Privacy Policy

Baby Cart (babycart.co) is operated by [Legal business name and licence number], a business licensed in the United Arab Emirates ("we", "us"). This policy explains what personal data we collect when you use Baby Cart, why, and your choices. We process personal data in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

• Account: your email address and a securely hashed version of your password. We never store your password in readable form.
• Profile: the names you enter (for example parents' and baby's names), due date, baby's gender if you choose to share it, and a profile or cover photo if you upload one.
• Delivery address: the address you add so gifts can reach you. Guests see only your city and country, never your full address.
• Registry content: items, store links, prices, notes (such as size or colour), priority tags, and the cash or gift card details you choose to add (for example an IBAN or a payment link).
• Gift marks: when a guest marks an item as purchased, the name and optional note they enter, which you can see in your gift tracker.
• Collaborators: the email addresses of people you invite to edit your registry.
• Messages you send to [email protected].

We use your data only to run Baby Cart: to create and secure your account, show your registry to the people you share it with, let guests mark gifts, let collaborators edit, and answer your messages. We do not sell your personal data.

A private registry is visible only to people who have its link. A public registry can also be found by searching for it on Baby Cart. In both cases guests see your names, photos, items and city and country, but not your full address or email.

We use a sign-in cookie to keep you logged in, and your browser's local storage to remember your language and registry settings on your device. We use Cloudflare Web Analytics to count visits. It does not use cookies or track you across other websites.

Baby Cart is hosted on Cloudflare (Cloudflare Pages and the Cloudflare D1 database). Cloudflare may process data in data centres outside the UAE. We rely on Cloudflare's security and data protection commitments for this.

When you or a guest open a store link, you leave Baby Cart and that store's own privacy policy applies. Some links may be affiliate links, which means we may earn a commission at no extra cost to you. We do not receive your payment details from stores. If you contact a service provider we refer, what you share with them is governed by their policy.

We keep your data while your account is active. If you ask us to delete your account, we delete your account and registry data, except anything we must keep by law.

You can ask to access, correct, or delete your personal data, or to restrict or object to its processing, by emailing [email protected]. You can also edit most of your data yourself from your profile and registry pages.

Baby Cart is for adults aged 18 or over. Registries may include a baby's name and photo, which parents add and control.

We may update this policy and will change the date at the top when we do. Questions: [email protected].