Privacy Policy

Who we are
Our website address is: https://www.wizardingwonders.com and is operated by Wizarding Wonders Ltd. (“We”). Our email address is contact@wizardingwonders.com

What personal data we collect and why we collect it
Shop
When you purchase products from our shop, as part of the buying and selling process, we will ask you to provide certain personal information. The information we collect is:

Your Full Name
Your Email Address
Your Billing Address
Your Shipping Address
Your Phone Number (optional field)

When you subscribe to our email newsletter, we will collect your email address. If you subscribe whilst making a purchase or signing up to an account, we will also collect your full name.

Information collected as part of the selling process allows us to perform our contract with you, to be able to sell, supply and deliver products to you. When you provide us with personal information to complete a transaction, place an order or return a purchase, you imply that you consent to our collecting and using that information for that specific reason only.

We accept payments through PayPal and Stripe. As a result, we never store or have access to your payment details.

Newsletter
Opting in to our email newsletter: By opting in to our email newsletter, you give us permission to contact you with emails about our company and products, news, offers and any other marketing information. You can unsubscribe from this service at any time by clicking on the ‘unsubscribe’ link found at the bottom of our emails, or contacting us at contact@wizardingwonders.com. Your consent to receiving the newsletter is the lawful basis on which we collect and process your data for this purpose.

Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact forms
If you send a message through one of the contact forms on the website, your name and email are captured so we can respond to your message. We will keep your information only for as long as is necessary for the purpose for which it was collected.

Cookies
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Our ecommerce platform is provided by WooCommerce, which makes use of 3 cookies:

woocommerce_cart_hash
woocommerce_items_in_cart
wp_woocommerce_session_

The first two cookies contain information about the cart as a whole and help WooCommerce know when the cart data changes. The final cookie (wp_woocommerce_session_) contains a unique code for each customer so that it knows where to find the cart data in the database for each customer. No personal information is stored within these cookies.

Additional cookies used for functionality and usability are:

wizcustom_popup_*: visitor’s choice to close a promo popup window.
wizcustom_shown_pages: number of visited pages for the promo popup window.
wizcustom_cookies_*: visitor’s choice to close a cookie notice.
wizcustom_tb_banner_*: visitor’s choice to close a top bar shop banner.
wizcustom_wishlist_hash: users wishlist content hash. This is required to update the number of wishlist items in the header.
wizcustom_items_in_wishlist: stores items in the wishlist

shop_per_page: visitor’s choice for a number of products per page
shop_per_row: visitor’s choice for a number of columns per row on the shop page
shop_view: shop page view – grid or list

Most browsers automatically accept cookies, however you are able to change this within your browser settings if needed. Disabling cookies may prevent you from taking full advantage of the features of this website.

By using this website without having disabled cookies in your browser you agree to us placing cookies on your device, and accessing them when you visit the site again.

IP Address
When you browse our website, we also automatically receive your computer’s internet protocol (‘IP’) address for fraud prevention.

Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.

Analytics
Who we share your data with
We will never share your personal information with third parties except where it is necessary to fulfil our contract with you (for example delivery companies will need your delivery address details).

As an exception to this rule, we may do so if we are required by law, for purposes of fraud protection, or in the event that we sell our business.

We will never sell or supply your data for marketing purposes to third parties.

How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data
Comments:

Visitor comments may be checked through an automated spam detection service.

Payments:

We accept payments through PayPal and Stripe. As a result, we never store or have access to your payment details. When processing orders, some of your data will be passed to PayPal or Stripe, including information required to process or support the payment, such as the purchase total and billing information.

Please see the respective privacy policies below:

Stripe: https://stripe.com/gb/privacy

Paypal: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full

Additional information
How we protect your data
All information you provide to us is stored on a secure server. Information sent between your selected browser and our website is sent using an encrypted SSL (Secure Socket Layer.)

What data breach procedures we have in place
In case of data breach we inform the data protection authority. If the breach is likely to adversely affect the personal data or privacy of our subscribers or users, we will to notify them of the breach without unnecessary delay.

What third parties we receive data from
We do not receive any data from third parties.

Changes to this privacy policy
We reserve the right to modify this privacy policy at any time, we advise that you check this page regularly to keep up to date with any necessary changes. Changes will take effect immediately upon posting.

Our contact information
If you have any concerns over your privacy please contact us via contact form or email: contact@wizardingwonders.com