Privacy policy

Last updated: 18 October 2026

Trader: „ЕДЖРИН БЕБЕ“ ЕООД, company registration number (EIK) 208164498, VAT number BG208164498, trading as ECRINBABY. Registered office address: 6 Sportist Street (ул. „Спортист“ 6), 4006 Plovdiv, Bulgaria. Store, correspondence and returns address: 172 6-ti Septemvri Boulevard (бул. „6-ти септември“ 172), Plovdiv, Bulgaria. Email: ecrinbabyy@gmail.com. Telephone: +359 89 611 6883.

Privacy policy

Who is responsible for personal data

„ЕДЖРИН БЕБЕ“ ЕООД is the controller of personal data it processes in connection with sales and customer service at Ecrinbaby.com. For questions or to exercise your rights, use the email address above. This policy covers the online store and communications with us; separate external services' terms apply to their own activities.

Data we process

Name, email address, telephone number, delivery and billing addresses, order, payment, delivery, return and complaint details; the contents of your enquiries; information you provide for invoices or a customer account; and technical information such as IP address, device, browser, session and interactions with the website. Sources include information you provide, technical data collected when using the store and necessary confirmations from payment and logistics partners.

Payments are handled through the secure payment services shown at checkout. Do not email card numbers, security codes, passwords or verification codes.

Purposes and legal bases

  • Orders and customer service: processing orders, payments, deliveries and related communications to perform the contract or take steps before entering into it.
  • Accounting and legal obligations: issuing and retaining records and meeting obligations concerning statutory claims, tax and other legally required supervision.
  • Security and protection of rights: preventing fraud, ensuring technical security and protecting rights in disputes, based on legitimate interests after considering your rights.
  • Marketing and non-essential cookies: based on consent where required. You may withdraw consent without affecting the lawfulness of processing before withdrawal. Placing an order does not oblige you to accept marketing messages.

Recipients

Shopify, to operate and host the store; the payment providers used; carriers and manufacturers where they dispatch orders directly; technical and accounting service providers to the extent necessary for their role; and competent authorities where required by law. Shopify and other providers may act as processors or independent controllers depending on the particular service.

Personal data may be processed outside the European Economic Area when international providers are used. Appropriate legal transfer mechanisms apply in such cases, such as an adequacy decision or standard contractual clauses, where applicable. Limiting deliveries to the EU does not mean that all technical service providers are located in the EU. For more information about Shopify, see its privacy policy.

Retention and security

Order data and records are retained for the applicable accounting, tax and other statutory periods. Correspondence and statutory-claim information are retained to resolve the matter and protect rights within the applicable limitation periods. Account information is retained while the account is needed to provide the service, except for records that must be retained by law. Marketing information is used until consent is withdrawn or the purpose ends; minimal information recording an objection to marketing may be retained to honour that objection. Technical records are retained according to operational and security needs and the relevant provider's settings. Appropriate safeguards are applied, but absolute security cannot be guaranteed.

Your rights

Subject to the legal conditions, you have rights to information, access, rectification, erasure, restriction, portability and objection. You may object to direct marketing and withdraw consent. Send requests to ecrinbabyy@gmail.com. We may request necessary identity verification without collecting unnecessary information. We respond within the applicable legal time limit. You may complain to the Bulgarian Commission for Personal Data Protection or the competent authority in another EU country; you do not have to complain to us first.

Necessary information and external services

Without the information necessary for ordering, payment and delivery, we cannot fulfil the purchase. Marketing consent is optional. The store is intended for purchases by adults. Do not enter unnecessary sensitive information in free-text fields. If we learn that children's data has been provided unlawfully, we will address the matter in accordance with the law.