Last updated: January 4, 2026.
This Privacy Policy explains how Baby Mind Lab collects and processes personal data when you visit or purchase from https://babymindlab.com. It is intended to meet transparency duties under the GDPR (General Data Protection Regulation).
Who is responsible (Data Controller)
Controller: Baby Mind Lab, 16 rue Etienne Jules Marey, 78390 Bois d’Arcy, France.
Contact: contact@babymindlab.com.
What data is collected
Depending on how you use the site, we may collect:
-
Identity & contact data: name, billing/shipping address, email, phone.
-
Order data: products purchased, order history, messages to support, refunds/returns.
-
Payment data: payment status and transaction references (card details are handled by the payment provider, not stored by us).
-
Technical data: IP address, device/browser info, cookie identifiers, and site usage data (if analytics/cookies are enabled).
Why data is processed (purposes + legal bases)
We process personal data for these purposes and legal bases:
-
To provide and deliver your order (account creation, checkout, shipping, customer service) — contract necessity.
-
To manage payments and prevent fraud — contract necessity and/or legitimate interests.
-
To comply with legal obligations (tax, accounting, consumer law) — legal obligation.
-
Marketing emails (newsletter) — only if you opt in — consent.
-
Cookies/analytics/advertising — only where required and based on your choices — consent (where applicable).
Cookies and similar technologies
The website may use cookies and similar technologies to enable core site functions (e.g., cart, login), remember preferences, and—if enabled—measure traffic and marketing performance. Where required, optional cookies are used only after you provide consent through the cookie banner/settings.
Who we share data with (processors/third parties)
We share personal data only as needed to run the store, for example with:
-
Payment processors (to process payments).
-
Shipping and delivery providers (to deliver orders).
-
Website/hosting and technical providers (to operate and secure the site).
-
Analytics and marketing tools (only if enabled and according to your choices).
International transfers
Some service providers may process data outside the European Economic Area. In that case, transfers are protected using appropriate safeguards such as adequacy decisions or Standard Contractual Clauses (SCCs), where applicable.
Data retention
We keep personal data only for as long as needed for the purposes above, including legal, accounting, and reporting requirements. Typical retention includes:
-
Orders/invoices: kept for the period required by applicable tax/accounting law.
-
Customer support messages: kept as long as needed to resolve requests and handle follow-ups.
-
Marketing data: until you unsubscribe or withdraw consent.
Your GDPR rights
Under the GDPR, you may have rights including:
-
Access to your personal data, rectification, erasure, restriction, and portability.
-
Object to processing based on legitimate interests.
-
Withdraw consent at any time where processing is based on consent (e.g., marketing emails, certain cookies).
To exercise your rights, contact: contact@babymindlab.com.
Security
Appropriate technical and organizational measures are used to protect personal data (e.g., access controls and security practices suitable for an e-commerce site). No system is 100% secure, but security is reviewed and improved when needed.
Children
The store is not intended for children, and we do not knowingly collect personal data from children. If a parent/guardian believes a child provided personal data, please contact contact@babymindlab.com.
Complaints
If you have concerns, you can contact us at contact@babymindlab.com. You also have the right to lodge a complaint with your supervisory authority (for France, the CNIL).
Changes to this policy
This policy may be updated to reflect changes in practices or legal requirements, and the “Last updated” date will be revised accordingly.
If you tell which payment method (Stripe/PayPal), shipping carrier, newsletter tool, and analytics/cookie banner plugin you use, this can be tightened further by naming each provider explicitly.