Privacy Policy

Last updated: 9 July 2026

1. Who We Are

coucou. is the data controller responsible for your personal data collected through coucou.co.uk. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data protection contact: data@coucou.co.uk

2. What Data We Collect

We may collect and process the following categories of personal data:

• Identity data: your name, as provided via our contact or enquiry forms.
• Contact data: your email address and/or phone number.
• Communications data: the content of messages you send us via forms, email, or other channels.
• Technical data: IP address, browser type and version, device type, operating system, time zone, and general location (derived from IP). This is collected automatically when you visit our website.
• Usage data: pages visited, time spent on pages, and referring URLs.
• Cookie data: see our Cookie Policy for full details.

We do not collect any special category (sensitive) data such as health information, political opinions, or biometric data.

3. How We Collect Your Data

• Directly from you: when you fill in a form, send us an email, or otherwise contact us.
• Automatically: through cookies and similar technologies when you browse our website.

4. Legal Basis for Processing

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

• Consent (Article 6(1)(a)): where you have given clear consent — for example, by submitting a contact form or accepting non-essential cookies. You can withdraw consent at any time.
• Contractual necessity (Article 6(1)(b)): where processing is necessary to perform a contract with you or to take steps at your request before entering a contract.
• Legitimate interests (Article 6(1)(f)): where processing is necessary for our legitimate interests (e.g. improving our website, responding to enquiries) and your rights do not override those interests.
• Legal obligation (Article 6(1)(c)): where we are required by law to process your data (e.g. tax records, fraud prevention).

5. How We Use Your Data

• To respond to your enquiries and provide information about our services.
• To fulfil a contract or prepare to enter a contract with you.
• To administer and improve our website.
• To send you communications you have consented to receive. You may opt out at any time.
• To comply with legal obligations.

6. Data Sharing

We do not sell, rent, or trade your personal data. We may share data with:

• Service providers: trusted third parties who assist us in operating our website and delivering our services (e.g. hosting, email delivery). They process data only on our instructions and are contractually bound to keep it secure.
• Legal requirements: if required by law, regulation, legal process, or enforceable governmental request.

We do not transfer personal data outside the UK unless adequate safeguards are in place (such as Standard Contractual Clauses or an adequacy decision).

7. Data Retention

• Enquiry and contact data: retained for up to 2 years from your last interaction, or until you request deletion.
• Contractual records: retained for up to 6 years after the contract ends, in line with the Limitation Act 1980.
• Technical/analytics data: retained for up to 26 months.

We will securely delete or anonymise your data once the retention period expires.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data. These rights are not absolute and may be subject to exemptions:

• Right of access: request a copy of the personal data we hold about you (a "Subject Access Request").
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your data ("right to be forgotten") where there is no compelling reason for continued processing.
• Right to restrict processing: request that we limit how we use your data in certain circumstances.
• Right to data portability: request a copy of your data in a structured, machine-readable format.
• Right to object: object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent: where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email data@coucou.co.uk. We will respond within one month. If your request is complex, we may extend this by a further two months, but we will inform you within the first month.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS), access controls, and regular review of our security practices.

10. Children

Our website and services are not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to This Policy

We may update this policy from time to time. The latest version will always be available on this page. Where changes are material, we will take reasonable steps to notify you.

12. Complaints

If you are unhappy with how we handle your data, please contact us first at data@coucou.co.uk so we can try to resolve the issue. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

13. Contact

For any data protection queries, email data@coucou.co.uk.