Privacy policy

Last updated: 8 October 2026

Who we are

The controller of your personal data is Naïl BOUMENDJEL (EI), trading as BabyBeasties, 12 Rue De Venise, 69100 Villeurbanne, France. Contact: bmd.ecom691@gmail.com.

Data we collect

  • Orders: first and last name, delivery and billing address, email, phone number, items ordered, order history.
  • Payment: payments are processed by our payment providers; we do not store your full card details.
  • Messages: what you send us (email, contact form).
  • Browsing: technical data (device, browser, IP address) and cookies, according to your choices in the cookie banner.
  • Newsletter: your email address, only if you sign up.

Why and on what legal basis

  • Processing and delivering your order, handling returns and customer service: performance of the contract.
  • Keeping our accounts and meeting our obligations: legal obligation.
  • Preventing fraud and securing the website: legitimate interest.
  • Sending you offers by email and measuring audience or advertising: your consent, which you can withdraw at any time.

Who receives your data

Only the service providers we need: Shopify (website hosting and payments), our payment providers, our logistics partner and carriers (delivery name, address and phone number) and, if you have accepted them, our audience measurement and advertising tools. We never sell your data.

Transfers outside the European Union

Some of our providers are located outside the European Union, in particular our logistics partner, which ships orders from its international warehouse. We only share the data needed for delivery, and these transfers are carried out in accordance with the GDPR.

How long we keep your data

  • Order data and invoices: 10 years (accounting obligations).
  • Customer data used for our offers: 3 years after your last purchase or contact.
  • Cookies: 13 months maximum.

Your rights

You can access, correct or delete your data, object to its processing, restrict its use, request its portability and give instructions about what happens to it after your death. Write to us at bmd.ecom691@gmail.com. You can also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with the authority of your country.

If you live in the United States, you can also opt out of the sharing of your data for advertising purposes on the Your privacy choices page.

Cookies

Non-essential cookies (audience measurement, advertising) are only set with your consent, which you can change at any time from the cookie banner.

Children

Our products are made for children, but our services are intended for adults: we do not knowingly collect data about minors.

Changes

We may update this policy. The date of the last update is shown at the top of this page.