ARTICLE 1 – WHO WE ARE
This Privacy Policy explains how we collect and use your personal data when you visit or shop on my-onesie.co.uk.
My Onesie is operated by SCANDO, LLC, a limited liability company registered in the State of Delaware, USA. SCANDO, LLC is the controller of your personal data.
Adress: 651 N Broad St, Suite 201, Middletown, DE 19709, USA
Email: contact@my-onesie.co.uk
Phone: +44 7258 547893
ARTICLE 2 – PERSONAL DATA WE COLLECT
Data you give us:
- when you place an order: your name, delivery and billing address, email address, order details and, if you choose to provide it, your phone number;
- when you create an account: your login details, saved addresses and order history;
- when you contact us: your messages and any information you choose to share.
Data collected automatically:
- when you browse the website: your IP address, device and browser type, and how you use the website (pages visited, products viewed, basket activity). Some of this data is collected through cookies (see Article 8).
Payment data:
- card and wallet payments (including Apple Pay and Google Pay) are processed by Stripe. We do not receive or store your full card details.
ARTICLE 3 – HOW AND WHY WE USE YOUR DATA
We only use your personal data when we have a legal basis to do so under the UK GDPR:
| Purpose | Legal basis |
| Processing, delivering and tracking your order | Performance of a contract |
| Handling cancellations, returns and refunds | Performance of a contract |
| Managing your customer account | Performance of a contract |
| Answering your questions and providing customer service | Legitimate interests (responding to your requests) |
| Keeping invoices and accounting records | Legal obligation |
| Preventing fraud and keeping the website secure | Legitimate interests (protecting our business and customers) |
| Measuring website performance and running advertising campaigns through optional cookies | Consent |
Where we rely on your consent, you can withdraw it at any time. This will not affect any processing carried out before you withdrew it.
ARTICLE 4 – WHO WE SHARE YOUR DATA WITH
We only share your personal data where necessary, with:
- our suppliers, who prepare and send your order (your name, delivery address, phone number if provided, and order details);
- delivery carriers, to deliver your parcel and provide tracking;
- Stripe, our payment provider, to process your payment securely;
- o2switch, our website hosting provider;
- Google, for website analytics and advertising (Google Analytics, Google Ads and Google Merchant Center), only if you have accepted optional cookies;
These providers may only use your data to provide their services to us. If our business is sold or transferred, your data may be passed to the new owner, who will be bound by this Privacy Policy.
We do not sell your personal data.
ARTICLE 5 – INTERNATIONAL TRANSFERS
Some of the organisations we work with, including our company, SCANDO, LLC, and some of our suppliers and service providers, are located outside the United Kingdom, for example in the United States or the European Union. This means your personal data may be transferred and stored outside the UK.
When this happens, we make sure appropriate safeguards are in place to protect your data, such as transfers to countries recognised by the UK as providing adequate protection, or standard contractual clauses approved by the UK Information Commissioner’s Office (ICO).
ARTICLE 6 – HOW LONG WE KEEP YOUR DATA
We only keep your personal data for as long as necessary:
- Order and invoice records: 6 years from the end of the financial year of your purchase, to meet our legal and accounting obligations.
- Customer account: until you ask us to close your account, or after 3 years without any activity.
- Customer service messages: up to 2 years after your last contact with us.
- Analytics and advertising data: according to the retention settings of the relevant cookies (see Article 8), and up to 14 months in Google Analytics.
After these periods, your data is deleted or anonymised.
ARTICLE 7 – SECURITY
We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, disclosure or alteration.
Our website uses SSL encryption, and payments are processed by Stripe, which complies with the Payment Card Industry Data Security Standard (PCI DSS). We do not receive or store your full card details.
No method of transmission over the internet or electronic storage is completely secure. If a data breach occurs that is likely to put your rights at risk, we will inform you and the relevant authorities as required by law.
ARTICLE 8 – COOKIES
Cookies are small files stored on your device when you visit a website. We use two types of cookies:
- Essential cookies, which are needed for the website to work (basket, checkout, customer account, security). These cookies do not require your consent.
- Optional cookies, which help us measure how the website is used and run our advertising campaigns. We only use these cookies if you accept them.
When you first visit my-onesie.co.uk, you can accept or refuse optional cookies. You can change your choice at any time via the cookie settings link at the bottom of the website. Refusing optional cookies will not affect your ability to browse or place an order.
Essential cookies
| Cookie | Purpose | Duration |
| wp_woocommerce_session_* | Keeps track of your basket | 2 days |
| woocommerce_items_in_cart | Records whether your basket contains items | Session |
| woocommerce_cart_hash | Detects changes to your basket | Session |
| wordpress_logged_in_* | Keeps you logged in to your account | Session or up to 14 days |
| wordpress_sec_* | Secures your account login | Session or up to 14 days |
| Cookie consent | Remembers your cookie choices | Up to 12 months |
Optional cookies
| Cookie | Provider | Purpose | Duration |
| _ga, ga* | Google Analytics | Measures how visitors use the website | Up to 2 years |
| _gcl_au | Google Ads | Measures the effectiveness of our advertising | 3 months |
For more information on how Google uses data, please see Google’s Privacy Policy: https://policies.google.com/privacy
ARTICLE 9 – YOUR RIGHTS
Under the UK GDPR, you have the right to:
- access the personal data we hold about you;
- correct any inaccurate or incomplete data;
- delete your data, where we no longer need it or have no legal reason to keep it;
- restrict how we use your data in certain circumstances;
- object to our use of your data where we rely on legitimate interests;
- receive your data in a commonly used format, or ask us to transfer it to another organisation (data portability);
- withdraw your consent at any time, where we rely on consent (for example, for optional cookies).
You can also delete your customer account at any time, or ask us to do so.
To exercise any of these rights, please email us at contact@my-onesie.co.uk. We may ask you to confirm your identity before responding. We will reply within one month, free of charge in most cases.
ARTICLE 10 – CHILDREN
Although we sell onesies for children and babies, our website and services are intended for adults. You must be at least 18 years old to create an account or place an order.
We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at contact@my-onesie.co.uk and we will delete it.
ARTICLE 11 – CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time, for example to reflect changes to our website, our services or the law. The latest version will always be available on this page, with the date of the last update shown at the bottom of this page.
If we make significant changes, we will let you know, for example by displaying a notice on the website or by email.
ARTICLE 12 – CONTACT
If you have any questions about this Privacy Policy or how we use your personal data, or if you wish to exercise your rights, please contact us:
SCANDO, LLC
651 N Broad St, Suite 201, Middletown, DE 19709, USA
Email: contact@my-onesie.co.uk
Phone: +44 7258 547893
Last updated: September 2026