Privacy Policy
Last updated: 2026-09-28
This policy explains how CR OU OÜ, Nõmme tee 64-3, 11311 Tallinn, Estonia ("we"), the company behind Belly Ally, handles your personal information when you visit bellyally.com or buy from us. Questions: [email protected].
Information we collect
- Order information: name, email, shipping address, phone number, the products you buy and your order history.
- Payment information: processed directly by our payment provider (Stripe, Inc. (United States) and its affiliates). We receive only a confirmation and limited details such as the card brand and last four digits.
- Communications: messages you send us and reviews you choose to submit.
- Technical data: IP address, browser and device information, and pages visited, used to run and secure the store.
- Partner referrals: if you arrive through a link of one of our advertising partners, we record the click (partner ID, time, landing page, country and device type, and pseudonymized IP and browser values) to credit the partner for your order and to detect fraud. Partners never receive your name, contact details or address.
- Advertising measurement (only with your consent): with your consent in our cookie banner, we use the Meta and Taboola pixels and may report a purchase to the advertising platform that brought you to us, including a hashed version of your email address, your IP address and browser.
How we use it
To process and ship your order, provide customer support and replacements, send order and shipping emails, prevent fraud, meet legal and tax obligations, and, where you agreed or where the law allows, send you occasional emails about Belly Ally (for example when your supply is running low). You can unsubscribe from marketing emails at any time with the link in every email.
Who we share it with
Service providers who work for us under contract: our fulfillment partner in the United States (to ship your order), our payment provider, our email provider (Resend (USA)), our hosting provider (Hetzner Online GmbH (Germany)) and content delivery network (Cloudflare, Inc. (USA)), and, only with your consent, the advertising platforms named above. We do not sell your personal information for money. Sharing data with advertising platforms for measurement can count as "sharing" under some state laws: you can opt out at any time by rejecting marketing cookies in our cookie settings or by writing to us.
Your rights
Depending on your state, you may have the right to know what personal information we hold about you, to access, correct or delete it, to obtain a copy, and to opt out of targeted advertising. We honor Global Privacy Control signals as an opt-out. To exercise your rights, write to [email protected]. We will not discriminate against you for exercising your rights.
Retention
Order and accounting records are kept as long as required by tax and accounting law. Partner click data without an order is deleted after 13 months. Other data is kept only as long as needed for the purposes above.
Children
The store is intended for adults. We do not knowingly collect information from children under 13.
International transfers
We are based in Estonia (European Union) and our service providers are in the United States and the EU. Your information may be processed outside your state or country, with appropriate safeguards.
Changes
We may update this policy. The date at the top shows the latest version.