Privacy policy
Last updated: 7 October 2026
Who we are
CRIBTON is operated by Danielle Suy, trading as CRIBTON, as a sole trader.
For the purposes of UK data protection law, Danielle Suy trading as CRIBTON is the data controller for the personal information described in this policy, except where another organisation acts as a separate controller as explained below.
You can contact CRIBTON about privacy or your personal information at:
Email: cribtonintel@gmail.com
Postal address: 32 Holmewood Road, London SW2 3RR, United Kingdom
CRIBTON is currently primarily an editorial, discovery and community website for London parents, together with an email newsletter. At the date of this policy, we do not operate online checkout or process online orders or payments through this website. If this changes, we will update this policy before the relevant processing begins.
What personal information we collect and why
Newsletter information
We process information such as your email address, subscription status and preferences so that we can send CRIBTON emails you have chosen to receive and manage your subscription. Our lawful basis is consent.
Newsletter administration information
We process service information such as delivery, bounce and unsubscribe events so that we can operate the email service, maintain accurate subscription records and respect opt-outs. Our lawful basis is our legitimate interests in administering CRIBTON’s email service and complying with your choices.
Contact enquiries
If you contact CRIBTON, we may process your name, email address and the contents of your message so that we can reply to questions, corrections, suggestions, partnership enquiries or other messages. Our lawful basis is our legitimate interests in communicating with people who contact CRIBTON and, where relevant, taking steps at your request before entering into a contract.
Website, technical and security information
We may process technical information such as IP address, browser or device information, security information, cookie choices and information needed to provide, secure, maintain and troubleshoot the website. Our lawful basis is our legitimate interests in operating a secure and functional website. Where consent is required for non-essential cookies or similar technologies, we rely on consent.
Website analytics
Where you consent to analytics cookies or similar technologies, we use Google Analytics 4 to understand how visitors use CRIBTON and to improve the website. Analytics information may include online identifiers, device and browser information, approximate location, referral information, pages visited and interactions with the website.
Our lawful basis for personal data processed through non-essential analytics technologies is consent. We do not use Google Ads or Google remarketing at launch.
CRIBTON community information
Where you choose to interact with a CRIBTON-managed community on a third-party platform, we may process information needed to administer, moderate and operate that community. Our lawful basis is our legitimate interests in running and protecting the CRIBTON community.
Legal and business administration
We may use or retain information where reasonably necessary to comply with legal obligations or to establish, exercise or defend legal rights. Our lawful basis is legal obligation and, where applicable, legitimate interests.
You do not have to subscribe to CRIBTON emails, accept non-essential cookies or contact us. If you do not provide the information needed for a particular activity, we may simply be unable to provide that service or respond to your enquiry.
We do not ask you to provide sensitive or special-category personal information through the website. Please avoid sending sensitive information about yourself or a child unless it is genuinely necessary for your enquiry.
Where we get personal information
Most personal information comes directly from you, for example when you subscribe to CRIBTON emails, contact us or choose to participate in a CRIBTON community.
Some technical and analytics information is collected automatically when you use the website through Shopify and, where you consent, Google Analytics and similar technologies.
We may also receive information from service providers that operate systems on our behalf, for example subscription status or email-delivery information.
Email and marketing
CRIBTON sends marketing and editorial emails only to people who have signed up to receive them.
You can unsubscribe at any time using the unsubscribe option in a CRIBTON email.
You have the right to object at any time to the use of your personal information for direct marketing. If you unsubscribe or object, we will stop using your information to send that marketing.
We may retain limited information on a suppression record after you unsubscribe so that we can respect your preference and avoid accidentally adding you back to marketing.
Cookies and similar technologies
CRIBTON is hosted on Shopify, which uses cookies and similar technologies to operate and protect the website.
Some technologies are strictly necessary for the website to function, remain secure or remember essential choices. Other technologies, including analytics, personalisation and certain marketing technologies, are non-essential and are used only where the required consent has been obtained.
For visitors in the United Kingdom and other regions where opt-in consent is required, CRIBTON uses Shopify’s cookie-consent tools so that you can accept, reject or change your choices for non-essential cookies and similar technologies. You can revisit your choices through the cookie/privacy controls made available on the website.
Google Analytics 4 is treated as non-essential analytics at launch and is intended to operate only in accordance with the consent choices collected through Shopify’s privacy controls.
Klaviyo onsite behavioural tracking is not enabled at launch. CRIBTON does not currently run Google Ads, Google remarketing or an additional advertising pixel through Klaviyo.
If CRIBTON introduces additional analytics, advertising, affiliate tracking or similar technologies, we will review our privacy and cookie information and consent setup before activating them.
Google Analytics
CRIBTON uses Google Analytics 4, provided by Google, to understand website usage and improve CRIBTON.
Where consent is required, Google Analytics is enabled only after the relevant consent has been given. Google may process information such as device and browser details, online identifiers, approximate location, referral information and interactions with CRIBTON.
Google may process information internationally in accordance with its applicable terms and safeguards. You can find information about Google’s privacy practices at:
https://policies.google.com/privacy
Shopify and Shopify Network Intelligence
The CRIBTON website is hosted by Shopify.
Shopify processes personal information in order to provide its platform and services to CRIBTON. CRIBTON also has Shopify Network Intelligence enabled.
When Shopify Network Intelligence is enabled, Shopify may use information from interactions with CRIBTON together with information from interactions with other Shopify merchants and Shopify to provide enhanced Shopify services. For some of this processing, Shopify acts as a separate data controller.
Information submitted through the CRIBTON website may therefore be shared with and processed by Shopify and other relevant service providers, including in countries outside the United Kingdom.
You can find further information in the Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/app-users
You can exercise applicable rights relating to Shopify’s processing through the Shopify Privacy Portal:
https://privacy.shopify.com/en
Where consent is required for Shopify’s non-essential tracking or enhanced services, Shopify’s consent tools are used to respect those choices.
Klaviyo
CRIBTON uses Klaviyo to manage email subscribers and send CRIBTON emails.
Information such as your email address, subscription status and relevant email-service information may therefore be processed by Klaviyo on CRIBTON’s behalf.
CRIBTON does not currently use Klaviyo for SMS marketing, WhatsApp marketing or onsite behavioural tracking.
Who we share personal information with
We share personal information only where reasonably necessary to operate CRIBTON, provide a service you have requested, protect the website or comply with legal obligations.
This may include Shopify; Klaviyo; Google for consented website analytics; email, hosting, security and other technology providers; professional advisers where necessary; and regulators, courts, law-enforcement bodies or other authorities where disclosure is legally required.
If you choose to follow a CRIBTON link to a third-party website, venue, ticketing service, social platform or community platform, that organisation may process information under its own privacy policy.
CRIBTON does not sell or rent its newsletter subscriber list to brands, venues or other advertisers.
International transfers
Some of CRIBTON’s technology providers operate internationally, so personal information may be processed outside the United Kingdom.
Where required, CRIBTON and its service providers use recognised safeguards for international transfers, such as adequacy arrangements or appropriate contractual safeguards.
You can contact CRIBTON if you would like further information about safeguards used for international transfers.
How long we keep personal information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including any legal, security or record-keeping requirements.
For email subscribers, we normally keep your subscription information while you remain subscribed. If you unsubscribe, we may retain limited suppression information so that we can honour that choice.
For ordinary enquiries, we will normally keep correspondence only for as long as it is reasonably useful for handling the enquiry and related CRIBTON business, generally no longer than 24 months after the last meaningful contact, unless there is a continuing relationship, dispute or legal reason to retain it for longer.
Technical, analytics and security information is retained according to the purpose for which it is needed and the retention arrangements and settings of the relevant technology provider.
Your data-protection rights
Depending on the circumstances, UK data-protection law may give you rights to request access to your personal information; have inaccurate information corrected; request deletion in certain circumstances; ask us to restrict certain processing; object to certain processing; receive certain information in a portable format; and withdraw consent where processing relies on consent.
Withdrawing consent does not affect processing that was lawful before you withdrew it.
These rights are not all absolute and may depend on the circumstances and the lawful basis being used.
To exercise a right, contact cribtonintel@gmail.com.
Complaints
If you have concerns about how CRIBTON uses your personal information, please contact us first so that we can try to resolve the issue.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data-protection regulator:
https://ico.org.uk/make-a-complaint/data-protection-complaints/
Children
CRIBTON is designed for parents and other adults and is not intended to collect personal information directly from children.
If you believe a child has provided personal information to CRIBTON, please contact us so that we can review and, where appropriate, delete it.
Automated decision-making
CRIBTON does not currently make decisions about individuals using solely automated processing that produces legal or similarly significant effects.
Security
We take reasonable steps to protect personal information and use reputable technology providers to operate the website, analytics and email service.
No online system is completely secure, so we cannot guarantee absolute security.
Changes to this policy
We may update this policy when CRIBTON’s services, technology or use of personal information changes, or where legal requirements change.
Where a change introduces a materially new use of personal information, we will update the relevant privacy information before that processing begins.