Privacy Policy
Last Updated: December 18, 2024
1. Who We Are woodenjewelrybox.store (“we”, “our”, “us”) operates woodenjewelrybox.store and is the controller of your personal information under applicable data‑protection laws.
2. What Data We Collect & Why
| Category | Examples | Purpose | Legal Basis* |
|---|---|---|---|
| Device & Usage Data | IP address, browser type, time‑zone, cookies, pages viewed, referring URLs | Operate & secure the Site, analytics, fraud prevention | Legitimate interests (GDPR Art.6 f) |
| Order Information | Name, billing & shipping address, email, phone, payment method | Process & fulfil your purchase, customer support | Contract performance (Art.6 b) |
| Marketing Preferences | Email/SMS opt‑in records | Send offers & news you requested | Consent (Art.6 a) |
| User‑Generated Content | Product reviews, messages | Display on Site, improve products | Legitimate interests / consent |
| *For residents of California, “legal basis” refers to the business purpose under CCPA/CPRA §1798.100. |
3. Cookies & Similar Technologies We use first‑ and third‑party cookies, pixels, and tags to remember your settings, analyse Site traffic, and personalise ads. Except for strictly necessary cookies, we do not set cookies until you grant consent via the banner. You can change or withdraw consent at any time through the “Cookie Settings” link in the footer.
4. How We Share Your Data We share personal information only with:
• Payment processors (e.g., PayPal, Stripe) to authorise transactions;
• Logistics partners (e.g., DHL, USPS) to deliver your order;
• Service providers (e.g., email/SMS platforms, analytics) bound by confidentiality agreements;
• Public authorities if required by law or to defend legal claims.
We do not sell or rent your personal data. If we ever decide to do so, we will provide a “Do Not Sell or Share My Personal Information” link, as required by California law.
5. International Transfers Your data may be processed outside your country, including in the United States and China, where privacy rules may differ. We rely on Standard Contractual Clauses or equivalent safeguards for transfers from the EEA/UK/Switzerland.
6. Retention We keep order records for 7 years to comply with accounting laws, and cookie/analytics data for up to 26 months (or less where local law requires). We then delete or anonymise the data.
7. Your Rights Depending on where you live, you may have the right to:
• Access or obtain a copy of the personal data we hold about you;
• Rectify inaccurate data;
• Delete your data (“right to be forgotten”);
• Object to or restrict processing;
• Data portability;
• Withdraw consent at any time;
• Opt‑out of targeted advertising or data sales (California);
• Lodge a complaint with your local data‑protection authority.
To exercise any of these rights, email us at 
. We will respond within 30 days (45 days for California requests).
8. Marketing Emails & SMS We send marketing communications only if you have opted in. You can opt out at any time by clicking the unsubscribe link in emails or texting STOP to SMS messages. Transactional messages related to your order are not affected.
9. Security We follow industry best practices such as HTTPS, encryption in transit, limited‑access controls, and regular security audits to protect your personal information.
10. Children We do not knowingly collect personal data from children under 16 years of age. If we learn that a child has provided personal information, we will delete it immediately.
11. Changes to This Policy We may update this Policy from time to time. Significant changes will be highlighted on this page or notified by email. The “Last updated” date reflects the latest revision.
12. Contact If you have any questions or concerns about this Policy or your personal information, please email or submit a request via our online contact form.
13. Use of Google reCAPTCHA
To protect our website from spam and abuse, we use the Google reCAPTCHA service. This service helps to distinguish between human users and bots.
reCAPTCHA collects certain information, including your IP address and browser details, and this data is processed in accordance with Google’s Privacy Policy and Terms of Service. By using our website, you consent to the collection and processing of your data by Google reCAPTCHA.We use reCAPTCHA solely for security purposes and do not use it for any other reasons.