Privacy policy

Last updated: 27 September 2026

Who we are

Nido & You is operated by MHJ DESIGN SRL, VAT BE0767567037, at Avenue Jean et Pierre Carsoel 150a, 1180 Uccle, Belgium. We are the controller of personal data we use to run nidoandyou.com and communicate with you. For privacy questions or requests, email hello@nidoandyou.com.

What we collect and why

We collect information you give us, information generated when you use the website, and information our service providers supply to operate it.

  • First-batch and newsletter signups: your email address, the list you choose, and records of your consent, confirmation and unsubscribe. We use your consent to send the updates you requested. First-batch updates and general brand news are separate choices. Joining a list is not an order or a reservation, and no payment is taken for joining.
  • Messages and support: your contact details and what you send us. We use these to answer you, on the basis of our legitimate interest in responding to enquiries, or to take steps you request before a contract or fulfil a contract where applicable. Please do not send medical information or identifying details about your child unless genuinely necessary for your enquiry.
  • Website operation and security: device and browser information, IP address, requested pages, timestamps and technical identifiers. These help deliver the website, remember necessary preferences, prevent abuse and investigate faults. We rely on our legitimate interests in operating a reliable, secure service. Non-essential cookies and similar tracking are subject to consent where required.
  • Orders, if you place one when ordering is available: contact, billing and delivery details, items ordered, payment status and correspondence. These are used to fulfil the contract and meet accounting and other legal duties. Payment services process payment credentials; we do not need your full card number to provide customer support.

You can browse without joining a mailing list. If you do not provide an email address, we cannot send you updates; if you do not provide information needed to answer an enquiry or fulfil an order, we may not be able to do so.

Email choices

We use Shopify to manage our lists and send marketing emails. You can withdraw consent at any time using the unsubscribe link in a marketing email, or by contacting us. Withdrawing consent does not affect processing already carried out lawfully. We retain the unsubscribe status needed to avoid sending further marketing. Necessary replies about an enquiry or an existing order are separate from marketing.

Cookies, analytics and Shopify services

Our store runs on Shopify. Shopify uses cookies and similar technologies for functions such as security, preferences, checkout and, depending on your choices, analytics and personalization. Where consent is required, use the cookie banner to accept, reject or customize non-essential processing. You can revisit the cookie preferences control where displayed, or contact us for help. Blocking essential cookies in your browser may prevent some features from working.

Shopify Network Intelligence is enabled. This allows Shopify to use information about interactions with our store together with information from other merchants and Shopify to provide enhanced services, including improving products, personalization, performance and advertising. Shopify processes data for these purposes under its own responsibility and respects consent and opt-out signals supported by its privacy tools. Read the Shopify Consumer Privacy Policy and use the Shopify Privacy Portal for information and rights relating to that processing.

Judge.me Reviews is installed to support product-review functionality and has a Shopify app pixel. Information processed can include review content you submit and device or interaction information handled by the integration, subject to applicable consent choices. Do not include private information about other people in a public review.

Who receives information

We use Shopify for hosting, store operations and email-list management; Google Workspace for business email; and Judge.me for review functionality. These providers receive information needed for their services. When orders are available, payment and delivery providers receive the information needed to process and deliver your order. Professional advisers or public authorities may receive information where necessary to meet a legal duty or establish, exercise or defend legal claims. We do not sell our mailing list.

Links to Instagram, TikTok or other sites take you to services with their own privacy practices. Following a link does not subscribe you to Nido emails.

International processing

Our providers may process information outside Belgium or the European Economic Area, even where a hosting region is set to the EU. For transfers requiring safeguards, we rely on applicable adequacy decisions or contractual safeguards such as the European Commission's Standard Contractual Clauses, as relevant to the provider and transfer. Contact us to request information about the safeguards applicable to your data.

How long we keep information

We keep mailing-list information while you remain subscribed and it is needed for the requested updates. After you unsubscribe, limited consent and suppression records may be kept to demonstrate your choices and prevent further marketing. Enquiries are kept for as long as needed to resolve them and handle relevant follow-up or disputes. Transaction records, when applicable, are kept for required accounting and legal periods. Technical records are retained according to the security or operational purpose and the relevant provider's service settings. We assess retention by purpose, legal requirements and the need to establish or defend claims, and delete or anonymize information when it is no longer needed.

Your rights

Subject to applicable conditions, you can request access, correction, erasure, restriction or a portable copy of your personal data. You can object to processing based on legitimate interests and object to direct marketing at any time. You can withdraw consent without losing the right to use the website. Email hello@nidoandyou.com; we may ask for proportionate information to verify your identity. We normally respond within one month and will explain any lawful extension.

You can complain to the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit) or the supervisory authority where you live or work. You do not have to contact us first.

Children, security and changes

This website and its mailing lists are intended for adults. We do not ask children to provide information or require information about your baby to join our lists. If a child has provided personal data, contact us so we can review and remove it where appropriate.

We use access controls and established service providers to protect information, but no online service can guarantee absolute security. We may update this policy as our services change. The date above identifies the latest version; significant changes will be communicated as required.