This Privacy Policy explains how personal information is collected, used and protected when you visit Ruby Witch Printables, place an order, download a product, subscribe to communications or contact the studio.

1. Data Controller

2. Information We May Collect

Depending on how you use the website, we may collect:

• your name;
• email address;
• billing information and billing address;
• order number and purchase history;
• account information if you create an account;
• messages and information submitted through contact forms;
• newsletter subscription information where applicable;
• IP address, browser type, device type and basic technical information;
• cookie and website usage information where permitted.

3. How We Use Personal Information

Personal information may be processed to:

• process and fulfil digital orders;
• provide access to purchased downloads;
• send order confirmations and transactional messages;
• respond to customer questions and support requests;
• maintain business, accounting and tax records;
• protect the website against fraud, abuse and security threats;
• improve website operation and user experience;
• send marketing communications where you have consented to receive them;
• comply with legal and regulatory obligations.

4. Legal Bases for Processing

Where the General Data Protection Regulation (GDPR) applies, personal data may be processed on one or more of the following legal bases:

• Contract — when processing is necessary to complete and fulfil your order;
• Legal obligation — when information must be retained for accounting, tax or other legal requirements;
• Legitimate interests — for website security, fraud prevention, customer support and reasonable business administration;
• Consent — for optional marketing communications and non-essential cookies where required.

5. Payments

Payments are processed using Stripe. Payment information required to complete a transaction is transmitted securely to the payment provider. Ruby Witch Printables does not receive or store your complete payment card number.

Stripe may process personal information according to its own privacy and security practices.

6. WooCommerce and Website Services

Ruby Witch Printables uses WordPress and WooCommerce to operate the website and online shop.

Personal information necessary for orders, downloads and customer accounts may therefore be stored within the website's secure administrative systems and hosting environment.

7. Service Providers

We may use trusted service providers where necessary to operate the website, process payments, provide hosting, deliver email, maintain security or provide customer support.

These providers receive only the information reasonably necessary to provide their services and are subject to their respective contractual and legal data-protection obligations.

8. Cookies

The website may use cookies and similar technologies.

Essential cookies may be necessary for functions such as shopping carts, checkout, security and user sessions.

Where required by law, non-essential analytics, advertising or similar cookies are used only in accordance with your cookie choices and consent.

You can manage available cookie preferences through the cookie consent controls provided on the website.

9. Email Communications

If you voluntarily subscribe to a newsletter or promotional communication, your email address may be used to send the communications you requested.

You may withdraw your consent or unsubscribe at any time using the unsubscribe method provided in the message or by contacting us.

10. Data Retention

Personal data is retained only for as long as necessary for the purpose for which it was collected and for any applicable legal obligations.

In particular, order and accounting records may need to be retained for the period required under French accounting and tax law.

Customer-support and contact information is not retained indefinitely and is deleted or anonymised when it is no longer reasonably required, unless continued retention is required by law or for the establishment, exercise or defence of legal claims.

11. International Data Transfers

Some technology or payment providers may process information outside France or the European Economic Area.

Where required, appropriate safeguards are used for international transfers in accordance with applicable data-protection law.

12. Your Data Protection Rights

Depending on applicable law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate information;
• request deletion of personal data in certain circumstances;
• request restriction of processing;
• object to certain processing;
• request data portability where applicable;
• withdraw consent at any time where processing is based on consent.

To exercise a privacy right, contact: forestwitchwr@gmail.com.

13. Right to Lodge a Complaint

If you are located in France, you also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) concerning the processing of your personal data.

14. Security

Reasonable technical and organisational measures are used to protect personal information from unauthorised access, alteration, disclosure or loss.

No internet transmission or storage system can be guaranteed to be completely secure.

15. Third-Party Links

The website may contain links to third-party websites or services. Ruby Witch Printables is not responsible for the privacy practices of third-party websites. Please review their privacy information separately.

16. Changes to This Privacy Policy

This Privacy Policy may be updated when website services, legal requirements or data-processing practices change.

The latest version will be published on this page together with the updated revision date.

17. Contact

Questions about this Privacy Policy or the use of your personal information may be sent to:

forestwitchwr@gmail.com

Or use the contact page.