Legal · European Union
Privacy Policy
Last updated: 13 September 2026 · Written for customers shopping from the EU / EEA under the GDPR (Regulation (EU) 2016/679).
1. Who we are
Baby Caramelo (“we”, “us”) operates this webshop and sells seamless activewear to customers in the European Union and EEA. For privacy questions contact hello@babycaramelo.com.
2. What data we collect
Depending on how you use the site, we may process: name, email, phone, shipping address, order details, payment status (handled by payment providers), bag contents stored locally on your device, and technical data such as browser type and approximate region needed to deliver the shop securely.
3. Why we process data (legal bases)
We process personal data to: fulfil and deliver your order (contract); answer support requests (legitimate interest / contract); meet bookkeeping and tax duties (legal obligation); and — only with your consent — measure site performance. You can withdraw consent at any time.
4. Cookies & local storage
Essential storage keeps your shopping bag and checkout session working. Preference storage remembers that you accepted this notice. We do not sell your data. Non-essential tracking is not enabled unless you later opt in.
5. Payments & processors
Payments may be processed by trusted EU/EEA or GDPR-aligned providers (for example card / iDEAL gateways). They receive only what is needed to complete payment. We do not store full card numbers on our servers.
6. How long we keep data
Order and invoice data are kept as required by EU/national commercial and tax law (often up to 7 years). Support messages are kept only as long as useful to resolve your request. Bag data stays on your device until you clear it.
7. Your EU rights (GDPR)
You may request access, correction, erasure, restriction, portability, and object to certain processing. You may also lodge a complaint with your local supervisory authority (for example Autoriteit Persoonsgegevens in the Netherlands, AEPD in Spain, CNIL in France).
8. International transfers
If a tool processes data outside the EEA, we rely on appropriate safeguards such as EU Standard Contractual Clauses or an adequacy decision.
9. Children
This shop is intended for adults. We do not knowingly collect data from children under 16.
10. Updates
We may update this policy when our practices or the law change. The “Last updated” date below always reflects the current version.