Privacy Policy

The data controller for Bomi-Bomi Shop is Info Sci, obrt za računalno programiranje, vl. Davor Sagner-Bajgot, Ivane Brlić Mažuranić 60, HR-10090 Zagreb, Croatia. Contact: support@bomi-bomi.com.

Bomi-Bomi Shop collects the information needed to run the store: account details, cart activity, checkout information, order history, delivery contact details and support messages.

Payments are handled through Stripe. We do not store full card numbers. Orders may be shared with suppliers and shipping partners when needed to source, fulfill, cancel, return or track an order.

We use Firebase for store data and customer account features. Bomi-Bomi Shop may run Meta ad campaigns for individual products or categories, which can use campaign and conversion data to measure ad performance.

Order update emails

If you tick "Email me updates about my orders" in the banner, we email the address you give at checkout about that order: the estimated delivery date, when it ships with its tracking number, and when it is delivered. We send nothing else to it, no newsletters or ads. The estimate comes from the delivery time our supplier gives for your country. The legal basis is your consent; you can change it any time under Cookie settings, or reply "stop" to any of these emails. The emails are sent through Resend (Resend, Inc.), which may process your email address outside the EU under standard contractual clauses.

Analytics and cookies

With your consent we use two analytics services to understand how the store is used and to improve it:

• Google Analytics 4 (Google Ireland Limited) collects pages and products viewed, searches, cart and checkout steps, purchases, the device, browser and approximate location, and measures our ad campaigns. It uses cookies such as _ga and _ga_*, kept for up to 2 years.
• Microsoft Clarity (Microsoft Corporation) records how you interact with the pages, such as clicks, scrolling, mouse movement and session recordings, and shows them as heatmaps. Text you type into forms is masked and not recorded. It uses cookies such as _clck (up to 1 year) and _clsk (1 day).

These cookies are set only after you click Accept in the cookie banner; the legal basis is your consent. If you reject, Clarity does not run and Google Analytics only receives cookieless signals (for example that a page was viewed) without identifying you across visits. You can change or withdraw your consent at any time with the Cookie settings button at the bottom of every store page. Google and Microsoft may process this data outside the EU under the EU-US Data Privacy Framework and standard contractual clauses. We also store your cookie choice and your cart in your browser so the store works; these do not require consent.

You can contact us to access, correct or delete your account, order history or stored customer details. We keep data only as long as needed for store operations, legal obligations, fraud prevention and customer support. You can also lodge a complaint with the Croatian data protection authority (AZOP).