Privacy notice
Last updated: 3 October 2026
The short version
We collect as little as we can: your email address, your child's first name, and the address you choose.
Emails sent to your child's address pass through our email provider to your inbox. We don't read them or keep copies.
We never sell your details or use them for advertising.
Who we are
Mummy's Mail is run by Glasgow Engineering Ltd (company number SC146270), 37 Balfron Road, Ralston, Paisley PA1 3HD, United Kingdom. We're the "controller" for the personal information described here, which means we decide how it's used and are responsible for looking after it. Our ICO registration number is 00015776790.
For anything about your personal information, email hello@mummysmail.com.
Information we collect
If you register your interest
Your email address, your child's first name, the address you'd like, whether you're interested in a safe contact list, and the date you registered.
If you buy an address
- Your name and email address, and your forwarding address if it's different
- Your child's first name, as it appears in their address
- The address itself, its start and end dates, and its status
- A record of your payment. Stripe handles your card details, and we never see or store them.
- Any emails you send us, for example to ask for help
We don't ask for your child's surname, date of birth, age, school or photos.
Emails sent to your child's address
When someone emails your child's address, our email provider receives the message and forwards it to you. This means the provider briefly handles the sender's details and the message content. We don't read, store or keep copies of these emails, and all mail is passed on to you, including anything flagged as spam, so your own email provider decides what reaches your inbox. Our provider keeps delivery records, such as sender and recipient addresses, date and time, and whether the message was delivered, for 7 days, so we can investigate problems like missing emails. Their backups are kept for up to 14 days. Once a message has been forwarded, no copy of it remains on their systems.
When you visit our website
We don't use cookies, analytics or advertising trackers. Our web host keeps standard server logs, including IP addresses, for security, typically for a few weeks. Our pages load fonts from Google Fonts, which means Google receives your IP address when you visit.
How and why we use it
| What we do | Why we're allowed to |
|---|---|
| Email you about our launch and give you first pick of your chosen address | Your consent, which you can withdraw at any time |
| Set up and run your child's address, forward emails, and send renewal reminders | To provide the service you've bought (our contract with you) |
| Handle the details of people who email your child's address, so their messages reach you | Our legitimate interest, and theirs, in delivering the emails they choose to send |
| Filter spam and viruses, and prevent misuse of the service | Our legitimate interest in keeping the service and children safe |
| Answer your questions and complaints | Our contract with you, or our legitimate interest in helping you |
| Keep payment and accounting records | Our legal obligations, for example to HMRC |
We'll only send you marketing emails about new features if you've agreed to them, and every one will include an easy way to unsubscribe.
Your child's information
We've designed the service to collect as little about children as possible. Your child doesn't use the service directly, and the address can't send email. You make decisions about your child's information and can use the rights below on their behalf.
Remember that an email address can reveal a child's first name to anyone it's shared with. Only give it to people and organisations you trust.
Who we share it with
We only share information with companies that help us run the service. They can only use it on our instructions and must keep it secure.
- Migadu, a Swiss company whose mail servers are in France, receives and forwards email to your child's address, and sends the emails we send you. We have a data processing agreement in place with them.
- Namecheap, based in the United States, hosts our website and stores the interest list.
- Stripe will process payments when we start selling addresses. Stripe operates in the UK, Ireland and the United States.
We may also share information if the law requires it, or to protect a child or anyone else from harm.
Some of these companies store or process information outside the UK. Switzerland and the countries of the EU have UK adequacy decisions, which means the UK government considers their data protection standards equivalent to our own. For companies in the United States we rely on protections such as the UK-US data bridge or the UK International Data Transfer Addendum. Email us if you'd like more details.
If we add another supplier, for example a separate service for sending our emails, we'll update this notice.
How long we keep it
- Interest list: until launch, or for up to 12 months if launch takes longer. If Mummy's Mail doesn't go ahead, we delete it.
- Account details: for your term and any grace and closed periods, then deleted within 3 months, unless you renew.
- Email delivery records: 7 days, held by our email provider, with backups kept for up to 14 days.
- Payment and accounting records: 6 years, as required by tax law.
- Emails you send us: up to 2 years after we last hear from you.
When an address is given to another family, none of your details or your child's go with it.
Your rights
You can ask us to:
- give you a copy of the information we hold about you or your child
- correct information that's wrong
- delete your information, where we don't need to keep it
- stop or limit how we use it, or object to how we use it
- send your information to you or another organisation in a usable format
Where we rely on your consent, you can withdraw it at any time. To use any of these rights, email hello@mummysmail.com. We'll reply within one month. We may need to confirm who you are first.
Keeping it safe
We use two-factor authentication on the accounts that run the service, give suppliers only the access they need, and keep the interest list and account records out of public reach. If a security incident puts your information at risk, we'll tell you and, where required, the ICO.
Complaints
If you're unhappy with how we've handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.
Changes to this notice
We'll update this notice if our use of your information changes. If the change is significant, we'll email you.