Last updated: 18 February 2026

Your privacy matters to us. This Privacy Notice explains how Siena Joy Ltd (“Infant Joy”, “we”, “us”) collects and uses your personal data when you:

  • visit or browse our website www.infantjoy.eu;

  • create an account or place an order;

  • sign up for emails or other messages (where available);

  • contact us via email, WhatsApp, Messenger or other channels we operate;

  • interact with our ads and content on third-party platforms (such as Meta or Google);

  • leave reviews or other content on our website (where available); and/or

  • otherwise engage with us.

This Notice also explains your rights and choices under the GDPR and other applicable European data protection laws.

If you have questions or want to exercise your rights, contact us at: info@infantjoy.eu

1) Who we are (Data Controller)

Infant Joy EU is an online retailer of baby and children’s clothing operating within the European Union.
The data controller responsible for your personal data is:

Siena Joy Ltd (trading as Infant Joy)
Company Registration Number: 205967634
VAT Number: BG205967634
Registered office: Bansko, Bulgaria

Postal correspondence address:
Zelendolsko Shose 13
Blagoevgrad, Bulgaria

Contact: info@infantjoy.eu

We operate exclusively online. We do not maintain physical retail stores for customers.

2) What personal data we collect (and why)

The personal data we collect falls into these main categories:

A) Information you provide to us directly

Order and account information. When you create an account, place an order or request support, you may provide: your name, email address, telephone number, billing/shipping address, and information about the products you purchase.

Payment information. Payments are processed by our payment service providers. We generally do not store full card details on our systems. Depending on the payment method, we may receive limited transaction data (e.g., payment status, partial identifiers, order number).

Customer support communications. If you contact us (email, WhatsApp, Messenger), we process what you share so we can assist you—e.g., your contact details, order number, and the content of your messages.

Refund data (only when needed). If we must issue a refund via bank transfer, we may request your IBAN and account holder details strictly for executing the refund.

Content you submit. If you post a review or send us content (e.g., feedback), we process the information you provide.

You are not required to provide non-mandatory data. However, some data is necessary to place an order or receive support. If you do not provide necessary details, we may not be able to fulfil your request.

B) Information we collect automatically (cookies and similar technologies)

When you browse our website, we may collect technical and usage data such as:

  • IP address, device and browser information, operating system;

  • approximate location (country/region inferred from IP);

  • pages viewed, clicks, time spent, scrolling, and website navigation patterns;

  • referral source (e.g., which link or campaign brought you to us).

We collect this data through cookies, pixels, tags, SDKs and similar technologies. For details, please see our Cookies Policy and Cookie Settings tool on the website.

C) Information we receive from third parties

We may receive data from:

  • Advertising and analytics partners (e.g., Google, Meta) such as aggregated campaign performance metrics, conversion signals, and ad interaction information (where legally permitted and based on your choices).

  • Social platforms if you interact with our pages/ads or use built-in features (like buttons), subject to that platform’s own privacy terms.

  • Fraud/security or hosting providers that help us protect our services and manage operations.

We only use third-party data where the third party has a lawful basis to share it with us.

3) How we use your personal data

We use your personal data for the following purposes:

A) To provide products and services (orders, delivery, returns)

  • create and manage your order;

  • deliver products through logistics partners;

  • handle returns, refunds, warranty/complaints (where applicable);

  • send essential service messages (order confirmations, shipping updates, refund status).

B) To provide customer support

  • respond to questions and requests;

  • troubleshoot issues;

  • manage disputes and help resolve complaints.

C) To run, protect and improve our website and business

  • website performance, stability, debugging and error detection;

  • security monitoring and fraud prevention;

  • internal reporting and business analytics (often aggregated).

D) Marketing and personalised advertising (where permitted)

If you consent (or where allowed under applicable law), we may:

  • send newsletters or promotional messages;

  • measure advertising performance and conversions;

  • show you relevant ads on platforms like Meta and Google.

We use tools such as Google Ads (including Performance Max), Google Analytics, Google Tag Manager, Meta Pixel, Meta Conversions API (CAPI), and Google Consent Mode. These tools may use cookies and conversion signals to help attribute purchases, measure performance and improve campaign delivery.

You can manage your cookie preferences at any time via Cookie Settings on our website.

4) Legal bases for processing (GDPR)

We only process personal data when we have a valid legal basis. Depending on the context, we rely on:

A) Performance of a contract

When processing is necessary to fulfil your order, deliver products, manage returns/refunds, or provide requested services.

B) Legal obligation

For example, accounting, invoicing, and tax compliance, as well as responding to lawful requests by authorities.

C) Legitimate interests

Where necessary for our legitimate interests, provided your rights do not override them. Examples include:

  • maintaining website security and preventing fraud;

  • improving our website and service quality;

  • basic measurement and reporting to understand demand and performance (often in aggregated form);

  • defending legal claims.

D) Consent

We use consent where required—most importantly for non-essential cookies and certain marketing activities. You can withdraw consent at any time via our cookie settings or by contacting us at info@infantjoy.eu

5) Marketing preferences and opting out

If you receive marketing emails from us, you can opt out at any time using the unsubscribe link in the email.
Please note: even if you opt out of marketing, we may still send service messages about your orders (e.g., confirmations, shipping updates).

6) Cookies, Pixel tracking, Consent Mode and CAPI (important transparency)

Cookie categories

We use cookies in categories such as:

  • Strictly necessary (to run the website, shopping cart, security, consent storage);

  • Functional (enhanced features, preferences where applicable);

  • Analytics (to understand website performance and usage);

  • Marketing (to measure ads and show relevant advertising).

Consent and “no pre-consent loading”

Where required by law (including in many EU jurisdictions), marketing and analytics cookies are only activated after you consent via our Cookie Banner. You can change your choice any time.

Google Consent Mode

We implement Google Consent Mode to communicate your consent choices to Google tags. Where applicable, we send consent signals such as:

  • ad_storage, analytics_storage, ad_user_data, ad_personalization
    based on your selections.

Meta Pixel and Meta Conversions API (CAPI)

We use Meta Pixel and CAPI to measure conversions and improve ad delivery. CAPI sends event data server-to-server. Where required, these signals are sent only when you have provided consent for marketing cookies/measurement. We apply technical measures to reduce unnecessary data sharing and respect your choices.

7) Who we share your personal data with

We do not sell your personal data.

We share personal data only when necessary and with appropriate safeguards, for example with:

  • Payment providers (to process payments and prevent fraud);

  • Courier and logistics companies (to deliver orders);

  • Website hosting and infrastructure providers (to run the store);

  • Email/CRM providers (to send service emails and, if you opted in, marketing);

  • Analytics and advertising partners (only as permitted and based on your cookie choices);

  • Professional advisers (accountants, auditors, legal advisers) where necessary;

  • Authorities where required by law.

Service providers are contractually required to protect your information and process it only on our instructions.

8) International data transfers

Some service providers may process personal data outside the EEA/UK (for example, certain advertising or cloud infrastructure services). If personal data is transferred outside the EEA, we use appropriate safeguards such as:

  • European Commission Standard Contractual Clauses, and

  • additional technical/organisational safeguards where needed.

You can request more information about safeguards by contacting info@infantjoy.eu.

9) How long we keep your data (retention)

We keep personal data only as long as necessary for the purposes described and to meet legal requirements.

Typical retention periods include:

  • Order, invoice and accounting data: retained as required by applicable tax/accounting laws.

  • Account data: kept while your account is active; if you request deletion, we delete or anonymise where possible, except data we must keep for legal reasons.

  • Customer support records: kept as long as necessary to resolve your request and manage potential disputes.

  • Cookie data: kept according to cookie lifetimes and your choices (see Cookies Policy).

When we no longer need your data, we delete it or anonymise it.

10) Security

We use appropriate technical and organisational measures to protect your personal data, including SSL encryption, access controls and secure hosting environments.

We will never ask you to share passwords or full payment details via email, WhatsApp or Messenger. If you receive suspicious messages claiming to be from us, please contact info@infantjoy.eu.

11) Your rights (EEA/UK)

Subject to legal conditions, you have the right to:

  • access your personal data;

  • correct inaccurate data;

  • request deletion (right to be forgotten);

  • restrict processing;

  • data portability (for certain processing);

  • object to processing based on legitimate interests;

  • withdraw consent at any time (without affecting past lawful processing);

  • lodge a complaint with a supervisory authority.

To exercise your rights, contact info@infantjoy.eu.
We may need to verify your identity before fulfilling your request.

If you have concerns about how we process your personal data, we encourage you to contact us first so we can review and address the matter directly.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority.

In Bulgaria, the competent authority is:

Commission for Personal Data Protection (CPDP)
www.cpdp.bg

You may also lodge a complaint with the data protection authority in your country of residence within the European Union.

For consumer protection matters (non-data related), you may contact:

Bulgarian Consumer Protection Commission (KZP)
www.kzp.bg

12) Children

Our website and products are not directed at children. If you believe a child has provided us personal data, contact us and we will take appropriate steps.

13) Third-party links and social platforms

Our website may include links to third-party websites or social platforms. Their privacy practices are governed by their own policies. We encourage you to review them before sharing personal data.

14) Changes to this Privacy Notice

We may update this Notice to reflect legal, technical or business developments. The updated version will be posted on this page and the “Last updated” date will change accordingly.

15) How do I contact Infant Joy?

We have taken steps to help ensure your experience on www.infantjoy.eu is safe and that your privacy is respected. If you have any questions, comments, concerns about this Privacy Notice, or you would like to submit a privacy request (for example, access, deletion, correction, objection, or withdrawal of consent), you can contact us:

  • via email: info@infantjoy.eu

  • via WhatsApp / Messenger: by writing to us through our official channels listed on www.infantjoy.eu (we may ask for your order number or other details to verify and help you faster)

  • via postal mail:
    Siena Joy Ltd (Infant Joy)
    Zelendolsko Shose 13
    Blagoevgrad, Bulgaria
    (Attn: Data Protection / Privacy Requests)

To protect your privacy, we may need to verify your identity before completing your request.