Last updated: 01/12/2025

CubCare (“we”, “us”, “our”) is a brand operated by The Birth and Baby Company Ltd, a company registered in England & Wales under Company Number 15655287, with its registered office at: 27 Wilshere Road, Welwyn, Herts, AL6 9PU

The Birth and Baby Company Ltd is the data controller for all personal data collected through the CubCare website, services, courses, bookings and communications.

We are committed to protecting your personal information and respecting your privacy in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this Privacy Policy or how your data is used, please contact: [email protected]

1. What personal data we collect

We may collect and process the following types of information:

1.1 Information you provide directly

When you:

submit a contact form

book a class, course or consultation

enquire about doula support

purchase an online course

sign up for emails or downloads

complete intake or safety forms

contact us by email or social media

We may collect:

Name

Email address

Telephone number

Address or postcode (if relevant to bookings)

Pregnancy, birth or parenting information that you choose to share

Access needs or accommodations

Emergency contact (for in-person classes)

Payment details (processed securely via Stripe or PayPal – we do not see your full card details)

1.2 Information collected automatically

When you visit cubcare.co.uk, we may automatically collect:

IP address

Device type

Browser type

Pages viewed and time on site

General location (approximate)

Referral source

Cookie data

Website performance and analytics data

1.3 Information collected through third-party platforms

We use trusted third-party services such as: FEA Create, Stripe - our chosen website hosting and analytics providers, online course provider, email marketing, booking software and payments.

These platforms may collect data necessary to provide their service.
They act as our data processors and operate under UK GDPR-compliant agreements.

2. Our lawful basis for processing

Under UK GDPR, we rely on the following lawful bases:

2.1 Contract

To deliver the services you book or purchase (e.g. classes, doula support, online courses).

2.2 Consent

When you opt into marketing emails or accept non-essential cookies.

2.3 Legitimate interests

For:

improving our website and services

managing our business

sending essential service updates

ensuring class safety and access needs

fraud prevention

analytics and performance monitoring

We ensure our legitimate interests do not override your rights.

2.4 Legal obligation

For tax, accounting, insurance or safeguarding requirements.

3. How we use your data

We may use your information to:

process and manage bookings

deliver classes, consultations, courses and doula support

send service-related updates

administer your online course access

manage your account and purchases

respond to enquiries

maintain safety and emergency information

send marketing communications (only if you opted in)

improve our website and services

comply with legal, tax or insurance obligations

We never sell your data.

4. Marketing communications

We send marketing emails only if you have:

opted in, or purchased a service and have not opted out of related communications

You can unsubscribe at any time using the link in any email.

5. Sharing your data

We only share your information with trusted third-party providers that help us deliver our services, such as:

Payment processors (e.g. Stripe, PayPal)

Course platforms (e.g. Thinkific)

Email providers (e.g. MailerLite)

Booking systems

Website hosting and analytics services

These organisations only process your data on our instructions and must comply with UK GDPR.

We may also share your data where:

required by law, regulation or insurance

necessary to protect your vital interests

relevant to safeguarding concerns

We do not sell or rent your data to any third party.

6. International transfers

Some third-party processors may store data outside the UK.
Where this happens, we ensure appropriate safeguards are in place, such as:

UK adequacy regulations

Standard Contractual Clauses (SCCs)

All providers must meet UK GDPR requirements.

7. Data retention

We only keep your data for as long as necessary for the purposes collected.

Typical retention periods:

Client records (including doula notes): up to 7 years

Class registers / health forms: up to 3 years

Accounting and payment data: 7 years

Enquiry emails: up to 12 months

Marketing data: until you unsubscribe

Online course accounts: while your access remains active or until deletion is requested

When your data is no longer needed, it is securely deleted or anonymised.

8. Your rights

Under UK GDPR, you have the right to:

access your personal data

correct inaccurate data

request erasure (“right to be forgotten”)

restrict or object to processing

withdraw consent at any time

request data transfer (“data portability”)

To exercise any of these rights, email: [email protected]

We will respond within one month.

9. Security

We take appropriate technical and organisational measures to protect your data, including:

secure servers

password-protected systems

restricted access

data encryption where appropriate

GDPR-compliant contracts with all processors

secure payment processing (we never see full card details)

10. Cookies

This section forms our combined Privacy & Cookie Policy.

Cookies are small text files placed on your device to improve your browsing experience, support website functionality and help us understand how visitors use our site.

10.1 Types of cookies we use

Strictly Necessary Cookies

These enable essential website functions such as security, accessibility, and form submissions.
You cannot opt out of these.

Analytics / Performance Cookies

These help us understand:

how visitors use the site

which pages are popular

how well the site performs

We only use analytics cookies with your consent, where required.

Functionality Cookies

These remember preferences such as your location, device or cookie choices.

Third-Party Cookies

Depending on your interaction with the site, you may encounter cookies from:

Stripe (payment security)

Thinkific (online course access)

Email platforms

Website analytics tools

10.2 Managing cookies

You can accept or reject non-essential cookies.
You can also manage or disable cookies in your browser settings at any time.

Disabling certain cookies may affect website performance.

10.3 More information

If you want more detailed information about the cookies used by third-party providers, you can view their respective Cookie or Privacy Policies.

11. External links

Our website may contain links to external sites.
We are not responsible for their privacy practices.
Please check their policies before providing any personal data.

12. Changes to this Privacy Policy

We may update this policy from time to time.
The updated version will be posted here with the “Last updated” date.

13. Contact us

For any questions or requests about your personal data:

The Birth and Baby Company Ltd
Company Number: 15655287
Email: [email protected] or [email protected]
Registered office: 27 Wilshere Road, Welwyn, Herts, AL6 9PU