FREE UK SHIPPING ON ORDERS ABOVE £50! SPEND OVER £30 FOR A FREE LIMITED EDITION WASH BAG!

Privacy policy

Last updated: October 2026

At My Bubble, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect when you visit yourbubble.co.uk or buy from us, how we use it, who we share it with, how long we keep it, and the rights you have over it. Please read it carefully. If you have any questions, you can contact us at info@yourbubble.co.uk.

1. Introduction and scope

This Privacy Policy sets out how Sonik Products Ltd, trading as My Bubble ("My Bubble", "we", "us" or "our"), collects, uses, stores, discloses and protects personal data relating to you when you visit or use our website at yourbubble.co.uk (the "Website"), create an account, place an order, sign up to receive communications from us, or otherwise contact or interact with us.

This Privacy Policy should be read together with our Terms of Service, Shipping Policy, Return & Refund Policy and Billing Policy. By using the Website or providing personal data to us, you acknowledge that you have read and understood this Privacy Policy. We do not sell your personal data to anyone.

2. Definitions

2.1 In this Privacy Policy, "personal data" means any information relating to an identified or identifiable living individual. "Processing" means any operation performed on personal data, including collecting, recording, organising, storing, using, disclosing and deleting it. "Data controller" means the organisation that decides how and why personal data is processed, and "data processor" means an organisation that processes personal data on behalf of a data controller.

2.2 Any reference to "you" or "your" means the individual whose personal data we process, whether as a customer, a visitor to the Website, a subscriber to our communications or a person who contacts us.

3. Who we are and how to contact us

Sonik Products Ltd is the data controller responsible for your personal data. Sonik Products Ltd is a private limited company with company registration number 3184821 and VAT number GB677777362. Our business address is Block C, Woodside End, Wembley, HA0 1UR, United Kingdom.

If you have any questions about this Privacy Policy or how we handle your personal data, you can contact us by email at info@yourbubble.co.uk, by telephone on +44 20 8795 5343 between 10am and 4pm (UK time), Monday to Friday, excluding UK bank holidays, or by post at the address above. Please mark your correspondence "Privacy request".

4. The personal data we collect

Information you give us

We collect personal data that you provide directly when you place an order, create an account, contact us, sign up to our communications or submit a return, exchange or delivery claim. This includes your full name, email address, telephone number, billing address and delivery address. Where you create an account, we also collect your login email address, an encrypted version of your password, your saved addresses and your order history.

Order and transaction information

We collect details of the products you purchase, the prices paid, your order reference number, delivery and tracking information, and records of any cancellations, returns, exchanges, refunds and claims connected with your order.

Payment information

Payments are processed by our third-party payment providers. We do not receive, see, or store your full payment card number or security code. We may receive limited payment information from our payment providers, such as the type of payment method used, the last four digits of your card, the card expiry date and confirmation that payment was successful or declined.

Communications and supporting evidence

When you contact us by email, telephone or through our contact form, we keep a record of that correspondence. Where you report a damaged, faulty, incorrect, missing or undelivered item, we collect the photographs and information you provide in support of your claim, including photographs of products, packaging and packing slips.

Information collected automatically

When you visit the Website, our service providers and we automatically collect certain technical and usage information. This includes your IP address, device type, browser type and version, operating system, approximate location derived from your IP address, the pages you view, the links you click, the time and duration of your visit, the website that referred you to us, and your shopping basket activity. This information is collected using cookies and similar technologies, as described in section 8.

Marketing preferences

We keep a record of whether you have agreed to receive marketing communications from us, any subsequent change to that preference and any request to unsubscribe.

Information from third parties

We may receive personal data about you from our delivery partners (for example, delivery status and proof of delivery), our payment providers (for example, payment confirmation and fraud screening results) and, where you have consented to the relevant cookies, our advertising and analytics partners.

Special category data

We do not intend to collect special category data, such as information about your health, racial or ethnic origin, or religious beliefs. Please do not send us such information. If you choose to share it with us, for example when describing a reaction to a product, we will use it only to handle your query and will protect it accordingly.

5. How we use your personal data and our lawful bases

  • Under Data Protection Laws, we may only process your personal data where we have a lawful basis to do so. We rely on the following lawful bases: performance of a contract with you, or taking steps at your request before entering into a contract; compliance with a legal obligation to which we are subject; our legitimate interests, or those of a third party, where those interests are not overridden by your rights and interests; and your consent.
  • We use your personal data to process, pack, dispatch and deliver your order, to send you order confirmations, dispatch notifications and tracking updates, and to manage your customer account. We rely on the performance of a contract for this processing.
  • We use your personal data to handle cancellations, returns, exchanges, refunds and claims relating to damaged, faulty, incorrect, missing, lost or undelivered items. We rely on performance of a contract and on our legal obligations under consumer protection law, including the Consumer Rights Act 2015 and the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013.
  • We use your personal data to respond to your enquiries and provide customer support. We rely on performance of a contract where your enquiry relates to an order, and otherwise on our legitimate interest in responding to people who contact us.
  • We use your personal data to detect and prevent fraud, unauthorised payments and misuse of the Website, and to keep our Website and checkout secure. We rely on our legitimate interest in protecting our business and our customers, and on our legal obligations where applicable.
  • We use your personal data to keep accounting, tax and transaction records. We rely on our legal obligations, including those imposed by HM Revenue & Customs and the Companies Act 2006.
  • We use technical and usage information to understand how visitors use the Website, to diagnose problems and to improve our Website, products and services. Where this involves non-essential cookies, we rely on your consent.
  • We use your personal data to send you marketing communications about our products, offers and news. We rely on your consent, or, where you are an existing customer, on our legitimate interests in accordance with PECR, as explained in section 6.
  • We use your personal data, where you have consented to marketing cookies, to show you relevant advertising on social media platforms and other websites and to measure the effectiveness of our advertising. We rely on your consent.
  • We use your personal data to comply with applicable laws and regulations, to respond to lawful requests from courts, regulators and law enforcement authorities, and to establish, exercise or defend legal claims. We rely on our legal obligations and our legitimate interests.
  • Where we rely on legitimate interests, you have the right to object to that processing, as explained in section 12. Where we rely on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before you withdrew consent.
  • Providing your name, contact details and delivery address is necessary for us to fulfil your order. If you do not provide this information, we will not be able to process your order.

6. Marketing communications

We will only send you marketing emails or other electronic marketing messages if you have opted in to receive them, or if you have previously purchased from us and did not opt out when given the opportunity, in which case we may send you marketing about similar products in accordance with PECR.

You can unsubscribe from marketing at any time by clicking the unsubscribe link in any marketing email or by emailing info@yourbubble.co.uk. We will act on your request promptly. Unsubscribing from marketing will not stop us sending you service messages about your orders, account, returns or refunds.

7. Disclosure of your personal data

We share your personal data only where necessary and only with the categories of recipients described in this section. All our service providers are required to keep your personal data secure and to process it only in accordance with our instructions and Data Protection Laws.

E-commerce platform

Our online shop is hosted by Shopify, which provides our Website, checkout, payment processing, and order management systems. Shopify processes your personal data on our behalf in order to provide these services.

Payment providers

Your payment information is processed by our card payment processors, Apple Pay and Google Pay, in order to take payment, prevent fraud and process refunds.

Delivery partners

We share your name, delivery address, email address and telephone number with Royal Mail, DPD and Evri so that they can deliver your order and keep you informed about your delivery.

Advertising and analytics partners

Where you have consented to analytics or marketing cookies, information about your use of the Website may be shared with advertising and analytics partners, such as Meta Platforms (Facebook and Instagram), to measure and improve our Website and advertising.

Professional advisers

We may share personal data with our accountants, auditors, lawyers, insurers and other professional advisers where necessary for them to provide services to us.

Authorities and legal requirements

We may disclose personal data to HM Revenue & Customs, the police, courts, regulators or other public authorities where we are required to do so by law, or where disclosure is necessary to prevent fraud or to establish, exercise or defend legal claims.

Business transfers

If we sell, transfer or merge all or part of our business or assets, your personal data may be transferred to the buyer or successor, who will be required to use it in accordance with this Privacy Policy.

8. Cookies and similar technologies

  • Cookies are small text files placed on your device when you visit a website. We and our service providers use cookies and similar technologies, such as pixels and local storage, on the Website.
  • Strictly necessary cookies are essential for the Website to function. They enable core features such as your shopping basket, checkout, account login, and security. We do not need your consent to use these cookies.
  • Analytics cookies help us understand how visitors use the Website, such as which pages are visited most often, so that we can improve it. Marketing cookies allow us and our advertising partners to show you relevant advertising and to measure how well our advertising works.
  • In accordance with PECR, we will only place analytics and marketing cookies on your device if you give your consent through our cookie banner. You can accept or reject non-essential cookies, and you can change your choice at any time through the cookie settings on the Website or through your browser settings. Blocking strictly necessary cookies may prevent parts of the Website, including checkout, from working properly.

9. International transfers

Some of our service providers, including Shopify, may store or process your personal data outside the United Kingdom, including in Canada, the European Economic Area and the United States.

Where personal data is transferred outside the United Kingdom, we ensure that it receives an essentially equivalent level of protection. We do this by transferring personal data only to countries that the UK Government has found to provide an adequate level of protection, or by relying on appropriate safeguards, such as the International Data Transfer Agreement or the International Data Transfer Addendum to the European Commission's Standard Contractual Clauses issued by the Information Commissioner, or the UK Extension to the EU-US Data Privacy Framework. You may contact us for further information about the safeguards we use.

10. Data retention

  • We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, tax or reporting requirements.
  • We retain order, payment, invoice and refund records for 6 years from the end of the financial year to which they relate, in order to comply with our tax and accounting obligations. We retain customer account information for as long as your account remains open, and we delete it upon your request, save for records that we are required by law to keep.
  • We retain customer service correspondence and photographs submitted in support of claims for 2 years after the relevant query or claim has been resolved. We retain marketing preferences until you unsubscribe, after which we keep your email address on a suppression list to ensure we respect your choice not to receive marketing. Cookie data is retained for the duration of each cookie's lifespan, as shown in our cookie settings.
  • When personal data is no longer required, we securely delete or anonymise it.

11. Data security

  • We have implemented appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. The Website and checkout are hosted on Shopify's secure platform. All data transmitted between your device and the Website is encrypted using SSL/TLS technology, and payments are processed in accordance with the Payment Card Industry Data Security Standard (PCI DSS) Level 1.
  • Access to your personal data is limited to those employees and service providers who need it to perform their duties, and who are subject to a duty of confidentiality.
  • We have procedures in place to deal with any suspected personal data breach. Where required by law, we will notify the Information Commissioner's Office within 72 hours of becoming aware of a breach, and we will notify you without undue delay where a breach is likely to result in a high risk to your rights and freedoms.
  • No method of transmission over the internet is completely secure. While we take every reasonable step to protect your personal data, we cannot guarantee the security of data transmitted to the Website. You are responsible for keeping your account password confidential.

12. Your rights under UK data protection law

Subject to certain conditions and exemptions, you have the following rights in relation to your personal data.

Right of access

You have the right to request confirmation of whether we process your personal data and to receive a copy of it, together with information about how it is processed.

Right to rectification

You have the right to ask us to correct personal data that is inaccurate and to complete personal data that is incomplete.

Right to erasure

You have the right to ask us to delete your personal data where, for example, it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no other lawful basis for processing it.

Right to restriction of processing

You have the right to ask us to restrict the processing of your personal data, for example while we verify its accuracy or consider an objection you have raised.

Right to object

You have the right to object to processing based on our legitimate interests. You have an absolute right to object at any time to the processing of your personal data for direct marketing purposes.

Right to data portability

You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, and to ask us to transmit it to another organisation, where processing is based on consent or contract and carried out by automated means.

Right to withdraw consent

Where we rely on your consent, you have the right to withdraw it at any time.

Rights relating to automated decision-making

You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects for you. We do not make any such decisions.

13. Exercising your rights

To exercise any of your rights, please email info@yourbubble.co.uk with the subject "Privacy request", or write to us at the address in section 3. You will not usually need to pay a fee. However, we may charge a reasonable fee, or refuse to comply, where a request is manifestly unfounded or excessive.

We may need to request specific information from you to confirm your identity before responding, to ensure that personal data is not disclosed to anyone who is not entitled to receive it.

We will respond to all legitimate requests within one month of receipt. Where a request is particularly complex, or where you have made several requests, we may extend this period by up to two further months, in which case we will tell you and explain why.

14. Complaints

If you have a concern about how we handle your personal data, we would ask you to contact us first so that we have the opportunity to resolve it.

You have the right to lodge a complaint at any time with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. The ICO can be contacted at www.ico.org.uk or by telephone on 0303 123 1113. If you live in the European Economic Area, you may also lodge a complaint with the data protection authority in your country of residence.

15. Additional information for visitors outside the United Kingdom

We deliver only to addresses within the United Kingdom. However, the Website may be accessed from other countries, and we apply the protections in this Privacy Policy to everyone whose personal data we process, wherever they are located.

European Economic Area

If you are located in the European Economic Area, you have rights under the EU General Data Protection Regulation equivalent to those described in section 12, and you may exercise them in the manner described in section 13.

United States

Depending on your state of residence, including California, Virginia, Colorado, Connecticut and other states with consumer privacy laws, you may have the right to know what personal information we collect, use and disclose; to access, correct and delete your personal information; and to opt out of the processing of your personal information for targeted advertising. We do not sell personal information in exchange for money. We honour browser-based opt-out preference signals, such as Global Privacy Control, where supported by our platform. We will not discriminate against you for exercising any of your privacy rights. To make a request, please contact us as described in section 13.

Canada

If you are located in Canada, you have the right to access the personal information we hold about you and to request that it be corrected, in accordance with the Personal Information Protection and Electronic Documents Act and applicable provincial laws.

Other jurisdictions

If you are located in any other country, please contact us, and we will handle your request in accordance with the laws that apply to you.

16. Children's privacy

16.1 The Website and our products are intended for adults aged 18 and over. We do not knowingly collect or process personal data relating to anyone under the age of 18. If we become aware that we have collected personal data from a person under 18, we will delete it as soon as reasonably possible. If you believe that a child has provided us with personal data, please contact us.

17. Third-party websites and social media

17.1 The Website contains links to third-party websites and social media platforms, including Instagram and Facebook. These third parties have their own privacy policies, and we are not responsible for their content or for how they process your personal data. We encourage you to read the privacy policy of every website you visit. If you interact with us on social media, the relevant platform's privacy policy will also apply.

18. Changes to this Privacy Policy

18.1 We may update this Privacy Policy from time to time to reflect changes in the law, our practices or the services we offer. The "Last updated" date at the top of this Privacy Policy shows when it was last revised. Where we make material changes, we will notify you by email or by placing a prominent notice on the Website before the changes take effect. We encourage you to review this Privacy Policy regularly.

19. Contact us

19.1 If you have any questions, comments or requests regarding this Privacy Policy or our handling of your personal data, please contact us or email info@yourbubble.co.uk with "Privacy request" in the subject line.

Business Information

Legal Entity: Sonik Products Ltd (Private Limited Company)

Brand Name: My Bubble

Address: Block C, Woodside End, Wembley, HA0 1UR, United Kingdom

Phone: +44 20 8795 5343

Email: info@yourbubble.co.uk

Support Hours: Monday to Friday, 10am to 4pm (UK time), closed on weekends and UK bank holidays