Bellastore.shop

Last updated: February 23, 2026

Bellastore.shop respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 and all applicable data protection laws. This Privacy Policy explains how we collect, use, process, store, and protect your personal data when you access our website or make a purchase.

1. Data Controller

For the purposes of GDPR, the Data Controller is Bellastore.shop.
Email: contact@bellastore.shop

2. Personal Data We Collect

When you visit our website, we automatically collect certain technical and usage information. This includes your IP address, browser type and version, device type, operating system, time zone, referring website, pages viewed, products viewed, search terms, browsing behavior, and cookie identifiers. This information is collected to ensure proper website functionality, maintain security, improve performance, and analyze traffic. The legal basis for processing this data is our legitimate interest in operating and securing our website and, where required, your consent for non-essential cookies.

When you place an order, we collect personal data necessary to perform our contract with you. This includes your full name, billing address, shipping address, email address, phone number, order details, and payment information. Payment details are processed securely by authorized payment providers and are not stored directly on our servers. The legal basis for processing this data is the performance of a contract, compliance with legal obligations such as tax and accounting requirements, and legitimate interest in fraud prevention.

If you contact our customer support, we process your name, contact information, and the content of your message to respond to your request. The legal basis for this processing is contractual necessity and legitimate interest in providing customer service.

3. Payment Processing Including PayPal

We use secure third-party payment providers to process transactions. If you choose to pay via PayPal, your payment data will be processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., located at 22–24 Boulevard Royal, L-2449 Luxembourg. When using PayPal, your financial data is transmitted directly to PayPal. We do not store your credit card details or PayPal login credentials. PayPal may conduct fraud checks and credit assessments in accordance with its own privacy policy. In this context, PayPal acts as an independent data controller. The legal basis for this processing is the performance of a contract and compliance with legal obligations.

4. How We Use Your Personal Data

We use your personal data to process and fulfill orders, manage payments, arrange shipping, provide invoices, respond to inquiries, prevent fraud, improve website performance, and send marketing communications when you have provided consent. We do not sell personal data.

5. Cookies and Tracking Technologies

Our website uses essential cookies necessary for the operation of the store, as well as performance and analytics cookies. Non-essential cookies are used only with your explicit consent in accordance with GDPR and applicable ePrivacy rules. You may manage cookie preferences through our cookie consent banner or via your browser settings.

6. Data Sharing

We share personal data only with service providers necessary for operating our business. These may include Shopify as our e-commerce platform provider, PayPal as a payment processor, shipping companies, accounting providers, IT service providers, and analytics providers if enabled. All processors are contractually bound by data processing agreements compliant with Article 28 of the GDPR.

7. International Data Transfers

Some service providers may process personal data outside the European Economic Area, including in the United States or Canada. Where such transfers occur, they are safeguarded by appropriate legal mechanisms such as Standard Contractual Clauses or adequacy decisions adopted by the European Commission.

8. Data Retention

We retain personal data only for as long as necessary to fulfill contractual obligations, comply with legal requirements, resolve disputes, and prevent fraud. Retention periods may extend up to the duration required by tax and accounting laws.

9. Your Rights Under GDPR

If you are located in the European Union or European Economic Area, you have the right to request access to your personal data, correction of inaccurate data, erasure of your data, restriction of processing, data portability, objection to processing, and withdrawal of consent at any time where processing is based on consent. To exercise your rights, please contact us at contact@bellastore.shop. We may request proof of identity before responding to your request.

10. Decision-Making

We do not carry out fully automated decision-making that produces legal or similarly significant effects. However, fraud prevention systems used by payment providers such as PayPal or Shopify may automatically block suspicious transactions temporarily.

11. Data Security

We implement appropriate technical and organizational measures to protect personal data, including SSL encryption, secure payment gateways, restricted access controls, and fraud detection systems.

12. Minors

Our website is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors.

13. Complaints

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with your local data protection authority within the European Union.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or regulatory changes. The latest version will always be published on this page.

15. Contact

For any questions regarding this Privacy Policy or your personal data, please contact us at contact@bellastore.shop.