Privacy & cookies
What we know about you, why we need it, and how to ask us about it.
Last updated 26 October 2026
1. Who looks after your data
Mon Bebe d'amour is the controller of the personal data collected through this website, under the EU General Data Protection Regulation (GDPR) and Cyprus Law 125(I)/2018. For any privacy question or request, contact us:
- Mon Bebe d'amour
- Gladstonos 56, 3041 Limassol, Cyprus
- Phone: 25342637 · Email: [email protected]
2. What we collect and why
| What | Why | Legal basis |
|---|---|---|
| Account: name, email, phone, password | To let you sign in and see your details. | Contract — you asked for an account. |
| Orders: name, email, phone, delivery address or locker, items, notes | To take payment, deliver your order, handle returns and keep accounting records. | Contract; legal obligation (tax and accounting records). |
| Payments: amount, status and reference from JCC | To confirm you've paid and process refunds. We never receive your full card number. | Contract; legal obligation. |
| Messages: name, email and what you write to us | To reply to you. | Legitimate interest in answering customers. |
| Technical: IP address, browser, pages requested | To deliver the website and keep it secure. | Legitimate interest in a working, secure shop. |
We don't send marketing emails, we don't sell your data, and we don't build advertising profiles. Our shop is for adults; we don't knowingly collect data from children.
3. Who we share it with
Only the people who need it to help us serve you:
- JCC Payment Systems — processes card payments.
- Our delivery partners (the courier, or Box Now for locker orders) — your name, phone and delivery address or locker.
- MMH Systems Development Ltd — builds and maintains our website and shop system on our behalf, under a duty of confidentiality.
- Google Fonts and unpkg — serve the fonts and icons this website uses, so they receive your IP address when the page loads. Google may process it outside the EU under approved safeguards.
- OpenStreetMap — only if you allow maps (see cookies below), to show our shop map.
- Public authorities — such as the Tax Department, where the law requires it.
If you tap our Viber, Instagram or Facebook links, those services handle your data under their own privacy policies.
4. How long we keep it
- Orders and invoices: as long as Cyprus tax and accounting law requires (currently six years).
- Your account: until you ask us to close it.
- Messages to us: as long as needed to deal with them, and no longer than two years.
5. Your rights
You can ask us, free of charge, to:
- give you a copy of the personal data we hold about you;
- correct anything that's wrong, or delete data we no longer need;
- restrict or object to how we use it, or send it to you in a portable format;
- withdraw any consent you've given, at any time.
Email [email protected] or call 25342637. We'll reply within one month. If you're unhappy with how we've handled your data, you can complain to the Commissioner for Personal Data Protection in Cyprus (dataprotection.gov.cy).
7. Changes to this policy
If we change how we use your data, we'll update this page and the date at the top. Please also read our Terms & conditions.