Privacy policy

 

This Privacy Policy describes how babybooa.shop (“babybooa.shop,” “we,” “us,” or “our”) collects, uses, discloses, stores, and otherwise processes personal information when you visit, use, or make a purchase from babybooa.shop (the “Site”), communicate with us, or otherwise interact with our services.

Our Site offers women’s fashion products, including dresses, mini skirts, denim jeans, fashion skirts, slim-fit trousers, and related clothing and accessories.

For the purposes of this Privacy Policy, “you” and “your” refer to any visitor, customer, account holder, or other person whose personal information we process in connection with the Site.

Please read this Privacy Policy carefully. By accessing or using the Site, you acknowledge that you have read and understood the practices described in this Privacy Policy.

1. Personal Information We Collect

The personal information we collect depends on how you interact with the Site, the products or services you use, the choices you make, and the features available on the Site.

We may collect the following categories of personal information.

Contact Information

We may collect information such as:

• Your full name;

• Billing address;

• Shipping address;

• Email address;

• Telephone number; and

• Other contact information you provide to us.

Order and Transaction Information

When you place or attempt to place an order, we may collect:

• Products viewed, added to your cart, or purchased;

• Product size, colour, quantity, and style selections;

• Order number;

• Order date and transaction history;

• Billing and shipping details;

• Delivery method;

• Order status;

• Returns, refunds, cancellations, and exchanges;

• Discount codes and promotional offers used;

• Communications concerning your order; and

• Information required to detect or prevent fraudulent transactions.

Payment Information

Payments are processed through Shopify and authorised third-party payment providers.

Depending on the payment method selected, payment providers may collect information such as:

• Credit or debit card information;

• Payment account information;

• Billing address;

• Transaction identifiers;

• Payment authorisation details; and

• Fraud-prevention or identity-verification information.

We generally do not receive or store complete payment card numbers. We may receive limited payment information, such as the payment method used, payment status, card type, and the final digits of a payment card.

Payment providers process personal information according to their own terms and privacy policies.

Account Information

If customer accounts are available and you create an account, we may collect:

• Your name;

• Email address;

• Telephone number;

• Password or authentication credentials;

• Saved addresses;

• Order history;

• Product preferences;

• Wishlist or saved product information; and

• Account settings.

Passwords are managed through the applicable authentication system and are not available to us in readable form.

Customer Support Information

When you contact us, we may collect:

• The content of your message;

• Your order number;

• Your contact details;

• Photographs or videos you submit;

• Product and packaging photographs;

• Return or refund information;

• Delivery or tracking information;

• Complaint details;

• Feedback and survey responses; and

• Any other information you voluntarily provide.

Please do not send sensitive personal information unless it is necessary for us to address your request.

Device and Usage Information

When you visit or use the Site, we and our service providers may automatically collect information including:

• Internet Protocol address;

• Browser type and version;

• Device type;

• Operating system;

• Language and regional settings;

• Time zone;

• Referring website or advertisement;

• Pages viewed;

• Products viewed;

• Search activity;

• Shopping cart activity;

• Checkout activity;

• Links clicked;

• Date and time of access;

• Session duration;

• Approximate location derived from an IP address;

• Cookie identifiers;

• Advertising identifiers; and

• Information about how you interact with the Site.

Marketing and Preference Information

We may collect information concerning:

• Email or SMS marketing preferences;

• Cookie and privacy choices;

• Products or categories that interest you;

• Engagement with advertisements;

• Engagement with promotional emails or messages;

• Survey responses;

• Promotion participation; and

• Communication preferences.

Information Received From Third Parties

We may receive personal information from third parties, including:

• Shopify;

• Payment processors;

• Shipping carriers and fulfilment providers;

• Fraud-prevention providers;

• Analytics providers;

• Advertising and marketing partners;

• Social media platforms;

• Customer support providers;

• Email or messaging service providers;

• Apps and services connected to the Site; and

• Other service providers that assist us in operating the Site.

Information received from third parties is handled in accordance with this Privacy Policy and any restrictions imposed by the source of the information.

2. How We Use Personal Information

We may use personal information for the following purposes.

Providing Products and Services

We use personal information to:

• Process and fulfil orders;

• Accept and verify payments;

• Provide order confirmations;

• Arrange shipping and delivery;

• Provide tracking information;

• Process returns, refunds, cancellations, and exchanges;

• Maintain customer accounts;

• Provide customer support;

• Respond to questions and complaints;

• Communicate about orders;

• Maintain shopping carts and checkout sessions; and

• Provide other features requested by customers.

Operating and Improving the Site

We may use personal information to:

• Operate, maintain, and improve the Site;

• Understand how customers use the Site;

• Improve navigation, checkout, and product presentation;

• Measure Site performance;

• Diagnose technical problems;

• Develop new products, services, and features;

• Conduct internal analysis;

• Personalise the shopping experience;

• Recommend products that may be relevant to you; and

• Evaluate the effectiveness of our services.

Marketing and Advertising

Subject to your choices and applicable law, we may use personal information to:

• Send promotional emails or messages;

• Notify you about new products, offers, or promotions;

• Display personalised or interest-based advertising;

• Measure advertising performance;

• Create advertising audiences;

• Limit repeated advertisements;

• Understand whether advertisements resulted in Site visits or purchases; and

• Improve our marketing campaigns.

You may unsubscribe from promotional emails at any time by using the unsubscribe link included in the message or by contacting us.

Opting out of marketing communications does not prevent us from sending non-promotional messages concerning your orders, account, returns, refunds, security, or other service-related matters.

Security and Fraud Prevention

We may use personal information to:

• Authenticate transactions;

• Detect suspicious or fraudulent activity;

• Prevent unauthorised account access;

• Protect customers, the Site, and our service providers;

• Investigate policy violations;

• Enforce our Terms of Service;

• Prevent abuse, chargebacks, and payment fraud; and

• Maintain the security and integrity of our systems.

Legal and Regulatory Purposes

We may use personal information to:

• Comply with applicable laws and regulations;

• Respond to lawful requests from public authorities;

• Establish, exercise, or defend legal claims;

• Maintain tax, accounting, and business records;

• Enforce contracts and policies;

• Respond to court orders, subpoenas, or regulatory requests; and

• Protect our legal rights and the rights of others.

3. Legal Bases for Processing

Where laws such as the General Data Protection Regulation or comparable privacy laws apply, we process personal information under one or more of the following legal bases:

Performance of a Contract

We process personal information when necessary to:

• Accept and fulfil an order;

• Process payment;

• Deliver products;

• Provide customer service;

• Manage returns and refunds; or

• Perform our obligations under an agreement with you.

Legitimate Interests

We may process personal information when reasonably necessary for legitimate business interests, including:

• Operating and improving the Site;

• Preventing fraud;

• Securing our systems;

• Understanding customer behaviour;

• Providing customer support;

• Protecting our legal rights; and

• Conducting appropriate marketing activities.

We consider whether these interests are overridden by your rights and interests before relying on this basis.

Consent

We may process personal information with your consent, including for certain:

• Marketing communications;

• Advertising activities;

• Non-essential Cookies;

• Analytics technologies; and

• Personalisation features.

Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect processing lawfully carried out before consent was withdrawn.

Legal Obligations

We may process personal information when necessary to comply with tax, accounting, consumer protection, law-enforcement, regulatory, or other legal obligations.

Protection of Vital Interests

In limited circumstances, we may process personal information where necessary to protect the vital interests of an individual.

4. Cookies and Similar Technologies

We and our service providers may use Cookies, pixels, tags, software development kits, local storage, and similar technologies.

Cookies are small files stored on your device that help websites operate, remember preferences, analyse usage, and support advertising.

The Site may use the following categories of Cookies.

Strictly Necessary Cookies

These Cookies are required for functions such as:

• Site security;

• Shopping cart operation;

• Checkout;

• Payment processing;

• Account authentication;

• Fraud prevention;

• Network management; and

• Saving privacy choices.

Because these Cookies are necessary for the Site to function, they may not be capable of being disabled through our Cookie controls.

Functional Cookies

These Cookies help provide enhanced functionality, such as:

• Remembering language or region;

• Remembering customer preferences;

• Saving selected products;

• Improving convenience; and

• Providing personalised Site features.

Analytics Cookies

These Cookies help us understand:

• How visitors reach the Site;

• Which pages or products are viewed;

• How visitors navigate the Site;

• Whether technical errors occur; and

• How Site performance may be improved.

Advertising Cookies

These Cookies and similar technologies may be used to:

• Deliver relevant advertisements;

• Measure advertising effectiveness;

• Create or measure audiences;

• Understand whether an advertisement led to a purchase;

• Limit repeated advertisements; and

• Support cross-site or cross-service advertising where permitted.

Where required by law, non-essential Cookies will be used only after you provide consent.

You may manage your Cookie preferences through the Cookie banner or privacy controls displayed on the Site, where available. You may also configure your browser to reject or delete Cookies.

Blocking certain Cookies may affect Site functionality, account features, shopping carts, checkout, or personalisation.

5. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients.

Shopify

Our Site is hosted and supported by Shopify. Shopify processes personal information to provide ecommerce platform, hosting, checkout, security, analytics, payment, and related services.

Depending on the Shopify services and features enabled, Shopify may process personal information on our behalf and may also process certain information for purposes described in Shopify’s own privacy documentation.

Payment Providers

We may disclose personal information to payment providers to:

• Process transactions;

• Verify payments;

• Prevent fraud;

• Handle disputes;

• Issue refunds; and

• Comply with financial regulations.

Shipping and Fulfilment Providers

We may provide information such as your name, delivery address, telephone number, email address, order details, and tracking information to:

• Warehouses;

• Fulfilment providers;

• Shipping carriers;

• Logistics companies;

• Customs agents; and

• Delivery partners.

This information is disclosed only to the extent reasonably necessary to fulfil and deliver your order.

Technology and Business Service Providers

We may disclose information to providers supporting:

• Website hosting;

• Cloud storage;

• Cybersecurity;

• Customer support;

• Email delivery;

• SMS messaging;

• Analytics;

• Accounting;

• Fraud prevention;

• Returns management;

• Product reviews;

• Site search;

• Data management; and

• Other business operations.

These providers are permitted to process information only for agreed services and subject to appropriate contractual or legal obligations.

Advertising and Marketing Partners

Where permitted by law and subject to your privacy choices, we may disclose identifiers, device information, browsing activity, purchase activity, or advertising interaction information to advertising and marketing partners.

Such activities may be considered “selling,” “sharing,” or targeted advertising under certain privacy laws, even where no money is exchanged for personal information.

Professional Advisers

We may disclose information to lawyers, accountants, auditors, insurers, financial advisers, and other professional advisers when reasonably necessary.

Government and Legal Authorities

We may disclose information where we reasonably believe disclosure is necessary to:

• Comply with applicable law;

• Respond to lawful government requests;

• Comply with court orders or legal processes;

• Investigate fraud or security incidents;

• Enforce our agreements;

• Protect our rights or property; or

• Protect the safety and rights of customers or other persons.

Business Transfers

If our business or assets are involved in a merger, acquisition, financing, reorganisation, insolvency, sale, or transfer, personal information may be disclosed or transferred as part of that transaction, subject to applicable law.

6. Sale, Sharing, and Targeted Advertising

We do not sell personal information to third parties in exchange for money.

However, certain disclosures involving advertising Cookies, pixels, analytics tools, or advertising partners may be classified as a “sale,” “sharing,” or use for targeted advertising under some privacy laws.

Where applicable, you may opt out by:

• Using the Cookie or privacy settings available on the Site;

• Using a “Your Privacy Choices,” “Do Not Sell or Share My Personal Information,” or similar link displayed on the Site, where available;

• Enabling a legally recognised browser-based opt-out signal, such as Global Privacy Control, where applicable; or

• Contacting us at info@babybooa.shop.

We do not knowingly sell or share the personal information of children.

7. Shopify and Third-Party Services

The Site is operated using Shopify’s ecommerce platform.

When you access the Site or complete a transaction, Shopify and connected service providers may process personal information required to provide the Site, checkout, payment, security, analytics, and related services.

Third-party websites, applications, payment services, social networks, or other services accessible through the Site may have their own privacy policies and practices.

We are not responsible for the privacy, security, accuracy, or content of third-party services that we do not control. You should review the privacy policy of each third-party service before providing personal information.

8. International Data Transfers

We and our service providers may process or store personal information in countries other than the country in which you live.

Privacy laws in those countries may differ from the laws in your jurisdiction.

Where required by applicable law, we use recognised safeguards for international data transfers. These safeguards may include:

• Adequacy decisions;

• Standard contractual clauses;

• Data processing agreements;

• Contractual confidentiality and security obligations; and

• Other legally recognised transfer mechanisms.

By using the Site, you understand that personal information may be processed by Shopify and other service providers in locations where they operate, subject to applicable legal requirements.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

The retention period may depend on:

• The duration of our relationship with you;

• Whether you maintain a customer account;

• The time required to fulfil an order;

• Return, refund, and chargeback periods;

• Tax and accounting obligations;

• Fraud-prevention requirements;

• Legal limitation periods;

• Regulatory requirements;

• Dispute resolution;

• Security considerations; and

• Our legitimate business needs.

When personal information is no longer required, we may delete, anonymise, or securely dispose of it, unless continued retention is required or permitted by law.

Deletion from active systems may not immediately remove information from secure backup systems. Backup information will be deleted or isolated in accordance with normal backup retention procedures.

10. Data Security

We use reasonable administrative, technical, and organisational safeguards designed to protect personal information against:

• Unauthorised access;

• Accidental loss;

• Misuse;

• Alteration;

• Disclosure;

• Destruction; and

• Other unlawful processing.

These safeguards may include access controls, encrypted connections, service-provider controls, fraud monitoring, system security measures, and staff or contractor confidentiality requirements.

No method of electronic transmission or storage is completely secure. Therefore, we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly if you suspect unauthorised access to your account.

11. Your Privacy Rights

Depending on where you live and subject to applicable law, you may have the right to:

• Know whether we process your personal information;

• Request access to personal information we hold about you;

• Receive information about the categories and sources of personal information collected;

• Request correction of inaccurate personal information;

• Request deletion of personal information;

• Request restriction of processing;

• Object to certain processing;

• Withdraw consent;

• Request a portable copy of certain personal information;

• Opt out of targeted advertising;

• Opt out of the sale or sharing of personal information;

• Limit certain uses of sensitive personal information;

• Lodge a complaint with a privacy or data protection authority; and

• Receive equal service without unlawful discrimination for exercising privacy rights.

These rights are not absolute. A request may be denied or limited where an exception applies, including where information must be retained to:

• Complete a transaction;

• Provide a requested service;

• Prevent fraud;

• Maintain security;

• Comply with legal obligations;

• Establish or defend legal claims;

• Protect the rights of others; or

• Maintain permitted internal records.

12. Exercising Your Privacy Rights

To submit a privacy request, contact:

Email: info@babybooa.shop

Please state that your message concerns a privacy request and clearly describe the right you wish to exercise.

We may ask for information reasonably necessary to:

• Verify your identity;

• Confirm that the request relates to you;

• Locate relevant records; and

• Protect personal information from unauthorised disclosure.

Verification information will be used only to verify and process the request.

Where permitted by law, an authorised agent may submit a request on your behalf. We may require proof of the agent’s authority and may ask you to verify your identity directly.

We will respond within the period required by applicable law. Where additional time is legally permitted and reasonably necessary, we will notify you.

You will not receive unlawful discriminatory treatment for exercising a privacy right.

13. European Economic Area and United Kingdom Residents

If you are located in the European Economic Area or the United Kingdom, you may have rights concerning:

• Access;

• Rectification;

• Erasure;

• Restriction;

• Objection;

• Data portability;

• Withdrawal of consent; and

• Complaints to a competent supervisory authority.

Where we rely on legitimate interests, you may have the right to object to processing based on your particular circumstances.

You may object at any time to the use of personal information for direct marketing.

Where processing is based on consent, withdrawing consent does not affect the lawfulness of processing conducted before withdrawal.

14. United States Privacy Rights

Residents of certain United States jurisdictions may have additional rights, subject to applicable eligibility requirements and exceptions.

These rights may include:

• The right to know the categories of personal information collected;

• The right to know the sources and purposes of collection;

• The right to know the categories of recipients;

• The right to request access or deletion;

• The right to request correction;

• The right to opt out of sale, sharing, or targeted advertising;

• The right to limit certain uses of sensitive personal information;

• The right to appeal certain privacy-request decisions; and

• The right not to receive discriminatory treatment.

During the preceding 12 months, we may have collected the categories of information described in the “Personal Information We Collect” section and disclosed them for the business purposes described in this Privacy Policy.

We do not knowingly use or disclose sensitive personal information for the purpose of inferring characteristics about individuals.

15. Marketing Communications

You may unsubscribe from promotional emails by selecting the unsubscribe link included in the relevant email.

You may also request removal from marketing communications by contacting info@babybooa.shop.

After opting out, you may continue to receive transactional or service-related communications, including:

• Order confirmations;

• Shipping notifications;

• Delivery updates;

• Account notices;

• Return and refund communications;

• Security notifications; and

• Responses to customer service requests.

It may take a reasonable period for an opt-out request to be applied across all marketing systems.

16. Automated Processing and Fraud Screening

We and our service providers may use automated tools to identify potentially fraudulent, unauthorised, or high-risk transactions.

These tools may evaluate information such as:

• Order value;

• Payment information;

• IP address;

• Device information;

• Billing and shipping address consistency;

• Order history; and

• Transaction patterns.

Automated screening may result in an order being held for review, requiring verification, or being cancelled where fraud or unauthorised activity is reasonably suspected.

Where applicable law provides rights relating to solely automated decisions with significant effects, you may contact us to request additional information or human review.

17. Children’s Privacy

The Site is intended for general adult customers and is not directed to children under the age of 16.

We do not knowingly collect personal information directly from children under 16.

If you are a parent or legal guardian and believe that a child has provided personal information to us, contact info@babybooa.shop. We will review the request and take appropriate steps in accordance with applicable law.

18. Sensitive Personal Information

We do not intentionally request sensitive personal information such as:

• Government identification numbers;

• Medical records;

• Biometric identifiers;

• Precise geolocation;

• Religious beliefs;

• Political opinions; or

• Information about sexual orientation.

Please avoid sending sensitive information unless it is strictly necessary for a specific customer service or legal matter.

If sensitive information is provided, we will process it only as reasonably necessary and as permitted by law.

19. User-Generated Content and Product Reviews

If the Site allows you to submit reviews, photographs, comments, or other content, information you choose to publish may become visible to other users.

Do not include personal information in publicly accessible reviews or content unless you want that information to be publicly displayed.

We are not responsible for information that you voluntarily make public through Site features.

20. Social Media

The Site may include links, buttons, pixels, plug-ins, or features provided by social media platforms.

When you interact with these features, the relevant platform may collect information about your device, Site activity, or account.

Your interactions with social media services are governed by the privacy policies of those services.

21. External Links

The Site may contain links to websites or services operated by third parties.

We do not control and are not responsible for the privacy or security practices of those third parties.

A link from our Site does not constitute an endorsement of the third party’s privacy practices. You should review the privacy policy of any external service before providing information.

22. Do Not Track Signals

Some browsers provide a “Do Not Track” setting.

Because there is not a universally accepted technical standard for responding to all Do Not Track signals, the Site may not respond to traditional Do Not Track settings.

Where required by applicable law, we may recognise legally valid opt-out preference signals, including Global Privacy Control.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• Our business practices;

• Site features;

• Products and services;

• Shopify functionality;

• Service providers;

• Legal requirements; or

• Regulatory guidance.

When we update this Privacy Policy, we will publish the revised version on the Site and update the “Last updated” date.

Where required by law, we will provide additional notice or obtain consent before materially changing how personal information is processed.

24. Complaints

If you have a concern about how we process personal information, please contact us first so that we can review and attempt to resolve the issue.

Depending on your location, you may also have the right to lodge a complaint with the privacy, consumer protection, or data protection authority responsible for your jurisdiction.

25. Contact Us

For questions about this Privacy Policy, requests to exercise privacy rights, or concerns about our handling of personal information, contact:

Email: info@babybooa.shop

Please include sufficient information for us to understand and respond to your request. Do not include complete payment card details, passwords, or unnecessary sensitive information in your email.