is committed to respecting and protecting your privacy. This Privacy Policy explains how we collect, use, store, share, and safeguard your personal data when you access or use the Little Needs progressive web application ("App"), our websites at littleneedsapp.co.uk and littleneedsapp.com ("Website"), and any associated services (together, the "Services").

This Privacy Policy is provided in compliance with the UK General Data Protection Regulation (the "UK GDPR"), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 ("PECR"), as applicable.

Please read this Privacy Policy carefully to understand how we handle your personal data. This policy should be read alongside our separate Terms and Conditions and Cookie Policy.

2. Data Controller Information

The data controller responsible for processing your personal data is:

Little Needs App Ltd

Registered Office: 128 City Road, London, EC1V 2NX

Company Number: 17209825

Jurisdiction: England and Wales

Director: Yanika Archer

If you have any questions about this Privacy Policy, how we handle your personal data, or wish to exercise your data protection rights, you can contact us at:

Email: info@littleneedsapp.co.uk

3. What Data We Collect

We may collect and process the following categories of personal data:

3.1 Identity and Contact Data

Information you provide directly to us, such as your name, email address, postal address, or other contact details (for example, when you send us an enquiry by email or contact us through our Website).

3.2 Transaction and Order Data

Limited buyer and order information passed to us by Etsy when you purchase a Digital Download (such as a printable PDF checklist) through our Etsy shop. This may include your name, delivery address (where applicable), and details of the item purchased. We do not receive or store your payment card or financial details; payment processing is handled entirely by Etsy.

3.3 Technical Data

Information collected automatically when you use the Services, which may include your IP address, browser type and version, device type, operating system, time zone setting, and usage/security logs. This data may be collected by our hosting and service providers in the course of operating the App and Website.

3.4 App and LocalStorage Data

The App uses your browser's LocalStorage to store checklist progress and preferences locally on your device. This data is stored on your device only and is not currently transmitted to or collected by us. Please see clause 10 for further details about LocalStorage.

3.5 Affiliate and Click Data

When you click on an affiliate link within the App or Website, data relating to your click (such as a click identifier or session information) may be collected by the relevant affiliate network, retailer, or other affiliate partner (for example, Amazon Associates or Awin, where applicable) under their own privacy policies. We may receive aggregated or anonymised commission and sales reporting from such partners, but this does not typically include your identifiable personal data.

3.6 Marketing and Communications Data

We do not currently operate a mailing list or send marketing communications. If email marketing or a newsletter is introduced in future, we will collect your marketing preferences and email address only with your explicit opt-in consent, and you will be able to unsubscribe at any time.

3.7 Future Account and Subscription Data

If user accounts or paid subscriptions are introduced in a future version of the Services, we may collect additional data such as your name, email address, account credentials, profile preferences, saved checklist data, and subscription status. Details of any additional data collection will be communicated to you at the relevant time.

3.8 Special Category Data

We do not ask you to provide, and do not intentionally collect, any special category personal data (such as health data, racial or ethnic origin, religious beliefs, or biometric data). The App provides general informational content and signposts users to authoritative external health resources (such as the NHS and The Lullaby Trust), but does not operate as a healthcare service.

If you voluntarily include health information or other special category data in an email or enquiry to us, we will handle it only to the extent necessary to respond to your enquiry or as otherwise required by law, and we will not use it for any other purpose.

4. How We Collect Your Data

Your personal data is collected through the following methods:

• Direct communications: when you email us, contact us through our Website, or otherwise correspond with us voluntarily.
• Etsy: when you purchase a Digital Download from our Etsy shop, Etsy passes limited buyer and order information to us as the seller.
• Automated technologies: technical data (such as IP address, browser type, and access logs) may be collected automatically by our hosting and service providers when you access the App or Website.
• LocalStorage: the App stores checklist progress and preferences locally on your device using browser LocalStorage. This data remains on your device and is not transmitted to us.
• Affiliate links: if we include affiliate links, the relevant affiliate network, retailer, or other affiliate partner may collect data about your visit under their own policies. We do not control this collection.
• Cookies and similar technologies: affiliate links (if included) and, in future, analytics services may place cookies or use similar tracking technologies on your device. Please see clause 10 and our Cookie Policy for details.

5. Purposes and Legal Bases for Processing Your Data

We process your personal data for the purposes set out below, together with the corresponding lawful basis under Article 6 of the UK GDPR:

5.1 Responding to Enquiries and Correspondence

We use your identity and contact data to respond to emails, questions, feedback, or other communications you send to us.

Lawful basis: Legitimate interests (it is in our and your mutual interest to respond to your communications). Where your enquiry relates to a potential or existing contractual relationship (e.g., an Etsy purchase), we may also rely on performance of a contract or steps taken at your request prior to entering a contract.

5.2 Fulfilling Etsy Orders and Providing Digital Downloads

We process order and transaction data to administer and fulfil purchases of Digital Downloads made through our Etsy shop, including responding to order-related enquiries, defects, or refund requests.

Lawful basis: Performance of a contract (processing necessary to fulfil your purchase and our obligations in connection with it).

5.3 Operating, Maintaining, and Improving the Services

We use technical data and hosting/service provider logs to operate, maintain, monitor, and improve the App and Website, ensure security, prevent misuse, and detect or address technical issues.

Lawful basis: Legitimate interests (keeping the Services secure, functional, and improving user experience).

5.4 Record Keeping, Accounting, and Business Administration

We retain transaction records, correspondence, and related data for accounting, tax, business administration, and internal reporting purposes (including understanding which products are of interest to users).

Lawful basis: Legal obligation (where we are required to retain records under tax, accounting, or other applicable laws); and legitimate interests (proper business administration and record keeping).

5.5 Protecting Our Rights and Complying with Law

We may process personal data where necessary to establish, exercise, or defend legal claims, to comply with applicable laws, court orders, or regulatory requirements, or to respond to lawful requests from public authorities.

Lawful basis: Legal obligation; and/or legitimate interests (protecting our rights and complying with law).

5.6 Cookies and Tracking Technologies (Where Applicable)

Where non-essential cookies or similar tracking technologies are used (including affiliate tracking cookies set by third parties, if applicable, and, in future, analytics cookies), we will obtain your consent before such technologies are placed on your device, in accordance with PECR and the UK GDPR.

Lawful basis: Consent (for non-essential cookies/tracking). Strictly necessary cookies or storage used solely for the technical operation of the Services do not require consent.

5.7 Future Marketing Communications

If we introduce a newsletter or email marketing, we will only send you such communications with your prior opt-in consent. You will be able to withdraw your consent and unsubscribe at any time.

Lawful basis: Consent.

6. Disclosure and Data Sharing

We do not sell your identifiable personal data to any third party. We may share your personal data with the following categories of recipients, only to the extent necessary for the purposes described in this policy:

6.1 Etsy

Our Digital Downloads are sold through Etsy. Etsy processes your payment and order information as an independent data controller under its own privacy policy. We receive limited buyer and order information from Etsy to fulfil your purchase.

6.2 Affiliate Networks and Retailers

The App and Website may include affiliate links to third-party retailers, affiliate networks, and retail partners (for example, Amazon Associates or Awin, where applicable). If you click an affiliate link, the relevant affiliate network, retailer, or other affiliate partner may collect data about your visit under their own privacy policies. We do not control their data collection practices.

6.3 Hosting and Service Providers

We use third-party hosting, development, and IT service providers (including our hosting platform) to operate and maintain the App and Website. These providers may process technical data (such as server access logs containing IP addresses) on our behalf in the course of providing their services to us.

6.4 Professional Advisers

We may share personal data with professional advisers (including accountants, legal advisers, and insurers) where reasonably necessary for the purposes of obtaining professional advice or managing business risks.

6.5 Authorities and Regulators

We may disclose personal data to law enforcement, regulatory authorities, courts, or other public bodies where required by law or where necessary to protect our rights or the rights of others.

6.6 Future Payment Providers

If paid subscriptions or in-app purchases are introduced in a future version of the Services, payment processing may be handled by a third-party payment provider. In that case, the payment provider will process your payment details as an independent data controller or data processor under their own privacy policy. We will not store your full payment card details.

6.7 Market Insight Data

If, in future, the Company provides market insight data to brand partners or other third parties, such data will be anonymised and/or aggregated so that it does not identify individual users.

7. International Data Transfers

Some of the third-party platforms and service providers we use or may use may process personal data outside the United Kingdom. These may include Etsy, affiliate networks or retail partners where affiliate links are introduced (for example, Amazon Associates or Awin), our hosting provider, and any analytics or payment providers used in future.

Where personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place in accordance with the UK GDPR, which may include:

• transfers to countries that the UK Government has determined provide an adequate level of data protection (an adequacy decision);
• the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses; or
• other lawful transfer mechanisms recognised under the UK GDPR.

Where we are not directly responsible for the transfer (for example, where a third-party platform independently transfers data under its own privacy policy), we encourage you to review that platform's privacy policy for details of the safeguards it applies.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law. The following retention periods apply:

• Enquiry correspondence: retained for as long as necessary to deal with your enquiry and for a reasonable period afterwards for record-keeping, follow-up, and legal claims purposes (generally up to 6 years from the date of last contact, reflecting limitation periods under the Limitation Act 1980).
• Etsy order records and transaction data: retained for as long as necessary for order fulfilment and for accounting, tax, and legal compliance purposes (generally up to 6 years after the relevant transaction).
• Technical and security logs: retained for a limited period reasonably necessary for security monitoring and troubleshooting (typically no longer than 12 months), unless required to be retained longer in connection with a security incident or legal claim.
• LocalStorage data: remains on your device until you delete it, clear your browser data or cache, change browser or device, or the storage is otherwise removed. We do not control the retention of data stored in LocalStorage on your device.
• Marketing consent records: if marketing communications are introduced, consent records will be retained while your subscription is active and for a reasonable period afterwards to maintain suppression records and demonstrate compliance.
• Future account data: if user accounts are introduced, account data will be retained while your account is active and for a reasonable period after account closure for legal and administrative purposes.

When personal data is no longer required, it will be securely deleted or anonymised.

9. Your Data Protection Rights

Under the UK GDPR, you have the following rights in relation to your personal data:

• Right of access: You have the right to request a copy of the personal data we hold about you.
• Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You have the right to request deletion of your personal data in certain circumstances (sometimes known as the "right to be forgotten").
• Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
• Right to data portability: You have the right to request that we provide your personal data in a structured, commonly used, and machine-readable format, or transmit it to another controller, where technically feasible.
• Right to object: You have the right to object to our processing of your personal data where we rely on legitimate interests as the lawful basis, and we will consider your objection in accordance with applicable law.
• Right to withdraw consent: Where we process your data on the basis of your consent (for example, for non-essential cookies or marketing), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at: info@littleneedsapp.co.uk

We will respond to your request without undue delay and in any event within one month of receiving it (or within such extended period as may be permitted by law for complex or multiple requests). We may ask you to verify your identity before processing your request.

If you are not satisfied with how we handle your request, or if you believe your data protection rights have not been respected, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO)

Website: https://ico.org.uk

Telephone: 0303 123 1113

We would appreciate the opportunity to address your concerns before you contact the ICO, and encourage you to contact us in the first instance.

10. Cookies, Tracking Technologies and LocalStorage

10.1 Cookies and Similar Technologies

The App and Website may use cookies and similar tracking technologies. In particular:

• Affiliate tracking cookies: if affiliate links are included and you click one (for example, through Amazon Associates, Awin, or a retail partner, where applicable), the relevant affiliate network or retailer may place tracking and/or advertising cookies on your device to attribute any subsequent purchase to us for commission purposes. These are third-party cookies set by the affiliate network or retailer, not by us.
• Strictly necessary cookies or storage: We may use cookies or similar technologies that are strictly necessary for the operation of the App or Website (for example, to remember essential functionality settings). These do not require your consent under PECR.
• Analytics cookies: We do not currently use analytics services (such as Google Analytics). If analytics cookies are introduced in future, we will update this policy and our Cookie Policy and will obtain your consent before such cookies are placed on your device.

For non-essential cookies (including affiliate tracking and advertising cookies, where applicable, and any future analytics cookies), we will provide clear information and obtain your consent where required under PECR and the UK GDPR. Please refer to our Cookie Policy and any cookie consent banner or settings provided on the App or Website for further information and to manage your cookie preferences.

10.2 LocalStorage

The App uses browser-based LocalStorage to store your checklist progress and preferences locally on your device. LocalStorage is not a cookie; it is a browser storage mechanism that allows data to be saved on your device without being transmitted to our servers.

Important information about LocalStorage:

• Data stored in LocalStorage remains on your device and is not currently collected by or transmitted to us.
• LocalStorage data may be lost if you clear your browser cache or data, change browser or device, disable storage, use private or incognito browsing, or remove the App from your home screen.
• You should not rely on LocalStorage as your sole means of recording important information. We recommend that you back up any important data separately.
• Because LocalStorage data is not transmitted to our servers, it is not currently within the scope of data subject access requests or other rights requests that relate to data held by us.

11. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include:

• limiting the personal data we collect to what is necessary for the purposes described in this policy;
• using reputable third-party hosting and service providers with appropriate security measures;
• keeping software and systems up to date to minimise security vulnerabilities; and
• restricting access to personal data to those who need it for legitimate business purposes.

However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to use commercially reasonable means to protect your personal data, we cannot guarantee its absolute security. You are responsible for keeping your devices and browser software secure and up to date.

12. Children's Privacy

The Services are intended for use by adults (persons aged 18 or over, or aged 16 or over with parental/guardian consent). We do not knowingly collect personal data from children under the age of 16. If you become aware that a child under 16 has provided us with personal data, please contact us at info@littleneedsapp.co.uk and we will take steps to delete such data.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our data processing practices, the Services, or applicable law. Where we make material changes, we will notify you by reasonable means, which may include:

• publishing the updated policy on the App or Website with a revised "Last Updated" date;
• notifying you by email (where we hold your email address); or
• any other method we consider reasonable in the circumstances.

We encourage you to review this Privacy Policy periodically. Your continued use of the Services after any changes to this policy constitutes your acknowledgement of the updated policy.

Last Updated: 30 October 2026

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

Little Needs App Ltd

Registered Office: 128 City Road, London, EC1V 2NX

Email: info@littleneedsapp.co.uk

Websites: littleneedsapp.co.uk | littleneedsapp.com

This Privacy Policy has been prepared based on the current operational scope of Little Needs App Ltd and will be reviewed and updated as the Services develop.