Data privacy

This notice describes how Woodalot handles personal data on this website. Fill in the bracketed fields before going live.

Controller

The controller is [Full legal name], [Address], [email].

What we collect

• Shop orders: name, email, shipping address, payment references from Stripe or PayPal (we do not store full card numbers).
• Contact form: name, email, message.
• Technical: server logs (IP address, user agent) for security and debugging, kept for a short period.

Why

We process this data to fulfil a contract (your order), to answer messages you send, and for legitimate interests in running a secure shop. Where required, we rely on consent (for example optional analytics, if added later).

Processors

Payments are processed by Stripe and/or PayPal according to their own terms. Email may be sent through the SMTP provider configured in the CMS. Hosting is on the server you operate.

Retention

Order and client records are kept as long as tax and consumer-law obligations require (typically several years). Contact messages are kept only as long as needed to reply and follow up. You can ask for erasure where the law allows.

Your rights (GDPR)

You may request access, rectification, erasure, restriction, portability, and object to processing. You may lodge a complaint with [your national DPA, e.g. CPDP in Bulgaria] or the authority of your EU residence.

Cookies

The public site does not use advertising cookies. The CMS admin uses a session cookie so you can stay signed in. Payment providers may set their own cookies on their checkout pages.

Contact

For privacy requests, email [email].