Privacy Policy

Last updated September 2023

HiPP is committed to protecting and respecting your privacy. This Privacy Policy tells you how HiPP UK Ltd. (“HiPP”, “we”, “us”, “our”) processes your personal data when you visit or use this website, sign-up for the HiPP BabyClub, purchase a HiPP product or contact HiPP in relation to your HiPP product. 

This Privacy Policy also describes your personal data protection rights, including a right to object to some of the processing that HiPP carries out. More information about your rights, and how to exercise them, is set out in the ‘Your data protection rights’ section. 

We may also provide you with additional information about how we process your personal data, when we collect personal data and where we feel it would be helpful to provide relevant and timely information.

From time to time, HiPP may change its Privacy Policy and post changes on this page. When we make a significant change, we will take steps to inform you via our website or by email. 

The personal data we collect about you depends on the particular activities carried out through our website. To interact with certain services we offer, you will need to share some personal data in order for us to operate that service. In other circumstances, you will be able to choose if you want to share your personal data and let us use it. Where that is the case, we will tell you and give you the choice before you give the personal data to us. We will also tell you whether declining to share that personal data will have any effect on your use of our website or any services we offer. 

We may collect the following personal data about you: 

• Your title, first name and surname, gender, address and contact information (including email address and telephone number)
• Any delivery addresses you nominate for your order(s)
• Your billing address
• Your account details 
• Your payment details 
• Information you provide in your reviews of us or survey responses
• Your activities on, and use of, our website
• Your IP address
• Information from cookies, including information on the devices you may use to make a purchase
• Your contact history and purchase history 
• Reasons for cancelling or returning your order
• Personal information you put on social media, including your social media handles

We may use your personal data to send you updates about our products and services, including benefits, promotions, discounts, and competitions. 

The legal basis for sending such updates is your consent. You have the right to opt out of receiving marketing communications at any time by: 

• Using the ‘unsubscribe’ link in emails; or
• Sending an email to hello@hipp.co.uk.

We may share your personal data with third parties where required by law, where it is necessary for fulfilment of a contract with you (e.g. to deliver our products), or where we have another legitimate interest in doing so. These organisations act as data processors and are strictly controlled in how they may/may not use your data and HiPP Organic remains responsible for the protection of your data. 

Such selected third parties include:

• Business partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you;
• E-commerce partners, e-commerce payment processors, e-payment providers and e-commerce product fulfilment providers for the performance of any contract we enter into with them or you;
• IT providers, including those who host our website and provide us with email services;
• Data analytic companies to enable us to better understand how you use our site and shop and make our online presence more appealing when you visit;
• Networks that require the data to select and serve relevant targeted adverts to you and other target consumers – this may include personalising the advertising content you (and other target consumers) see on social media, based on the details given by you;
• If you enter a promotion or competition involving third parties, those third parties need to update you on whether you have won a prize or for other fulfilment needs. When you enter a promotion, you are subject to any official rules of that promotion which may contain additional information about the specific privacy practices associated with the promotion;
• If we are under a duty to disclose or share your personal data in order to comply with any legal obligation or enforce or apply our website terms and conditions of use and other agreements or to protect the rights, property or safety of HiPP Organic, our customers or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction; and
• In order to provide relevant customer care. Please note that the personal data processed relating to customer care is held in a separate database and is not used for marketing purposes.

We, or the third parties mentioned above, may also share your personal data with our professional advisors. 

This may mean that your data will be transferred outside the UK to:

• Our/third-party companies that are located within the EU, in which the same standards of data protection will apply to your data; and
• Our/third-party companies that are located within the USA (see ‘Product reviews’, "Social media" and "User-generated content" for more details). 

We will retain your personal data only for as long as we need it for HiPP's legitimate interest in accordance with applicable law or to perform a service at your request or meet a legal requirement. 

At the end of the retention period, we will take steps to delete your personal data or hold it in a form that no longer identifies you.

Further details on this are available on request.

If you have provided us with consent to use your personal data, you have the right to withdraw that consent at any time. 

You may withdraw consent by: 

• Sending an email to hello@hipp.co.uk;
• In relation to cookie consent, changing the settings on the cookie banner via this link; or 
• In relation to marketing, following the unsubscribe option offered in the communication. 

Withdrawing consent will not affect the lawfulness of our use of your personal data in reliance on that consent before it was withdrawn. 

Under data protection law, your rights include:

• Your right of access - You have the right to ask us for copies of your personal data. 
• Your right to rectification - You have the right to ask us to rectify personal data you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. 
• Your right to erasure - You have the right to ask us to erase your personal data in certain circumstances. 
• Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal data in certain circumstances. 
• Your right to object to processing - You have the right to object to the processing of your personal data in certain circumstances.
• Your right to data portability - You have the right to ask that we transfer the personal data you gave us to another organisation, or to you, in certain circumstances.

We will endeavour to take all reasonable steps to protect your personal information. However, we cannot guarantee the security of any information you disclose online. You accept the inherent security risks of providing information and dealing online over the internet and you will not hold us responsible for any breach of security unless due to our negligence or willful default.

This website contains links to other sites, which are outside of our control. The inclusion of such as link does not mean that HiPP endorses that site. HiPP is not responsible for the privacy practices or the content of such web sites. We advise that you check the privacy policy of any linked sites that you may visit.

If you have any concerns about our use of your personal data, you can make a complaint to us at HiPP UK Ltd., The Annexe, Hurst Grove, Sandford Lane, Hurst, Reading, Berkshire, RG10 OSQ.

You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have used your data:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk 

Some data is automatically generated when you visit our website.

When you visit our website, we collect automatically occurring data that your browser transmits to our server (“log data”). Every time you access a page on our website and every time a file is called up, data about this process is stored in a log file on our server. This log data includes:

• The previous page from which the new page or file was requested
• The address of the accessed file or page
• The date and time of the request, the success of the request and the server load at the time of the request
• The transmitted data volume
• The IP address assigned to you by your provider
• If you log in with a user account, the login information for the corresponding web service
• The device used (mobile, desktop etc.) and operating system; and
• The browser software used.

This log data is evaluated exclusively for the analysis of technical faults and possible attacks on our website. In addition, log data can be evaluated anonymously for statistical purposes.

We delete log data after 30 days in order to be able to investigate appropriately in the event of technical faults or possible attacks on our website and, if necessary, to be able to report to supervisory authorities and security bodies.

We process log data on the basis of our legitimate interests in:

• Maintaining, improving and protecting the security and functionality of the website;
• Preventing misuse and detecting criminal activity which may be harmful to you and/or us; and/or
• Statistical evaluation to help us understand our customer base. 

In addition to log data, we use cookies and other tracking technologies to record your use of our website/apps and to customise our website to your preferences. 

Some of these cookies and technologies are essential, meaning they are mandatory to provide the core functionality of our digital offerings. We are not required to obtain your consent for these; we have a legitimate interest in being as efficient as we can to deliver the best service to you. 

For non-mandatory tracking, we use consent management (our “cookie banner”), to offer you the opportunity to decide which cookies and tracking technologies you consent to. You can update your preferences or withdraw your consent at any time via the cookie banner. 

Visit our website Cookie Policy for further information about the cookies and tracking technologies used on our website and how to set your preferences.

Where you use our website contact form, we collect your first name and last name as well as your e-mail address so that we can contact you to answer your questions. If you give us your address or telephone number, we will be happy to write to you or call you back to answer your question.

Data you provide via the contact form will only be used to answer your request - it will not be used for sales or for any other advertising purpose. 

We process contact form data to: 

• Perform our contract with you or to take steps before entering into a contact; and/or 
• Based on our legitimate interest to answer enquiries from our customers efficiently. 

The contact form includes the option to consent to us saving your data, in which case we will store your information for as long as is necessary to answer your enquiry. You can withdraw your consent at any time. 

You can join the HiPP BabyClub on our website to receive benefits such as product samples, competitions and discounts. You can see an up-to-date overview of all the HiPP BabyClub benefits here.

Legal basis of processing for HiPP BabyClub

Registering for the HiPP BabyClub

When you register for the HiPP BabyClub for the first time, you’ll be asked to create a profile for yourself and your baby. We collect:

• Your first and last name; 
• Your email address;
• Your postal address; and
• A password of your choice. 

We also ask for details about your little one to personalise emails and packaging to make the information provided relevant to you and to send you product samples based on their age. This includes your child’s:

• First and last name; and 
• Date of birth.

To process your order, we require your contact details, including:

• First name and last name;
• Email address;
• Telephone number;
• Nominated delivery address; and
• Billing address. 

You will also have the option to provide your baby’s name. 

We will use your e-mail address to send you an order confirmation and verify your identity when creating an account. 

In the customer account, you can choose whether to save your personal data for future order processes. You can update your details at any time by changing your account settings or contacting us. You can delete your customer account at any time by following the steps in our FAQs.

We also collect your payment data as part of the ordering process. This information will be shared with our fulfilment partner, Promotional Handling Limited, for the purposes of completing your order but they will not contact you regarding any other services. Promotional Handling Limited can be contacted on 0800 012 9079 or at hippshop@promotionalhandling.co.uk.

Where you use a discount in our Shop, such as voucher codes, we collect statistical data that provides us with information about the effectiveness of certain campaigns. For example, we evaluate how many voucher codes were issued and how many of these voucher codes were actually redeemed. This does not result in any personal data – no reference is made to specific persons.

This section applies to users of using our dedicated UK healthcare professionals’ site.

We only collect personal data from you, as a healthcare professional, for the purposes of answering your queries submitted via our contact us page. To submit an enquiry, you must provide your first name, last name and email address. Optionally, you may also provide your postal address and/or phone number. 

In addition, you are given the option to consent to us saving your data, in which case we will store your information for as long as is necessary to answer your enquiry. You can withdraw your consent at any time. 

We may ask you to rate and review products you have purchased from us. On our website, you can also view product reviews from other customers and vote whether other customer’s reviews are helpful or not.

If you submit a product review, we (i) verify the authenticity of your review as described below and (ii) may use the information you provide in the review to advertise our products online thereafter.

We may use your review in online advertising for our products, for example on the HiPP website and social media accounts and also in our sales partners’ online media for the product reviewed. The following data is displayed in each case:

In the HiPP Buddies App, children and parents get to engage with our HiPPiS animals in various learning games and three exciting stories. The app is set up in an intuitive and user-friendly way and offers adventure stories that parents can read out loud as well as eight different learning games. These games are a fun and playful way to train kids’ cognitive skills. Whether it’s learning numbers or colours, guessing animal sounds or solving puzzles – the games are fully suitable for toddlers and children with five levels, each increasing in difficulty. All information about the HiPP Buddies App can be found here.

The legal basis for the data processing involved herein is Art. 6(1)(b) GDPR (contract performance and pre-contractual measures).

With your consent, we use Google Analytics (including Google Analytics for Firebase) to improve our app, an analytics service of Google Ireland Limited (Gordon House, Barrow St., Dublin 4, D04 E5W5, Ireland) and Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), collectively “Google”. Google Analytics uses “cookies”, which are text files placed on your smartphone to help the website analyse how users use the app.

As a rule, the information generated by Google Analytics about your use of the app is transmitted to a Google server in the United States and stored there for up to 14 months. Within the app, IP anonymisation has been activated so that the IP address of Google users within Member States of the European Union or in other Contracting States to the Agreement on the European Economic Area is shortened and made anonymous. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.

There is currently no decision by the EU Commission as to whether the USA offers a broadly adequate level of data protection. However, the EU Commission has published standard contractual clauses as a means of ensuring adequate protection when data is transferred to non-EU countries. For data transfers to the USA, Google relies on these standard contractual clauses and additional measures designed to protect your data. We can provide you with a copy of these standard contractual clauses upon request. Further information on data protection at Google can be found at https://policies.google.com/privacy?hl=en. You can find more information specifically on data collection by Google Analytics for Firebase here: https://support.google.com/firebase/answer/6318039?hl=en.

On our behalf, Google will use the information collected to evaluate your use of the app, compile reports on activities and provide us with other related services. The IP address transmitted by your smartphone as part of Google Analytics is not combined with other data from Google.

The legal basis for processing your data in connection with Google Analytics is Art. 6(1)(a) GDPR in conjunction with your consent. You can revoke your consent at any time with effect for the future by going to the menu item “Settings”. The withdrawal of consent does not affect the lawfulness of the data processing carried out from the time you gave consent until you withdrew it.

If you allow notifications to your smartphone through the HiPP Buddies App, we use the service Firebase Cloud Messaging, also from Google, for these notifications. With Firebase Cloud Messaging, your IP address and the messages sent to your smartphone will also be transmitted to Google servers in the USA, where they are only temporarily stored for the purpose of sending the message.

As already mentioned above, there is currently no decision of the EU Commission as to whether the USA generally offers an adequate level of data protection. However, the EU Commission has published standard contractual clauses as a means of ensuring adequate protection when data is transferred to non-EU countries. For data transfers to the USA, Google relies on these standard contractual clauses and additional measures designed to protect your data. We can provide you with a copy of these standard contractual clauses upon request. Further information on data protection at Google can be found at https://policies.google.com/privacy?hl=en. More information specifically on data collection by Google Firebase can be found at https://firebase.google.com/support/privacy?hl=en.

The legal basis for the processing of data associated with notifications to your smartphone is Art. 6(1)(b) GDPR (contract performance and pre-contractual measures). You can terminate this data processing at any time by deactivating the notifications from our HiPP Buddies App in your smartphone operating system.

To unsubscribe from our Brand Ambassador Programme emails, click on the link at the bottom of one of the emails you've received from us. Please note: If you unsubscribe from the Brand Ambassador Programme emails, you'll stop receiving all email communications from HiPP Organic. If you're a BabyClub member and wish to remain subscribed to our BabyClub emails, please email us at hello@hipp.co.uk. 

If you've signed up for our Brand Ambassador Programme and no longer wish to receive marketing communications via post or Instagram, please email us at hello@hipp.co.uk.

Please note: In some of the postal packages, there will be material and/or products from some of our third-party BabyClub Partners. Your personal data will not be shared with these brands.

We may reach out to social media users to seek their permission to feature our favourite content on our website, social channels and promotional materials.

We use Bazaarvoice, Inc. to collect, manage and evaluate user-generated content.

If you choose to allow us to use your words, pictures, images, video, post, survey answers, data, information or any other content you have put together (‘Content’) by replying to us and confirming you have read Bazaarvoice, Inc.’s Terms and Conditions, you agree to these Terms and Conditions, as well as the Instagram, Facebook, Twitter, Pinterest or other social channel terms and conditions of use (as applicable) and you certify that you are least 18 years of age.