WOOLYWOOD

Privacy Policy

Who we are
WoolyWood ("we", "us", or "our") is the data controller for personal information processed in connection with this website. If you have questions about this policy or how we use your data, please contact us via the Contact page at contact.html.

What personal data we collect
We may collect and process the following categories of personal data:
• Identity and contact data (such as name and email) when you communicate with us.
• Technical and usage data (such as IP address, browser type, device identifiers, pages viewed and interactions) collected via cookies and similar technologies.
• Transaction data and delivery details when you purchase items from our linked store (e.g. Etsy). Please note that some purchase data is processed directly by the marketplace in accordance with their own privacy policy.

How we use your personal data
We use your personal data to: (a) operate and improve our website; (b) respond to enquiries; (c) fulfil orders and customer service via our marketplace; (d) maintain records and comply with legal obligations; and (e) protect our rights and the security of our services.

Legal bases for processing
We process personal data under the UK GDPR on the following bases: (a) your consent (for certain cookies/analytics where applicable); (b) performance of a contract or steps prior to entering into a contract (e.g. responding to enquiries, fulfilling orders); (c) our legitimate interests (e.g. improving the website, preventing fraud, ensuring network security) where these are not overridden by your rights; and (d) legal obligations (e.g. tax and accounting requirements).

Cookies and analytics
We use cookies and similar technologies to provide core functionality and, where enabled, to understand site usage and improve performance. You can manage cookies through your browser settings. For more information, please see our Cookie Policy.

Sharing your data
We may share personal data with: (a) service providers and technical partners who assist us in operating the website; (b) payment and marketplace platforms (e.g. Etsy) to process purchases; (c) professional advisers (such as accountants) where necessary; and (d) authorities where required by law. We require recipients to protect your data and use it only for the purposes disclosed.

International transfers
Where personal data is transferred outside the UK, we will ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or other lawful transfer mechanisms.

Data retention
We retain personal data only for as long as necessary for the purposes set out in this policy and to meet legal, accounting, or reporting requirements. Retention periods vary depending on the data category and purpose.

Your rights
Under UK data protection law, you have the right to request access to your personal data, correction, deletion, restriction, objection to processing (including profiling), and data portability in certain circumstances. Where processing is based on consent, you may withdraw your consent at any time. To exercise your rights, please contact us via the Contact page. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.

Security
We implement appropriate technical and organisational measures to protect personal data. However, no method of transmission over the internet is completely secure and we cannot guarantee absolute security.

Third‑party links
Our website may include links to third‑party sites (including our marketplace). Those sites have their own privacy policies and we are not responsible for their practices. We encourage you to review those policies.

Changes to this policy
We may update this policy from time to time. Updates will be posted on this page with a revised effective date.

Effective date: 29 September 2025