GDPR
How we comply with the General Data Protection Regulation
Last updated: 15 december 2024
MyLittleMilestone takes the protection of personal data seriously. We comply with the General Data Protection Regulation (GDPR) and respect your privacy rights. On this page we explain what rights you have and how to exercise them.
Your rights
The GDPR gives you various rights regarding your personal data
Right of access
You have the right to know what data we have about you. Request a complete overview via your account settings.
Right to rectification
If your data is incorrect, you can adjust it yourself in your profile or ask us to do so.
Right to erasure
You can permanently delete your account and all associated data. This is irreversible.
Right to data portability
Download all your data in a common format to take to another service.
Right to restriction
In certain cases you can request to temporarily restrict the processing of your data.
Right to object
You can object to certain processing of your data, such as for marketing purposes.
What data do we process?
An overview of the categories of personal data we process
| Category | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Account data | Name, Email address, Password (hashed) | Account management and login | Contract execution | Until account deletion |
| Baby profile data | Baby name, Date of birth, Profile photo | App personalization | Contract execution | Until account deletion |
| Milestones & photos | Photos, Descriptions, Dates | Core app functionality | Contract execution | Until account deletion |
| Order data | Delivery address, Payment details, Order history | Processing and delivering orders | Contract execution | 7 years (legal requirement) |
| Technical data | IP address, Browser type, Device info | Security and performance | Legitimate interest | 90 days |
Exercise your rights
Want to exercise one of your GDPR rights? You can perform most actions yourself in your account settings. For other requests, you can contact us.
We respond within 30 days to requests regarding your GDPR rights. You can also file a complaint with the Data Protection Authority.