Privacy policy

Last updated: September 8, 2025

Mother Babe (“we,” “us,” “our”) operates this online store and website (the “Services”). We are established in the European Union and act as the data controller of your personal data.

By using the Services, you acknowledge this Privacy Policy.

1) Who we are (Data Controller)

Mother Babe
Email: info.motherbabe@gmail.com
Address: Retailove, Bradetu, 627232 Bradetu Argeș, Romania

2) What we collect

We collect the following categories of personal data, depending on how you use the Services:

  • Contact details: name, email, phone, billing/shipping address.

  • Order & payment details: items purchased/returned, order totals, transaction identifiers, and limited payment info (processed by our payment providers; we do not store full card numbers).

  • Account details (if you create one): username, password, preferences.

  • Customer support content: messages and attachments you send us.

  • Device/usage data: IP address, device and browser type, pages viewed, interactions, and cookie identifiers.

3) Sources of data

  • Directly from you (checkout, account creation, support).

  • Automatically via cookies and similar technologies when you browse our site.

  • From service providers (e.g., payment, shipping, analytics) acting on our behalf.

4) Purposes & lawful bases (GDPR Art. 6)

We process your personal data for:

  • Order processing & account management (fulfilment, shipping, returns, customer service) — Performance of a contract (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)).

  • Payments & fraud prevention — Legitimate interests and legal obligations (e.g., accounting, tax) (Art. 6(1)(c), (f)).

  • Service improvement & analytics (e.g., to understand site usage, fix issues) — Legitimate interests (Art. 6(1)(f)).

  • Direct marketing (emails/SMS, on-site personalization, ads) — Consent where required (Art. 6(1)(a)); otherwise legitimate interests (Art. 6(1)(f)). You can withdraw consent at any time.

  • Legal compliance (tax, accounting, responses to lawful requests) — Legal obligation (Art. 6(1)(c)).

5) Cookies & similar technologies

We use cookies/pixels to:

  • make the site work (strictly necessary),

  • remember preferences,

  • measure performance/traffic, and

  • personalize/market where permitted.

Where required, we will request your consent for non-essential cookies when you first visit. You can change preferences anytime via our cookie settings (or your browser settings). Note that blocking some cookies may affect functionality.

6) Who we share data with (processors & recipients)

We share personal data only as needed to operate our Services:

  • Shopify (store platform/hosting, checkout, security).

  • Payment processors (process payments, fraud checks).

  • Shipping & logistics partners (deliver orders, handle returns).

  • IT/Cloud & analytics providers (hosting, email, performance).

  • Professional advisors/authorities (legal, tax, compliance) where required by law.

  • Business transfers (e.g., merger, acquisition) — your data may be transferred as part of the transaction.

We do not sell your personal data.

7) International transfers

Some providers (including Shopify and certain sub-processors) may process data outside the EEA/UK. Where this occurs, we rely on EU Standard Contractual Clauses (SCCs) and/or other lawful safeguards. You may contact us for a copy of relevant safeguards (with redactions where necessary).

8) Data retention (how long we keep data)

We keep data only as long as needed for the purposes above and to meet legal/accounting obligations. Typical periods:

  • Orders & invoices: up to 10 years (tax/accounting laws).

  • Account data: kept while your account is active; deleted or anonymized after inactivity and any statutory retention.

  • Customer support: up to 3 years after resolution (or longer if needed for legal claims).

  • Marketing data: until you withdraw consent or object; we will then suppress your contact from marketing lists.

9) Your rights (EEA/UK GDPR)

You have the right to access, rectify, erase, restrict, and port your personal data, and to object to processing based on legitimate interests or direct marketing at any time. Where processing is based on consent, you may withdraw consent at any time (this does not affect prior lawful processing).

To exercise your rights, email info.motherbabe@gmail.com We may need to verify your identity. We will respond within one month (extendable by two months for complex requests, with notice).

You also have the right to lodge a complaint with your local data protection authority. In Romania, this is the National Supervisory Authority for Personal Data Processing (ANSPDCP). You can also contact your EEA authority of residence.

10) Children’s privacy

Our Services are not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child provided data, contact us to delete it.

11) Automated decision-making

We do not engage in automated decision-making producing legal or similarly significant effects (GDPR Art. 22).

12) Shopify (our platform)

We use Shopify to power our store (hosting, checkout, analytics, security). Shopify processes your data as our processor and may act as an independent controller for some aggregated or platform-level activities. For details and your options, see Shopify’s Privacy Policy and Privacy Portal.

13) Changes to this policy

If we update this Privacy Policy, we will post the new version here and update the “Last updated” date. Material changes will be communicated as required by law.

14) Contact us

Questions or requests about this Privacy Policy or your personal data:
Mother Babe — info.motherbabe@gmail.com
Retailove, Bradetu, 627232 Bradetu Argeș, Romania