Privacy Policy

Your privacy matters. Here's exactly what we collect, why we collect it, and how we protect it.

Last updated: January 2025

Your Data, Protected

We use industry-standard encryption and never sell your personal information to third parties.

Transparent Practices

We only collect what's necessary to fulfill your order and improve your experience.

GDPR Compliant

Full compliance with EU data protection regulations. You have complete control over your data.

Who We Are

Wood Vibes Only is a small, independent woodworking studio based in Romania. We design and handcraft decorative wood art pieces, selling directly to customers through this website.

For any privacy-related questions or requests, contact us at:

Email: orders@woodvibesonly.com

Information We Collect

Information You Provide

When you make a purchase or create an account, we collect:

  • Contact information: Name, email address, phone number
  • Shipping information: Delivery address
  • Billing information: Billing address (payment details are processed securely by our payment provider and never stored on our servers)
  • Order information: Products purchased, order history, preferences
  • Communications: Messages you send us, customer service inquiries

Information Collected Automatically

When you visit our website, we automatically collect:

  • Device information: Browser type, operating system, device type
  • Usage data: Pages visited, time spent, referring website
  • Location data: Country and general region (based on IP address)
  • Cookies: Small data files stored on your device (see Cookie Policy below)

How We Use Your Information

We use your information for the following purposes:

To Fulfill Orders

  • Process and ship your purchases
  • Send order confirmations and shipping updates
  • Handle returns and exchanges
  • Respond to your questions and requests

To Improve Our Service

  • Understand how customers use our website
  • Develop new products and features
  • Optimize website performance and user experience

To Communicate With You

  • Send transactional emails (order confirmations, shipping updates)
  • Respond to inquiries and provide customer support
  • Send marketing emails (only with your consent, and you can unsubscribe anytime)

To Protect Our Business

  • Prevent fraud and unauthorized transactions
  • Comply with legal obligations

Legal Basis for Processing

Under GDPR, we process your data based on the following legal grounds:

  • Contract: Processing necessary to fulfill your order
  • Legitimate interest: Improving our products and preventing fraud
  • Consent: Marketing communications (you can withdraw anytime)
  • Legal obligation: Tax records and legal compliance

Who We Share Data With

We never sell your personal information. We only share data with trusted partners who help us operate our business:

Service Providers

  • Shopify: Our e-commerce platform (stores order and customer data)
  • Payment processors: Stripe, PayPal (securely process payments)
  • Shipping carriers: DHL, FedEx, local couriers (deliver your orders)
  • Email service: For transactional and marketing emails
  • Analytics: Google Analytics (website usage data, anonymized)

Legal Requirements

We may disclose information if required by law, court order, or government request.

Business Transfers

If our business is sold or merged, customer information may be transferred to the new owner. You would be notified of any such change.

How Long We Keep Your Data

  • Order information: 7 years (for tax and legal compliance)
  • Account information: Until you request deletion
  • Marketing preferences: Until you unsubscribe
  • Website analytics: 26 months (anonymized)
  • Customer service communications: 3 years

After these periods, data is securely deleted or anonymized.

Your Rights

Under GDPR and other privacy laws, you have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Ask us to correct inaccurate or incomplete data
  • Deletion: Request deletion of your personal data ("right to be forgotten")
  • Restriction: Ask us to limit how we use your data
  • Portability: Receive your data in a portable format
  • Objection: Object to processing based on legitimate interest
  • Withdraw consent: Withdraw consent for marketing at any time

To exercise any of these rights, email us at orders@woodvibesonly.com. We'll respond within 30 days.

If you're unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.

Cookies

We use cookies to make our website work and improve your experience.

Essential Cookies

Required for the website to function (shopping cart, checkout, security). These cannot be disabled.

Analytics Cookies

Help us understand how visitors use our site (Google Analytics). You can opt out via your browser settings or our cookie banner.

Marketing Cookies

Used to show relevant ads on other platforms (Facebook Pixel, if enabled). You can opt out via our cookie banner.

Managing Cookies

You can control cookies through:

  • Our cookie consent banner (appears on first visit)
  • Your browser settings (block or delete cookies)
  • Opt-out tools: Google Analytics Opt-out

Security

We take data security seriously and implement appropriate measures to protect your information:

  • SSL/TLS encryption on all pages
  • Secure payment processing (PCI-DSS compliant)
  • Limited access to personal data (need-to-know basis)
  • Regular security updates and monitoring

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

International Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States (where Shopify and other service providers operate).

When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Children's Privacy

Our website is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we'll notify you by:

  • Posting the updated policy on this page
  • Updating the "Last updated" date at the top
  • Sending an email notification (for significant changes)

We encourage you to review this policy periodically.

Questions about your privacy?

We're happy to explain anything in plain language.

Contact Us
Aggiunto al carrello
Vai al carrello