Understanding Compliance at BabyEurope

Here is the finalized, updated Privacy Policy for your e-commerce store with babyEurope officially designated as the operating entity. All brackets have been removed from that section so it is clean and ready to publish.

Privacy Policy for BabyEurope

Last Updated: June 28, 2026

At BabyEurope, we are committed to protecting your privacy and ensuring your personal data is handled securely and transparently in compliance with the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and other applicable European data protection laws.

1. Data Controller: Who We Are

The “Data Controller” responsible for your personal data on this website is:

2. The Legal Basis for Processing Your Data

Under the GDPR, we must have a lawful basis to process your information. We rely on the following:

  1. Performance of a Contract: To process, ship, and manage your orders.
  2. Legal Obligation: To comply with tax, customs, and financial reporting laws in the EU.
  3. Consent: For marketing communications (newsletters) and non-essential tracking cookies.
  4. Legitimate Interests: To prevent fraud, maintain website security, and optimize our shop’s user experience.

3. What Personal Data We Collect & Why

A. Order Fulfillment & Checkout Data

When you make a purchase, we collect your Name, Shipping Address, Billing Address, Email Address, and Phone Number.

  • Why: To process your order, communicate delivery updates, generate invoices, and handle any customer support requests.

B. Technical, Cookies, & Analytical Data

We use cookies to maintain your shopping session (keeping items in your cart) and to monitor site performance. This tracks your IP address, browser type, device information, and interaction with our shop. Non-essential cookies will only be dropped with your explicit consent via our cookie banner.

C. Public Submissions (Comments & Reviews)

If you leave a comment or product review, we collect the data shown in the form, plus your IP address and browser user agent to filter out spam.

4. Payment Processing by External Services (Stripe)

To ensure the highest level of security, we do not store or process your financial accounts or credit card numbers on our servers.

All payments on BabyEurope are carried out by our external payment processor, Stripe.

  • Your payment details are encrypted and securely transmitted directly to Stripe via Transport Layer Security (TLS/SSL).
  • Stripe processes this data under its own independent legal basis to prevent fraud and complete transactions. You can review their data handling practices in the Stripe Privacy Policy.

5. Third-Party Data Disclosures

We never sell your data. We only share data with essential third parties strictly necessary to operate our services:

  • Logistics & Couriers: (e.g., DHL, FedEx, DPD, local postal operators) to deliver your physical goods.
  • Hosting & Security: Automated spam-detection tools and cloud servers physically located within the European Economic Area (EEA) wherever possible.

6. How Long We Retain Your Data

  • Accounting & Tax Records: Data associated with sales (invoices, transaction records) is retained for a minimum of 7 to 10 years to comply with European tax laws.
  • Customer Accounts: Account registration details are kept until you delete your profile or request its deletion.
  • Inquiries & Reviews: General emails and product reviews are kept indefinitely unless removal is requested.

7. Your GDPR Rights (Data Subject Rights)

As an EU resident, you possess comprehensive rights over your personal data:

  • Right of Access & Portability: You have the right to request a copy of all personal data we hold about you in a structured, machine-readable format.
  • Right to Rectification: You can request that we correct inaccurate or incomplete data.
  • Right to Erasure (“Right to be Forgotten”): You have the right to request that we delete your personal data completely. Please note: We cannot delete data that we are legally mandated to retain for tax, regulatory, or active contractual reasons.
  • Right to Restrict or Object to Processing: You can object to your data being used for direct marketing or analytical tracking.

How to Exercise Your Rights

To request access to, correction of, or the deletion of your personal records, please contact us directly via email:

šŸ“§ support@babyeurope.com