Privacy Policy

1. Introduction

Welcome to ibaroy (“we”, “us”, or “our”). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit or make purchases from ibaroy.com.

2. Scope & Regional Treatment

This policy applies to all visitors and customers of our website. We treat data from users located in the European Union (EU) and European Economic Area (EEA) under the protections required by the EU General Data Protection Regulation (GDPR). For users located outside the EU/EEA (“Other Countries”), we follow good data privacy practices consistent with this policy and applicable local laws.

3. Information We Collect

  • Device Information: IP address, browser type, operating system, time zone, and browsing activity.
  • Order Information: name, billing and shipping addresses, payment information (processed by payment providers), email, and phone number.
  • Account Information: account username and password if you register.
  • Marketing Preferences: email and opt-in preferences if you subscribe to communications.

4. How We Use Personal Information

We use personal information to:

  • Process and fulfill orders (including payment and delivery);
  • Provide customer service and respond to inquiries;
  • Improve our website, products, and services;
  • Send order-related and marketing communications (only if you consent where required);
  • Detect and prevent fraud, and enhance security.

5. Legal Basis for Processing (EU/EEA Residents)

When we process personal data of EU/EEA residents, we rely on one or more of the following legal bases:

  • Contract performance: processing necessary to fulfill your order;
  • Legal obligation: compliance with tax, accounting and other laws;
  • Legitimate interests: e.g., to improve our services and prevent fraud (balanced against your rights);
  • Consent: where you give explicit consent (for example, marketing communications or non-essential cookies).

For users in Other Countries we will process data in accordance with the terms above and applicable law in those jurisdictions.

6. Sharing & Third-Party Services

We only share personal information with third parties necessary to operate our business, including:

  • Platform Provider: Our store is hosted on an ecommerce platform provider (e.g., Shopify). See their privacy practices at https://www.shopify.com/legal/privacy;
  • Payment processors: to securely handle payments;
  • Shipping and fulfillment partners: to deliver orders;
  • Analytics providers: e.g., Google Analytics for site performance and usage analysis;
  • Legal authorities: where required by law or to protect rights.

7. International Data Transfers

Personal data may be transferred to, stored, or processed in countries outside the EU/EEA. For transfers of EU/EEA personal data, we rely on appropriate safeguards such as EU Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms required by applicable data protection law.

8. Data Retention

We retain order and transactional information for at least two (2) years to comply with accounting, tax, and legal obligations. Other personal data is retained only as long as needed for the purposes described in this policy or as required by law.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you;
  • Request correction or deletion;
  • Withdraw consent where processing is based on consent;
  • Request portability of your data;
  • Object to certain processing activities.

EU/EEA residents may also lodge a complaint with a supervisory authority if they believe their rights under the GDPR have been infringed.

To exercise any rights, contact: support@.com.

10. Cookies & Consent

We use cookies and similar technologies to operate the site, analyze traffic, and provide personalized content. Cookies fall into categories:

  • Essential Cookies: required for core functionality (cart, checkout).
  • Analytics Cookies: measure site usage (e.g., Google Analytics).
  • Marketing Cookies: used for advertising and remarketing.

In compliance with EU law (and where required for other regions), a cookie consent banner is shown to visitors from the EU/EEA. You can accept or decline non-essential cookies and change your preferences at any time via the site’s Cookie Settings.

11. Behavioral Advertising

We may use data for targeted advertising. You can opt out via:

12. Do Not Track

Our site does not currently change its data collection practices in response to browser Do Not Track signals.

13. Minors

This site is not intended for individuals under the age of 18. We do not knowingly collect personal data from children under 18.

14. Changes to This Policy

We may update this policy from time to time. The Last Updated date at the top indicates when this policy was last revised. Significant changes will be posted on this page.

15. Contact

If you have questions or concerns about this policy or our data practices, please contact:

Email: