Privacy Policy
Your privacy matters. Here's exactly what we collect, why we collect it, and how we protect it.
Last updated: January 2025
Your Data, Protected
We use industry-standard encryption and never sell your personal information to third parties.
Transparent Practices
We only collect what's necessary to fulfill your order and improve your experience.
GDPR Compliant
Full compliance with EU data protection regulations. You have complete control over your data.
Who We Are
Wood Vibes Only is a small, independent woodworking studio based in Romania. We design and handcraft decorative wood art pieces, selling directly to customers through this website.
For any privacy-related questions or requests, contact us at:
Email: orders@woodvibesonly.com
Information We Collect
Information You Provide
When you make a purchase or create an account, we collect:
- Contact information: Name, email address, phone number
- Shipping information: Delivery address
- Billing information: Billing address (payment details are processed securely by our payment provider and never stored on our servers)
- Order information: Products purchased, order history, preferences
- Communications: Messages you send us, customer service inquiries
Information Collected Automatically
When you visit our website, we automatically collect:
- Device information: Browser type, operating system, device type
- Usage data: Pages visited, time spent, referring website
- Location data: Country and general region (based on IP address)
- Cookies: Small data files stored on your device (see Cookie Policy below)
How We Use Your Information
We use your information for the following purposes:
To Fulfill Orders
- Process and ship your purchases
- Send order confirmations and shipping updates
- Handle returns and exchanges
- Respond to your questions and requests
To Improve Our Service
- Understand how customers use our website
- Develop new products and features
- Optimize website performance and user experience
To Communicate With You
- Send transactional emails (order confirmations, shipping updates)
- Respond to inquiries and provide customer support
- Send marketing emails (only with your consent, and you can unsubscribe anytime)
To Protect Our Business
- Prevent fraud and unauthorized transactions
- Comply with legal obligations
Legal Basis for Processing
Under GDPR, we process your data based on the following legal grounds:
- Contract: Processing necessary to fulfill your order
- Legitimate interest: Improving our products and preventing fraud
- Consent: Marketing communications (you can withdraw anytime)
- Legal obligation: Tax records and legal compliance
Who We Share Data With
We never sell your personal information. We only share data with trusted partners who help us operate our business:
Service Providers
- Shopify: Our e-commerce platform (stores order and customer data)
- Payment processors: Stripe, PayPal (securely process payments)
- Shipping carriers: DHL, FedEx, local couriers (deliver your orders)
- Email service: For transactional and marketing emails
- Analytics: Google Analytics (website usage data, anonymized)
Legal Requirements
We may disclose information if required by law, court order, or government request.
Business Transfers
If our business is sold or merged, customer information may be transferred to the new owner. You would be notified of any such change.
How Long We Keep Your Data
- Order information: 7 years (for tax and legal compliance)
- Account information: Until you request deletion
- Marketing preferences: Until you unsubscribe
- Website analytics: 26 months (anonymized)
- Customer service communications: 3 years
After these periods, data is securely deleted or anonymized.
Your Rights
Under GDPR and other privacy laws, you have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Ask us to correct inaccurate or incomplete data
- Deletion: Request deletion of your personal data ("right to be forgotten")
- Restriction: Ask us to limit how we use your data
- Portability: Receive your data in a portable format
- Objection: Object to processing based on legitimate interest
- Withdraw consent: Withdraw consent for marketing at any time
To exercise any of these rights, email us at orders@woodvibesonly.com. We'll respond within 30 days.
If you're unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.
Cookies
We use cookies to make our website work and improve your experience.
Essential Cookies
Required for the website to function (shopping cart, checkout, security). These cannot be disabled.
Analytics Cookies
Help us understand how visitors use our site (Google Analytics). You can opt out via your browser settings or our cookie banner.
Marketing Cookies
Used to show relevant ads on other platforms (Facebook Pixel, if enabled). You can opt out via our cookie banner.
Managing Cookies
You can control cookies through:
- Our cookie consent banner (appears on first visit)
- Your browser settings (block or delete cookies)
- Opt-out tools: Google Analytics Opt-out
Security
We take data security seriously and implement appropriate measures to protect your information:
- SSL/TLS encryption on all pages
- Secure payment processing (PCI-DSS compliant)
- Limited access to personal data (need-to-know basis)
- Regular security updates and monitoring
While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
International Transfers
Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States (where Shopify and other service providers operate).
When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
Children's Privacy
Our website is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we'll notify you by:
- Posting the updated policy on this page
- Updating the "Last updated" date at the top
- Sending an email notification (for significant changes)
We encourage you to review this policy periodically.

