Last updated: July 11, 2026
This Privacy Policy explains how Mini & Me collects, uses, and protects your personal data when you visit our website or purchase from our store. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Romanian law.
2.1 Data you provide directly:
2.2 Data collected automatically:
2.3 Payment data. Payments are processed by our payment providers (e.g. Shopify Payments, PayPal). We do not receive or store your full card number. We receive only confirmation of payment and, where necessary, the last 4 digits of your card for order identification.
2.4 Children's data. Our store sells products for babies and children, but our website and services are directed at adults. We do not knowingly collect personal data from anyone under 16. If you believe a minor has provided us data, contact us and we will delete it.
| Purpose | Data used | Legal basis (GDPR art. 6) |
|---|---|---|
| Processing and delivering your order | Order data, payment confirmation | Contract performance — art. 6(1)(b) |
| Sending order confirmations and delivery updates | Email, phone | Contract performance — art. 6(1)(b) |
| Handling returns, warranty claims, complaints | Order data, communications | Contract performance & legal obligation — art. 6(1)(b), (c) |
| Issuing invoices and keeping accounting records | Billing data | Legal obligation — art. 6(1)(c) |
| Newsletter and promotional emails | Email, name | Consent — art. 6(1)(a); you can withdraw at any time |
| Abandoned cart reminder emails | Email, cart contents | Legitimate interest — art. 6(1)(f) (or consent, depending on your setup) |
| Advertising and measuring ad performance (e.g. Meta ads) | Cookie/pixel data, hashed email | Consent — art. 6(1)(a), via cookie banner |
| Website analytics and improving our store | Usage data | Consent — art. 6(1)(a) for non-essential cookies |
| Fraud prevention and security | Technical data, order data | Legitimate interest — art. 6(1)(f) |
We share personal data only where necessary, with:
- Shopify Inc. — e-commerce platform, hosting and order processing
- Payment providers — Shopify Payments, PayPal, Apple Pay, Google Pay
- Courier companies — [Fan Courier ,Sameday ,Cargos]
- Klaviyo — email and SMS marketing, transactional and consented marketing email
- Ali Reviews (Kudosi) — product review collection and display
- Judge.me — product reviews [remove this line if you uninstall it]
- AfterSell — post-purchase and upsell offers, processes cart contents
- Google & YouTube (Shopify sales channel) — product listings and advertising measurement
- Meta (Facebook/Instagram) — advertising and campaign measurement, where you consent
- Accountants and legal advisors, where required
- Public authorities, where legally obliged
We do not sell your personal data.
Some of our providers (e.g. Shopify, Meta) may process data outside the European Economic Area, including in the United States. Where this happens, transfers are protected by safeguards such as the EU–US Data Privacy Framework and/or Standard Contractual Clauses approved by the European Commission.
When data is no longer needed, it is deleted or anonymized.
We use:
Non-essential cookies are set only with your consent, which you can give, refuse, or withdraw at any time via the cookie banner / cookie settings link on our site. You can also control cookies through your browser settings.
You have the right to:
To exercise any right, email us at miniandme.support@gmail.com. We will respond within one month (extendable by two further months for complex requests, with notice). We may ask you to verify your identity.
Complaints: you have the right to lodge a complaint with the Romanian supervisory authority — ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal), B-dul G-ral Gheorghe Magheru 28-30, Bucharest, dataprotection.ro — or with the authority in your EU country of residence.
We use appropriate technical and organizational measures to protect your data, including SSL/TLS encryption of the website, secure payment processing through PCI-DSS-compliant providers, access controls, and reliance on Shopify's secured infrastructure. No method of transmission over the internet is 100% secure, but we work to protect your data using industry-standard safeguards.
You will receive marketing emails only if you have subscribed (e.g. via our newsletter form or an opt-in at checkout). Every marketing email contains an unsubscribe link. Unsubscribing does not affect transactional emails (order confirmations, delivery updates), which we must send to fulfill your order.
We may update this Privacy Policy from time to time. Material changes will be announced on the website. The "Last updated" date at the top reflects the latest version.
For any privacy-related questions or to exercise your rights:
Mini & Me
Email: miniandme.support@gmail.com