Bebird (“we,” “our,” “us”) is committed to protecting your personal data and respecting your privacy in compliance with the EU General Data Protection Regulation (GDPR) and relevant EU consumer protection laws. This Privacy Policy explains how we collect, use, store, share, and protect your information when you interact with our European websites, services, and customer support channels. By using our services, you consent to the practices described herein.

Table of Contents

1. Information We Collect
2. Legal Basis for Processing (EU GDPR)
3. How We Use Your Information
4. How We Share Information
5. Cookies & Tracking Technologies (GDPR-Compliant)
6. Data Retention
7. Data Security
8. Your Rights (EU GDPR)
9. Children’s Privacy
10. International Data Transfers
11. EU Local Returns & Consumer Rights
12. Contact Information
13. Changes to This Policy

1. Information We Collect

We collect information necessary to provide our services:

• Personal Identification Information: name, email, shipping/billing address, phone, account credentials.
• Payment & Transaction Data: processed by secure third-party payment providers (PCI DSS compliant).
• Device & Technical Information: IP, browser type, OS, site interactions, session duration.
• Cookies & Tracking Data: analytics, advertising, preference, and session cookies.
• Communications Data: chat transcripts, emails, surveys, feedback forms, warranty requests.
• Optional Information: reviews, promotions, referrals, loyalty program data, social media interactions.

2. Legal Basis for Processing (EU GDPR)

For EU residents, we rely on one or more of the following legal grounds:

• Contractual necessity: to fulfill orders and provide services.
• Consent: for marketing communications and non-essential cookies.
• Legitimate interest: to improve services, prevent fraud, or manage business operations.
• Legal obligations: to comply with tax, accounting, and regulatory requirements.

3. How We Use Your Information

• Service Provision: order fulfillment, payment processing, account management, customer support.
• Personalization: product recommendations, saved preferences, tailored content.
• Service Improvement: website usability, technical troubleshooting, product optimization.
• Marketing & Communications: newsletters, promotions, surveys (only with consent).
• Security & Compliance: fraud detection, unauthorized access prevention, regulatory compliance.

4. How We Share Information

We do not sell personal data. Sharing occurs only in limited situations:

• Service Providers: logistics, payment processors, IT and analytics vendors.
• Marketing Platforms & Partners: email or ad platforms, only with user consent.
• Legal & Regulatory Authorities: as required by law.
• Corporate Transactions: mergers, acquisitions, or asset sales, with safeguards.

5. Cookies & Tracking Technologies (GDPR-Compliant)

Bebird uses cookies and similar technologies only after explicit user consent (except strictly necessary cookies):

5.1 Cookie Categories

• Essential Cookies: required for shopping cart, login, and payment processing (consent not required).
• Functional Cookies: save preferences such as language, region, and display settings.
• Analytics Cookies: measure and analyze website usage (e.g., Google Analytics).
• Marketing/Advertising Cookies: deliver personalized ads and measure campaign performance.

5.2 User Consent Management

• When visiting our EU website, a Cookie Consent Banner will appear, allowing you to:
  • Accept all cookies
  • Reject non-essential cookies
  • Customize your preferences
• Users can withdraw or modify consent at any time via our Cookie Consent Tool or browser settings.
• Consent records are securely stored to comply with GDPR documentation requirements.

6. Data Retention

• Account & Order Data: up to 7 years (tax/warranty obligations).
• Customer Service Communications: up to 3 years.
• Marketing Data: deleted upon withdrawal of consent.
• Technical Logs: 12 months for security monitoring.

After retention periods, data is securely deleted or anonymized.

7. Data Security

We implement strong security measures:

• Encryption: SSL/TLS for all data transfers.
• Access Control: authorized personnel only.
• Monitoring & Audits: continuous and routine security checks.

8. Your Rights (EU GDPR)

EU residents can exercise the following rights:

1. Access: request a copy of your personal data.
2. Correction: update or correct inaccurate data.
3. Deletion: request erasure (“Right to be Forgotten”).
4. Restriction: limit processing under certain circumstances.
5. Objection: object to processing for direct marketing or legitimate interests.
6. Data Portability: receive your data in structured, machine-readable format.
7. Withdraw Consent: at any time for marketing or cookies.

To exercise these rights, contact cs@bebird.com or use your account privacy settings. Responses will be provided within 30 days (or as legally required).

9. Children’s Privacy

Our services are not directed to children under 16 years (EU standard). We do not knowingly collect data from children. If you believe a child has shared information, contact us for deletion.

10. International Data Transfers

Personal data may be transferred outside the EU (e.g., US, China) with safeguards:

• Standard Contractual Clauses (SCCs)
• Compliance with GDPR cross-border rules
• Adequate technical and organizational protections

11. EU Local Returns & Consumer Rights

As a European customer, you have statutory rights under EU consumer law:

• Right of Withdrawal: You can cancel your order within 14 days of receiving the goods, without giving a reason.
• Return Instructions: Contact our EU customer support at cs@bebird.com for return authorization.
• Return Shipping Costs: Free if order is defective; otherwise, customer may bear standard shipping cost.
• Refunds: Processed within 14 days after receiving returned items.
• Local Warehouse Advantage: Orders shipped from our Germany warehouse allow faster returns and replacements across EU.

12. Contact Information

For privacy, GDPR, or returns inquiries:

📧 cs@bebird.com

You may also lodge complaints with your local data protection authority.