PRIVACY Policy

Not Everyone wants to be found

Best ReaD on a Larger Screen...

Foreword

Without doubt, the highest classes of service has always treated discretion as a primary consideration. At Fairytale Wood we aim to offer the best in what we do and in a modern e-commerce platform this means taking privacy very seriously. Luckily, Chris was responsible for GDPR (RODO in Poland) since its inception at another firm and has undergone successful external audits. We’ve used that experience to bring a modern, compliant internet store to you.

We have therefore used technologies and partners that support GDPR for all necessary functions. In the sections below ,for every function , we list the data we gather, the partners they use and finally reference their data policies.  For functions that are optional, we provide a cookie service to allow you to opt out.  However, if you are concerned at all about privacy on our site, you have some alternatives to purchase:

Overview of our Principles for Data Protection
Privacy Policy – Fairytalewood.com Online Store
 
1. About
This policy explains how we handle your personal information at Fairytalewood.com. It covers what data we collect, why we collect it, how long we keep it, and your rights. Using our store or sharing your data is voluntary—but some data is needed to use our services or make a purchase. This policy is for informational purposes only.
 
We follow the GDPR (General Data Protection Regulation) when processing your personal data.
 
2. Why and When We Process Your Data
We process your data for reasons like:
  • Completing orders, commissions and gift service
  • Customer service such as sales and communications about orders and commissions
  • Newsletter (if you give permission)
  • Managing payments and delivery to fulfill orders
  • Keeping financial records to operate the business (taxes, accounting)
  • Analyzing website traffic and performance (future)
  • Running advertising campaigns (future)
We only process your data if:
  1. You gave us consent through our cookie management panel
  2. It is needed to fulfill a contract or legal duty (e.g. accounting)
  3. It is in our legitimate business interest
 
3. How Long We Keep Your Data
We store data only as long as necessary. For example:
  • Order data: 3 months incase of returns/problems.
  • Marketing data: until you withdraw consent (future)
  • Newsletter – until you withdraw consent 
  • Legal records (e.g. tax): as long as required by law of Poland (5 years)
  • Analytics/statistics: 1 year
4. Who We Share Data With

To operate our store, we may share your data with:

  • Couriers and shipping partners (for delivery)
  • Payment providers (to process payments)
  • IT and website service providers
  • Accounting and legal support teams
  • Marketing platforms (future)
  • Providers of website tools (e.g. social media plugins)
We only share the minimum amount of data needed and only when necessary. Further, we have verified partners offer GDPR compliance or facilitate their service use in a GDPR compliant manner (e.g. we do NOT use Google reCaptcha).
 
5. Profiling and Automated Decisions
We may use automated systems to suggest offers or remind you about items in your cart. This helps personalize your shopping experience. You’re always free to ignore or decline these offers.
 
6. Your Rights
Through our contact form, you can request to:
  • Access your data
  • Correct or delete your data
  • Limit or object to how we use it
  • Withdraw consent anytime
  • Transfer your data to someone else
 
7. Cookies and Tracking
Our site uses cookies to provide necessary services, enhance your experience and track site usage. Cookies help with things like:
  • Saving your cart
  • Site personalization
  • Marketing (future)
You can manage cookies in either your  browser settings or through our cookie manager displayed when you arrive on our site.
 
8. Analytics

We use Matomo Analytics to understand how visitors use our website. This tool is hosted on our own servers, does not use cookies, and anonymizes IP addresses.  No personal data is collected or shared with third parties. Data is anonymised.

Final Notes

This policy only applies to Fairytalewood.com. If you follow a link to another site, check their privacy policy too., for which purpose we supply links in our details sections.

Fairytale Wood Katarzyna Thornborrow, NIP: 1131265343; REGON: 529897265  with court registration details found here

Business Address:    Akacjowe 27, 55-080 Smolec, Dolnoslaskie, Poland.

Other means of contact:   Use the contact form.

In agreement with articles 12-23 of GDPR, you have a number of rights and your rights regarding your data handling. These rights include, but are not limited to, data subject request, right to correction, right to deletion.  You may use our contact form for all purposes.

Consent and Cookies

Please refer to the CookieYes banner and ask for more info. This is GDPR compliant and as the exact nature and type of cookies can be dynamic we prefer to use this tool, than to continually update this document. However if for some reason you wish to have a written list, please contact us.

The checkout form is a front end for shipping and payment details.  You can find details of partners we use and share data with in the next section. The data we use is  stored on our service providers servers (in Europe) and remain for 5 years compliant with Polish tax law. Our purpose is therefore three fold, to exchange funds for products, to ship correctly and to maintain records of sales for tax purposes. . You must explicitly agree to the following data being stored to contact us.

  • Name 
  • Email
  • Billing address
  • Shipping address (if unique)
  • Payment detail

The contact form is a front end for email. The emails are stored on our service providers servers (in Europe) and typically remain until you withdraw consent by sending an email to delete your data.. Our purpose is to exchange information with you via email. You must explicitly agree to the following data being stored to contact us.

  • Name 
  • Email

The newsletter form is a front end for our self hosted newsletter system. The data are stored on our service providers servers (in Europe) and typically remain until you unsubscribe from the newsletter. Our purpose is to market directly to you. You must explicitly agree to the following data being stored to contact us.

  • Name 
  • Email

The commission form is a front end for email. The emails are stored on our service providers servers (in Europe) and typically remain until you withdraw consent by sending an email to delete your data.. Our purpose is to exchange information with you via email. You must explicitly agree to the following data being stored to contact us.

  • Name 
  • Email

We may during the course of a commission store:

  • telephone number or zoom handle for communication process during execution
  • billing address for invoices

All data is kept for the period of the commission and for 5 years after for tax purposes.

IT Provider

Name:

Data Shared:

Purpose:

Privacy Policy Link:

GDPR Compliant:

Namecheap

All data on website is viewable, no data is explicitly shared

Necessary : Hosting, operation and maintenance of website, shop and associated databases

See privacy Policy

Yes, and  data stored in Europe

Name:

Data Shared:

Purpose:

Privacy Policy Link:

GDPR

Stripe (and sub-processors)

Via cookies Order information (name, address, card details, purchase amount) tracking (IP, date)

Necessary: Fulfilling sales orders and transfer of funds and refunds.

Privacy Policy

Yes, and data stored in Ireland (international transfer under EU-U.S. Data Privacy Framework (“EU-U.S. D

Name:

Data Shared:

Purpose:

Privacy Policy Link:

GDPR

DHL

Via direct order (not digital) Order information -name, sending address, contact info (email)

Necessary:  Delivery of goods

Privacy Policy

Yes, and data stored in Europe (international transfer under Binding Corporate Rules (BCRs) and Standard Contractual Clauses (SCCs) )

Name:

Data Shared:

Purpose:

Privacy Policy Link:

GDPR

Inpost

Via cookies. order information (name, sending address, contact details)

Necessary – Delivery of goods

Privacy Policy

Yes, and data stored in Europe (international transfer under  SCCs)

Currently no partners. The newsletter is achieved through self hosting.

Our security partners use self hosted algorithms and do not send data to third parties or away from our site.

This site uses CookieYes, a GDPR compliant cookie manager. Cookies are divided into necessary and optional. Necessary cookies are used to make the shop operate and a full list is found in the CookieYes panel when you arrive on the Online Store.

If you decline all (including necessary cookies for Online shop functionality) you may browse this online shop but cannot use services or buy products. If you still wish to buy after browsing, you may use the contact form.

Agreeing to optional cookies, will in future allow us to have additional information to market our products (not currently in place). This helps us out but it is your choice.

Most web browsers allow you to control and manage cookies through their settings. You can choose to block or delete cookies, or to be notified when cookies are being set.

Below are links to cookie management guides for popular browsers:

Please note that disabling cookies may affect how our website functions—for example, you may not be able to add items to your cart, or complete a purchase.