Privacy Policy

Last updated: 27 October 2026

Who is responsible for your information?

Southern Mummy, at https://southernmummy.co.uk, is owned and run by Amy Hyatt. Amy is responsible for the personal information used to run this website. For privacy questions, requests or complaints, email amy@southernmummy.co.uk.

Information you give us

If you email Amy, we receive your email address, your name if supplied, and the information you choose to include. We use this to answer your enquiry, deal with your request and keep a record where needed. Our lawful basis is our legitimate interest in responding to readers and managing correspondence. Where an enquiry concerns an agreement with you, processing may also be necessary to take steps at your request before entering into that agreement or to perform it.

Reader submissions

Comments are not enabled. We do not collect reader information through contact forms, competitions or other submission forms. You can contact Amy directly by email if you choose.

Site administration and security

Our hosting and security services process technical information such as IP addresses, browser details, requested pages, timestamps and attempted logins to deliver the website, diagnose faults and protect it against misuse. The site uses Wordfence for security. Our lawful basis is our legitimate interest in maintaining a working, secure website. This technical processing is separate from visitor analytics.

If you have an authorised website account, we also hold the account and profile information needed to provide and secure your access.

Analytics, advertising and newsletters

Southern Mummy does not use analytics, display advertising or affiliate links. Some older articles describe products supplied for review and retain their original disclosures. There are no current sponsored-post or gifted-product arrangements. We do not maintain a newsletter mailing list and have not previously operated one. The unused newsletter sign-up form has been removed.

Cookies and content from other websites

WordPress uses cookies for authorised administrators to log in and remember their preferences. Login cookies normally last for two days, or two weeks if “Remember Me” is selected. Display-preference cookies can last for a year. The temporary login-test cookie ends when the browser closes, and an editing cookie normally expires after a day. Security functions may also use cookies to distinguish legitimate requests from suspicious activity. These functional and security cookies are separate from analytics or advertising tracking.

You can remove or block cookies in your browser settings, although blocking essential cookies can prevent login and other functions from working.

Some articles include content or widgets from other services, such as videos or social-sharing features. Those services may receive technical information and use their own cookies when their content loads or you interact with it, particularly if you are signed in to that service. Their privacy and cookie notices apply to their processing. A link to another website also takes you to a separate service with its own practices.

Who can receive your information?

Amy can access information needed to answer enquiries and administer the website. The following providers also process information where needed to deliver their services:

20i Ltd: website hosting and email, including the technical operation, security and backup of those services. See 20i’s Data Processing Agreement and privacy policy.
Wordfence, provided by Defiant, Inc.: website security, including processing request and security information such as IP addresses, requested URLs and attempted logins. See Wordfence’s privacy policy.

Third-party content and social features are explained above. We may also disclose information where legally required or necessary to establish, exercise or defend legal claims.

Processing outside the UK

We do not promise that every service processes information only in the UK. 20i’s Data Processing Agreement describes processing in the UK and European Economic Area, and other locations where needed for its services. It provides for lawful transfer mechanisms such as the UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses where applicable.

Wordfence is provided by a US company and its services may involve processing outside the UK. Its published data-protection terms include standard contractual clauses. Contact Amy to request further information about the processing and safeguards relevant to your information.

How long is information kept?

Our retention period for routine enquiry correspondence, locally controlled security logs and rolling website backups is 30 days. Information may be kept longer where necessary to deal with an ongoing dispute, comply with a legal obligation or preserve evidence relating to a security incident. Access to any retained information is limited to that purpose.

Authorised administrator account details are kept while access is required to run the website; the 30-day period does not mean active administrator accounts are deleted each month.

Provider records can have different retention periods. 20i’s published privacy policy lists log rotation every 12 weeks and infrastructure backups kept for 12 months; it also lists a 30-day period for web-hosting data. Those provider-level periods are separate from our routine 30-day retention period. Wordfence’s own retention practices are explained in its linked privacy policy. Copies held in provider backups may therefore remain until the relevant retention cycle expires.

Email Amy to ask about a particular record, its retention period or deletion.

Your rights and choices

Depending on the circumstances, you can ask to access your personal information, correct it, erase it, restrict its use or receive a portable copy. These rights are subject to the applicable legal conditions; some records may need to be kept for legal or security reasons.

You have the right to object to processing based on legitimate interests, including the uses described above. Explain your circumstances when you contact Amy so the request can be considered. Where processing relies on consent, you can withdraw that consent without affecting processing that was lawful before withdrawal.

Email amy@southernmummy.co.uk to exercise your rights. We may need information to verify your identity before releasing personal data.

Concerns and complaints

Please contact Amy first so she can investigate and respond. You can also complain to the UK Information Commissioner’s Office. Visit the ICO complaints page for details.