Privacy Policy

Last updated: 28 July 2026

This Privacy Policy explains how SOTOS AGAPIOU LTD., trading as Child N Baby Line ("Child N Baby Line", "we", "us" or "our"), collects, uses, shares and protects your personal information when you visit childnbabyline.com, create an account, place an order, contact us, subscribe to marketing communications or otherwise interact with our services.

We are committed to protecting your privacy and processing personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), applicable Cyprus data protection legislation and other applicable privacy laws.

1. Who We Are

For the purposes of applicable data protection law, the data controller is:

SOTOS AGAPIOU LTD.
Trading as: Child N Baby Line
Company Registration No.: HE 39197
VAT No.: [INSERT VAT NUMBER]

Address:
Kampou 4
2030 Strovolos
Nicosia, Cyprus

Email: info@childnbabyline.com
Telephone: +357 22 750755

If you have any questions about this Privacy Policy or how we process your personal information, you can contact us using these details.

2. Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of information.

Information You Provide to Us

This may include:

your name;
email address;
telephone number;
billing information;
selected Akis Express pickup point;
order and purchase information;
customer account information;
marketing preferences;
information you provide when contacting customer service;
product reviews, comments, photographs or other content you choose to submit;
information you provide through forms, competitions, promotions or surveys.

Order and Transaction Information

When you make a purchase, we collect information relating to your order, including products ordered, order value, discounts, payment status, delivery details, returns and refunds.

Payments are processed by third-party payment providers, including JCC Payment Systems.

We do not intentionally store your complete payment card number or card security code. Payment information required to process your transaction is handled by the relevant payment provider.

Where you choose services such as Apple Pay or Google Pay, those providers may also process information in accordance with their own privacy practices.

Account Information

If you create a customer account, we may process information such as:

your name;
contact information;
order history;
saved addresses;
account preferences; and
account and login information.

Device and Website Usage Information

When you visit our website, certain information may be collected automatically, including:

IP address;
browser type;
device type;
operating system;
referring website or advertising source;
pages viewed;
time spent on pages;
links and buttons clicked;
shopping and checkout activity;
cookie and advertising identifiers; and
information about how you interact with our website and advertisements.

Some of this information is collected through cookies, pixels and similar technologies as explained below.

3. How We Use Your Information

We may process personal information for the following purposes.

Processing and Delivering Orders

We use your information to:

receive and process orders;
process payments;
provide order confirmations;
arrange delivery;
provide order status information;
process returns and refunds; and
communicate with you about your purchase.

Legal basis: Performance of a contract with you and, where applicable, compliance with legal obligations.

Customer Accounts

We process your information to create and maintain your customer account, display your order information and make future purchases easier.

Legal basis: Performance of our contract with you and our legitimate interest in providing and improving our customer services.

Customer Service

We use personal information to respond to enquiries, resolve complaints, assist with orders, investigate delivery issues and provide other customer support.

Legal basis: Performance of a contract and our legitimate interests in providing effective customer service.

Fraud Prevention and Security

We may process information to:

detect potentially fraudulent transactions;
protect customer accounts;
protect our website and systems;
investigate suspicious activity; and
prevent misuse of our services.

Legal basis: Our legitimate interests in protecting our customers, business and services, and compliance with applicable legal obligations.

Accounting and Legal Requirements

We may retain and process transaction and customer information where necessary to meet tax, accounting, consumer protection, regulatory and other legal obligations.

Legal basis: Compliance with legal obligations.

Website Analytics

With your consent where required, we use analytics technologies such as Google Analytics 4 (GA4) to understand how visitors use our website, measure website performance and identify ways to improve our store.

Legal basis: Consent where required by applicable law.

Advertising and Marketing Measurement

With your consent where required, we may use advertising technologies provided by:

Google Ads
Meta (Facebook and Instagram)
TikTok
Microsoft Advertising

These technologies help us:

measure advertising performance;
understand whether an advertisement resulted in a website visit or purchase;
create advertising audiences;
measure conversions;
limit or improve advertisements; and
show more relevant advertising.

These providers may use cookies, pixels, device identifiers and similar technologies and may combine information collected through our website with information they hold from other sources.

Legal basis: Consent where required by applicable law.

4. Marketing Communications

We may send marketing communications through:

email;
SMS; and
WhatsApp.

We use HighLevel (GoHighLevel) to help manage customer communications and marketing.

We will send promotional communications only where you have consented to receive them, as applicable.

Marketing messages may include information about:

special offers;
promotions;
new products;
discounts;
product recommendations;
sales; and
other Child N Baby Line news.

You can withdraw your marketing consent at any time.

You may do so by:

using the unsubscribe link contained in marketing emails;
following the opt-out instructions contained in SMS or WhatsApp messages; or
contacting us at info@childnbabyline.com.

Withdrawing consent does not affect the lawfulness of processing that occurred before consent was withdrawn.

You can continue to receive necessary service communications relating to orders, payments, deliveries, returns, account security or customer-service enquiries even when you have opted out of promotional marketing.

5. Cookies and Similar Technologies

Our website uses cookies, pixels and similar technologies.

Cookies are small files that may be stored on your device when you visit a website.

We use different types of technologies for different purposes.

Strictly Necessary Technologies

These are necessary for our website and online store to function properly.

They may be used for purposes such as:

keeping products in your shopping cart;
enabling checkout;
maintaining secure sessions;
remembering privacy preferences;
protecting against fraud;
customer account functionality; and
processing transactions.

Because these technologies are necessary to provide the website or service requested by you, they may not require consent.

Analytics Technologies

With your consent where required, we use analytics technologies including Google Analytics 4 to understand website traffic and how visitors interact with Child N Baby Line.

Advertising Technologies

With your consent where required, advertising and conversion-tracking technologies may be used by:

Google, Meta, TikTok and Microsoft.

These technologies may collect information regarding your browsing activity, device, interactions with our website, advertisements viewed or clicked and purchases or other conversion events.

They may use this information to measure advertising performance and provide personalised or targeted advertising.

Managing Your Cookie Preferences

Where consent is required, non-essential analytics and advertising technologies should only be activated after you have made your privacy choices.

You can accept, reject or manage non-essential technologies through the privacy/cookie controls displayed on our website.

You may change or withdraw your consent at any time through the available privacy settings.

Rejecting non-essential cookies will not prevent you from accessing the essential functions of our online store.

EU rules generally require consent before analytics, behavioural-advertising and similar non-essential tracking technologies are activated, and withdrawing consent should be as easy as giving it.

6. How We Share Personal Information

We do not disclose personal information unnecessarily. We may share information with service providers where required to operate our store, fulfil orders, communicate with customers, protect our business or comply with the law.

Shopify

Our online store is hosted by Shopify. Shopify processes personal information when you visit or make a purchase from our store in order to provide and improve the ecommerce services that we use.

We have enabled Shopify Network Intelligence and certain Enhanced Services. As part of these services, Shopify may process information about your interactions with our store, with Shopify and with other Shopify merchants. This may be used to help us and Shopify provide a more personalised experience, understand how customers interact with stores and advertising, improve services, prevent fraud and, where you have provided the required consent, provide more relevant advertising.

Information about your interactions with our store may therefore be shared with Shopify and with service providers or other third parties involved in providing these services. Some of these recipients may be located outside Cyprus or the European Economic Area, subject to applicable data-protection safeguards.

Where consent is required, Shopify's use of non-essential cookies and similar technologies for these purposes is subject to the choices you make through our cookie banner.

You can learn more about how Shopify processes personal information in the Shopify Consumer Privacy Policy and can manage certain rights and privacy choices through the Shopify Privacy Portal.

JCC Payment Systems

We use JCC Payment Systems to process electronic payments.

Information required to process and verify your transaction may be shared with JCC and relevant banks, card networks or payment providers.

Akis Express

We use Akis Express to deliver orders.

We may provide Akis Express with information necessary to deliver your order, including your:

name;
telephone number;
selected pickup point; and
relevant order or shipment information.

HighLevel / GoHighLevel

We use HighLevel (GoHighLevel) for customer relationship management and marketing communications, including email, SMS and WhatsApp communications.

Customer information may therefore be processed through HighLevel where necessary to provide these services.

HighLevel describes its customers as data controllers and HighLevel as a processor when customer data is uploaded to and managed through its platform. HighLevel also states that its Data Processing Agreement uses safeguards including Standard Contractual Clauses for relevant transfers to the United States.

Analytics and Advertising Providers

Subject to your privacy choices, information may be processed by advertising and analytics providers including:

Google;
Meta;
TikTok; and
Microsoft.

Shopify Apps and Other Service Providers

We may use third-party Shopify apps and service providers to provide functionality such as:

product reviews;
live chat;
WhatsApp communication;
newsletter and email signup forms;
loyalty or rewards functionality;
abandoned-cart functionality;
wishlists;
customer service;
website analytics;
fraud prevention; and
store management.

Such providers only receive information reasonably necessary to provide their respective services.

Legal and Professional Requirements

We may also disclose information:

where required by law or a competent authority;
to protect our legal rights;
in connection with fraud or security investigations;
to accountants, legal advisers or other professional advisers where necessary; or
in connection with a merger, acquisition, restructuring or sale of all or part of our business, subject to applicable law.

7. International Transfers of Personal Information

Some of the technology providers we use operate internationally.

As a result, personal information may sometimes be processed outside Cyprus or the European Economic Area.

Where personal information is transferred outside the EEA, we take steps, where required, to ensure that an appropriate legal transfer mechanism is in place.

Depending on the provider and destination, these safeguards may include:

an adequacy decision issued by the European Commission;
Standard Contractual Clauses approved by the European Commission; or
another transfer mechanism permitted under applicable data protection law.

GDPR protections continue to apply to personal data when it is transferred outside the EU, and such transfers require an appropriate legal mechanism.

8. How Long We Keep Personal Information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and as required by applicable law.

The appropriate retention period depends on the type of information and why it is processed.

For example:

Order and transaction information may be retained for the period necessary to comply with accounting, tax, consumer-protection and other legal obligations and to handle warranty claims or disputes.

Customer account information may be retained while your account remains active and afterwards where necessary for legal, security or legitimate business purposes.

Customer-service communications may be retained for as long as reasonably necessary to deal with the enquiry, complaint, return or dispute.

Marketing information may be processed while you remain subscribed. When you withdraw consent, we will stop using your information for that marketing purpose, although limited information may be retained where necessary to record and respect your opt-out.

Analytics and advertising information is retained according to our settings and the retention practices of the relevant technology providers.

When personal information is no longer required, we will delete or anonymise it where appropriate, subject to applicable legal requirements.

9. Your Data Protection Rights

Subject to applicable conditions and exceptions, GDPR gives you rights concerning your personal information.

These include the right to:

Access – request information about the personal data we hold about you and obtain a copy.

Rectification – ask us to correct inaccurate or incomplete information.

Erasure – ask us to delete personal information in circumstances where the law provides this right.

Restriction – ask us to restrict processing in certain circumstances.

Data portability – receive certain personal information in a structured, commonly used and machine-readable format.

Object – object to certain processing based on legitimate interests.

Object to direct marketing – you have the right to object to direct marketing at any time.

Withdraw consent – where processing is based on consent, you may withdraw that consent at any time.

These rights and their scope are set out under GDPR.

To exercise any of these rights, contact:

info@childnbabyline.com

We may need to verify your identity before completing certain requests.

Some rights are subject to exceptions under applicable law.

10. Advertising Profiling and Automated Processing

Where you consent to advertising technologies, providers such as Google, Meta, TikTok and Microsoft may use information about your activity to create audiences, analyse interests or provide advertising that may be more relevant to you.

We do not use solely automated decision-making that produces legal effects concerning you or similarly significantly affects you in connection with ordinary purchases from Child N Baby Line.

11. Security

We take reasonable technical and organisational measures designed to protect personal information against accidental loss, misuse, unauthorised access, disclosure, alteration or destruction.

We also use third-party service providers such as Shopify and payment processors to provide secure ecommerce and payment infrastructure.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

You are responsible for keeping your customer account credentials confidential and should contact us if you believe your account has been accessed without authorisation.

12. Children's Privacy

Child N Baby Line sells products for babies and children, but our online purchasing services are intended for adults purchasing products, not for children to provide personal information directly to us.

We do not knowingly seek to collect personal information directly from children for marketing purposes.

If you believe that a child has provided personal information to us inappropriately, please contact info@childnbabyline.com so that we can investigate and take appropriate action.

13. Third-Party Websites and Services

Our website may contain links to third-party websites, applications or services.

We are not responsible for the privacy practices of third parties that operate independently from Child N Baby Line.

We encourage you to review their privacy information before providing personal information to them.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

changes to our business;
new services or technology providers;
changes to the way we process personal information; or
changes in applicable law or regulatory requirements.

The updated version will be published on our website with a revised Last updated date.

Where required by law, we will provide additional notice of material changes.

15. Complaints

Please contact us first if you have concerns about how we process your personal information so that we have an opportunity to address them.

You also have the right to lodge a complaint with the:

Office of the Commissioner for Personal Data Protection of Cyprus

The Cyprus Commissioner is the independent supervisory authority responsible for GDPR enforcement in Cyprus and accepts complaints from individuals who believe their personal-data rights have been infringed.

16. Contact Us

For privacy enquiries or to exercise your data protection rights, contact:

SOTOS AGAPIOU LTD.
Trading as Child N Baby Line

Kampou 4
2030 Strovolos
Nicosia, Cyprus