Effective Date: December 31, 2023

1. Introduction

We value your trust and are committed to protecting your privacy. This policy complies with the General Data Protection Regulation (GDPR) and other relevant privacy laws.

2. Scope and Definitions

This policy applies to all visitors, customers, and users of our Services.

- “Personal Data” means any information that identifies or can be used to identify an individual.

- “Processing” includes any use of personal data, such as collecting, storing, or deleting.

3. Data Controller vs Processor

In most cases, Wicked FairyTale is the Data Controller. For collaborative projects (like commissioned works or private galleries), we may act as a Data Processor under your instruction.

4. Categories of Personal Data We Collect

- Name and email address

- Payment and billing details

- IP address and device data

- Gallery interaction data (e.g., favorites, downloads)

- Any messages or notes you share with us (yes, even your wishes)

5. How We Collect Personal Data

We collect data:

- When you fill out a form, make a purchase, or interact with our website

- Automatically through cookies and pixels

- From services like Stripe, Pixieset, and email platforms

6. Legal Basis for Processing

We collect and use your data based on:

- Consent (e.g., signing up for newsletters or giveaways)

- Contract (e.g., fulfilling an order or sending gallery access)

- Legal obligations

- Legitimate interests (e.g., improving your experience or protecting our services)

7. Use of Personal Data

We use your data to:

- Deliver your photo galleries, art, and magical content

- Process payments and provide customer support

- Email updates, promotional offers, or event invites (only if you opt in!)

- Improve our site and offerings through analytics

- Fulfill any legal or regulatory duties

8. Sharing Personal Data

We don’t sell your data. We may share it with trusted third parties such as:

- Payment processors (e.g., Stripe)

- Gallery hosts (e.g., Pixieset)

- Marketing and newsletter platforms

- Contractors or assistants supporting service delivery

9. Cookies and Tracking

We use cookies to provide the best experience and understand how you engage with our site. You can manage cookies through your browser settings. Learn more at allaboutcookies.org or youronlinechoices.eu.

10. Data Retention

We retain your data only as long as needed for the purpose it was collected, or longer if required for legal reasons or resolving disputes.

11. Your Data Rights (EU/EEA Residents)

You have the right to:

- Access, correct, or delete your data

- Object to or limit processing

- Withdraw consent

- Request data portability

- File a complaint with your data protection authority

12. Data Transfers

13. Security Measures

We implement reasonable and industry-standard technical and organizational security, including encrypted connections and secure cloud storage.

14. Children’s Data

We do not knowingly collect or process data from children under 16. If you believe a child’s data has been shared with us, please contact us immediately.

15. Changes to This Policy

We may update this Privacy Policy to reflect legal or operational changes. If we do, you’ll see the updated version here, and we may notify you by email.

16. Contact Information

For privacy-related questions or data requests, contact:

Wicked FairyTale

help@wickedfairytale.com

113 Vera Court, Nicholasville, KY 40356