Contact me
Privacy Policy

Last Updated: January 2025

We, GOODBABY CHILD PRODUCTS CO., LTD. (hereinafter "we", "us" or "our"), thank you for your interest in our website at https://gbbaby.com/ (hereinafter "the Website"). The protection of your personal data is of utmost importance to us. We process your data in accordance with applicable data protection laws, including but not limited to the General Data Protection Regulation (GDPR) for individuals in the European Economic Area (EEA), the California Consumer Privacy Act (CCPA) for California residents, and other relevant regulations.

This Privacy Policy informs you about the types of personal data we process when you use our Website and its associated mobile applications (if any), and as part of your orders in our online shop.

1. Data Controller

The controller for data processing is: GOODBABY CHILD PRODUCTS CO., LTD.

Adress: No. 28 Lufeng East Road, Lujia Town, Kunshan City, Jiangsu Province, China

Email: gbbaby@goodbaby.com

2. Categories of Data Processed

2.1. Access Data: When you visit our Website, we may store access data such as date and time of visit, the referring website, browser type and settings, pages visited, amount of data transferred, and the requesting provider (e.g., IP address).

2.2. Data Provided by You: When you place an order, create a customer account, subscribe to our newsletter, or contact us, we process the data you provide. This typically includes:

  • Contact details (e.g., name, email address, postal address, telephone number)

  • Order data (e.g., products ordered)

  • Payment data (e.g., chosen payment method, pseudonymized credit card information where applicable)

2.3. Data from Third Parties: To the extent necessary and permitted by applicable data protection laws, we may collect data about you from third parties.

2.4. Cookies and Similar Technologies: We use cookies and similar technologies to make our Website attractive, enable you to place orders, and analyze user behavior. You can manage your cookie preferences via our cookie consent tool. Please note that some website functionalities may be limited depending on your settings.

3. Purposes of Data Processing & Legal Bases

We process your data for the following purposes and based on the corresponding legal grounds:

3.1. Website Provision & Contract Performance: To provide our Website, process your orders, deliver goods, manage your customer account, and provide customer support.
Legal Basis: Performance of a contract (Article 6(1)(b) GDPR, where applicable) or our legitimate interest (Article 6(1)(f) GDPR). For non-EEA users, the legal basis may vary according to local laws, but we rely on similar grounds such as contract performance and legitimate interests

3.2. Newsletter: To send you our newsletter with your consent.
Legal Basis: Your consent (Article 6(1)(a) GDPR). For non-EEA users, we rely on your consent where required by law..

3.3. Direct Marketing: To send you information about our own similar goods to the contact details provided, provided you have not objected.
Legal Basis: Our legitimate interest in direct marketing (Article 6(1)(f) GDPR) or, where required by law, your consent.

3.4. Marketing & Analytics: To conduct web analytics, run advertising campaigns, and improve our services using cookies and similar technologies, based on your consent or our legitimate interests.
Legal Basis: Your consent (Article 6(1)(a) GDPR) or our legitimate interests (Article 6(1)(f) GDPR). In regions where consent is required for cookies, we will obtain your consent.

3.5. Compliance & Fraud Prevention: To comply with legal obligations and prevent fraud.
Legal Basis: Compliance with legal obligations (Article 6(1)(c) GDPR) or our legitimate interests (Article 6(1)(f) GDPR).

3.6. Children's Privacy: We do not knowingly collect personal data from children under the age of 13 (or the age required by local law) without parental consent. If we become aware that we have collected personal data from a child without verification of parental consent, we take steps to remove that information from our servers.

4. Data Transfer to Third Parties

4.1. Service Providers: We transfer data to carefully selected service providers (e.g., for website hosting, payment processing, order fulfillment, marketing) who process data on our behalf as processors.

4.2. Independent Third Parties: We may transfer data to transport companies for delivery, payment service providers for payment processing, and credit assessment agencies (if you choose "Invoice" payment) where necessary for contract performance.

4.3. Legal Requirements: We may transfer data if required by law or to enforce our rights.

4.4. International Transfers: If data is transferred to countries outside the European Economic Area (EEA) or other regions with strict data protection laws, we ensure an adequate level of data protection through appropriate safeguards, such as the EU Standard Contractual Clauses, or other legally accepted mechanisms.

5. Your Data Protection Rights

Depending on your jurisdiction and applicable law, you may have the following rights regarding your personal data:

  • Right of access and confirmation

  • Right to rectification

  • Right to erasure ("right to be forgotten")

  • Right to restriction of processing

  • Right to data portability

  • Right to object to processing

  • Right to withdraw consent at any time

  • Right to opt-out of the sale of personal information (as defined under CCPA)

To exercise these rights, please contact us using the details provided in Section 1. We will respond to your request in accordance with applicable law.

6. Data Retention

We store your data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Once the purpose ceases to apply or legal retention periods expire, the data will be erased or blocked.

7. Contact & Complaints

If you have questions about data processing, please contact us via the details in Section 1.

You have the right to lodge a complaint with a competent supervisory authority.

8. Specific Third-Party Services

We use the following third-party services that may process your personal data:

  • Google Analytics: For web analytics. Data is processed in the United States. Google is certified under the EU-U.S. Privacy Shield Framework (where applicable) and uses standard contractual clauses for international data transfers.

  • Facebook Pixel: For advertising and analytics. Data is processed in the United States. Facebook is certified under the EU-U.S. Privacy Shield Framework (where applicable) and uses standard contractual clauses.

  • Payment Processors: Such as PayPal, Stripe, etc. These providers have their own privacy policies and we encourage you to review them.

9. Contact & Complaints

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.