Privacy Policy

Last updated: October 2026

At MyBebeStory (Myplans, Maša Potokar s.p., Linhartova cesta 15, 1000 Ljubljana, Slovenia), we take your privacy seriously. This policy explains what personal data we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR).

1. Who We Are

The data controller is:
Maša Potokar s.p.
Linhartova cesta 15, 1000 Ljubljana, Slovenia
Email: info@mybebestory.com
Tax number: 78946379 | Registration number: 9347143000

2. What Data We Collect

We may collect the following personal data when you use our store:

Name and contact details (email address, phone number)
Delivery and billing address
Payment information (processed securely by our payment provider — we do not store card details)
Order history and purchase information
Device and browsing data (via cookies — see our Cookie Policy)

3. How We Use Your Data

We use your personal data to:

Process and fulfil your orders
Send order confirmations and shipping updates
Respond to your enquiries and provide customer support
Comply with our legal obligations
Send marketing communications (only with your consent)

4. Legal Basis for Processing

Contract: Processing your order and delivering your purchases
Legal obligation: Accounting, tax, and consumer law compliance
Legitimate interests: Fraud prevention and store security
Consent: Marketing emails (you can withdraw consent at any time)

5. Data Sharing

We do not sell your personal data. We may share it with trusted third parties only as necessary to operate our store, including:

Shopify Inc. (our e-commerce platform)
Payment processors (e.g. Stripe, PayPal)
Shipping and logistics providers
Email service providers (for order and marketing communications)

All third parties are required to handle your data securely and in compliance with GDPR.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy, or as required by law (typically up to 10 years for accounting records under Slovenian law).

7. Your Rights

Under GDPR, you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data (right to be forgotten)
Restrict or object to processing
Data portability
Withdraw consent at any time

To exercise any of these rights, contact us at info@mybebestory.com. You also have the right to lodge a complaint with the Slovenian Information Commissioner (ip-rs.si).