Privacy policy

Last updated: 29 August 2026

This policy explains what personal data Baile Collection collects, why we collect it, who we share it with, and what rights you have over it. We are committed to handling your data lawfully and transparently under the General Data Protection Regulation (GDPR).

1. Who We Are

Baile Collection is the data controller responsible for your personal data.

Address: Apartment 36, Kiltipper Gate, Dublin 24, D24 CN18, Ireland
Email: support@bailecollection.com

If you have any question about this policy or about how we handle your data, email us and we will respond within one business day.

2. What Data We Collect

When you place an order: your name, email address, delivery address, billing address, phone number (where provided), and details of what you ordered.

Payment information: we do not receive or store your full card details. Payments are processed directly by Shopify Payments, Klarna, or another provider shown at checkout. We receive only confirmation of payment and, in some cases, the last four digits and card type for order matching.

When you contact us: your email address and the contents of your message.

When you browse our website: your IP address, device and browser type, pages viewed, referring website, and how you interact with our site. This is collected through cookies and similar technologies — see Section 8.

If you subscribe to marketing: your email address and, where you give it, your name.

3. Why We Use It, and Our Legal Basis

To fulfil your order — taking payment, arranging delivery, clearing your parcel through customs, sending order and dispatch confirmations, and handling returns or refunds. Legal basis: performance of a contract with you.

To provide customer support — answering your questions and resolving problems. Legal basis: performance of a contract, and our legitimate interest in running a responsive service.

To prevent fraud and abuse — including automated risk scoring of orders by Shopify. Legal basis: our legitimate interest in protecting the business, and compliance with legal obligations.

To meet our legal obligations — keeping accounting, tax and customs records, and complying with consumer law. Legal basis: legal obligation.

To improve our website and understand how it is used — analytics and performance measurement. Legal basis: your consent, given through our cookie banner.

For advertising and measurement — including showing you our products on Pinterest and other platforms, and measuring whether our advertising works. Legal basis: your consent, given through our cookie banner.

To send marketing emails — only if you have asked us to. Legal basis: your consent. You can withdraw it at any time using the unsubscribe link in any email.

4. Automated Decision-Making

Orders placed on our website are automatically screened for fraud risk by Shopify. This may result in an order being flagged for manual review or, rarely, cancelled and refunded.

If your order is cancelled on this basis and you believe that is wrong, email us. A person will review the decision and you can give us any information you think is relevant.

5. Who We Share Your Data With

We do not sell your personal data. We share it only with the parties below, and only as far as necessary:

Shopify — hosts our online store and processes orders on our behalf.

Payment providers — Shopify Payments, Klarna and any other provider shown at checkout, to take and secure your payment.

Our suppliers and fulfilment partners — we pass your name, delivery address and phone number to the supplier who ships your order, so they can dispatch it. See Section 6.

Delivery carriers — including postal services and couriers in the country of dispatch and in your own country, so they can deliver your parcel, provide tracking, and contact you about delivery.

Customs authorities — your name and delivery address appear on the customs declaration that accompanies your parcel, as required by law for goods entering the European Union. Because we pay the import VAT and duty on your order, the declaration is settled on your behalf before your parcel is released.

Advertising and analytics providers — including Pinterest, where you have consented to advertising cookies. This may involve sharing a hashed (encrypted) version of your email address so that advertising can be measured accurately. You can withdraw this consent at any time.

Professional advisers and authorities — our accountant, and any authority we are legally required to disclose information to.

6. International Transfers — Important

Our products are shipped from outside the European Union, mainly from China. This means that when you place an order, your name, delivery address and contact number are transferred to a supplier and to carriers located outside the EU, so that your parcel can be addressed, customs-declared and delivered.

China is not covered by a European Commission adequacy decision, which means data protection law there does not offer the same guarantees as EU law. This transfer is necessary for us to perform our contract with you — without it, we cannot deliver your order.

We share only the minimum needed for delivery. We never pass on your payment details, your order history or your browsing data.

Some of our other service providers, including analytics and advertising platforms, are based in the United States and operate under the EU–US Data Privacy Framework or standard contractual clauses approved by the European Commission.

7. How Long We Keep It

Order and transaction records: six years from the end of the tax year in which the order was placed, as required by Irish tax law.

Customer support emails: two years after the matter is closed, so we can handle any follow-up or warranty claim.

Marketing contacts: until you unsubscribe, or after three years of no engagement, whichever comes first.

Website and analytics data: typically no more than 24 months, depending on the provider.

8. Cookies and Tracking

We use cookies and similar technologies for three purposes:

Strictly necessary — to run the shop, keep your basket working and process payment securely. These cannot be switched off and do not require your consent.

Analytics — to understand how our site is used so we can improve it.

Advertising — including the Pinterest tag, which tells us whether someone who saw one of our ads went on to visit our site or buy something.

Analytics and advertising cookies are only set if you consent. You will be asked when you first visit our site, and you can change your choice at any time through the cookie settings link on our website or by clearing cookies in your browser.

9. Your Rights

Under the GDPR you have the right to:

Access a copy of the personal data we hold about you.
Rectify data that is inaccurate or incomplete.
Erase your data, where we no longer need it (note that we must keep order records for tax purposes).
Restrict how we use your data while a query is being resolved.
Object to processing based on our legitimate interests, and to direct marketing at any time.
Portability — receive your data in a machine-readable format, or have it sent to another provider.
Withdraw consent at any time, where we rely on consent. This does not affect anything done before you withdrew it.

To exercise any of these rights, email support@bailecollection.com. We will respond within one month. There is no charge.

10. Complaints

If you are unhappy with how we have handled your data, please contact us first — we would like the chance to put it right.

You also have the right to complain to a data protection authority. You may complain to the authority in the country where you live, where you work, or where the issue occurred.

Ireland: Data Protection Commission — dataprotection.ie
Belgium: Gegevensbeschermingsautoriteit / Autorité de protection des données — autoriteprotectiondonnees.be
France: Commission Nationale de l'Informatique et des Libertés (CNIL) — cnil.fr
Germany: Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit — bfdi.bund.de
Netherlands: Autoriteit Persoonsgegevens — autoriteitpersoonsgegevens.nl
Portugal: Comissão Nacional de Proteção de Dados (CNPD) — cnpd.pt
Spain: Agencia Española de Protección de Datos (AEPD) — aepd.es

11. Children

Our website is not intended for children. We do not knowingly collect data from anyone under 16. If you believe a child has given us their data, contact us and we will delete it.

12. Security

We take reasonable technical and organisational measures to protect your data, including encrypted connections across our website and checkout, and access controls on the systems we use. No system is completely secure, but if a breach occurs that is likely to put your rights at risk, we will notify you and the relevant authority as the law requires.

13. Changes to This Policy

We may update this policy from time to time. The date at the top shows when it was last changed. If we make a significant change, we will make that clear on our website.