Privacy policy
Last updated October 2026.
The short version
We have no accounts, no logins and no newsletter, so there is nothing to sign up to and no profile of you here. We use Google Analytics to count visits, and product links carry an Amazon affiliate tag. If you email us, we have your email because you sent it.
Who we are
Bump & Bolster is published by Selena Hann. For anything in this policy, contact contact@bumpandbolster.com.
What we collect
Analytics
We use Google Analytics 4 to understand which pages people read and which links they click. It sets cookies and collects information including your approximate location (derived from your IP address, not a precise one), your device and browser, the pages you visit, and events such as clicking a product link or submitting the contact form.
We use this in aggregate — which pages are useful, which are not — and we do not attempt to identify individual visitors. Google processes this data as described in Google’s privacy policy. You can opt out with Google’s browser add-on, or by using a browser or extension that blocks analytics scripts.
Performance measurement
Our hosting provider, Vercel, collects anonymized page-performance measurements (how fast pages load and render). These are aggregated and are not used to identify you.
Affiliate links
Product links go through a path on our own domain and then redirect to Amazon with our affiliate tag attached. That redirect sets no cookie of its own.
Amazon may set its own cookies once you arrive there, which is how it attributes a purchase to us. That is Amazon’s processing, under Amazon’s privacy notice. We never see what you bought, your payment details or your Amazon account information — only aggregate commission reporting.
The contact form
If you use the contact form, we receive your name, email address, any subject line and your message. We use them solely to reply to you and, where relevant, to correct the page you wrote about. The message is delivered by email through Microsoft Graph and kept in the site’s inbox.
The form also records the time it was loaded and includes a hidden field that real visitors never fill. Both are anti-spam measures and neither identifies you.
What we do not collect
- No accounts, no passwords, no logins.
- No newsletter and no marketing list.
- No payment information. Nothing is sold on this site.
- No advertising networks and no retargeting pixels.
- No precise location data.
- No sale of personal information to anyone, which includes “sharing” for cross-context behavioral advertising.
Legal basis and your rights
Where the UK GDPR or EU GDPR applies, our basis for analytics is legitimate interest in understanding whether the site is useful, and for the contact form it is performing the correspondence you asked for.
You can ask us what personal data we hold about you, ask for it to be corrected or deleted, or object to our processing. For almost everyone that will amount to an email thread, which we will delete on request. Email contact@bumpandbolster.com.
If you are a California resident, you have the right to know what personal information we collect and to request its deletion. We do not sell or share personal information, so there is nothing to opt out of.
Retention
Analytics data is retained for the period configured in Google Analytics (currently its standard retention window). Contact-form emails are kept while they are useful for correspondence or a correction record, and deleted on request.
Children
This site is intended for adults and we do not knowingly collect personal information from children.
Changes to this policy
If this policy changes, the date at the top changes with it. Material changes will be described rather than quietly swapped in.