Privacy Policy

This Privacy Policy explains how wispnest.shop (https://wispnest.shop) (“we”, “us”, “our”) collects, uses, stores, and shares personal data when you visit our site, place an order, leave a comment, or otherwise interact with us. It also describes your rights under applicable data‑protection laws, including the European Union’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). The policy applies to all visitors and customers, regardless of where they are located.

Information We Collect

Data you provide directly

Comments and forum posts: When you submit a comment, we collect the content of the comment, your name or nickname, and your email address.
Contact forms: If you email us or use a contact form, we keep the email address, any additional contact details you provide, and the message content.
Order information: When you make a purchase we collect your name, billing and shipping address, email address, phone number (if supplied), payment details (processed by our payment provider), and any special instructions.

Automatically collected data

Server logs: Our web server records your IP address, browser type, operating system, referring URL, pages visited, and timestamps.
Cookies and similar technologies: We use essential session cookies to keep you logged in and to remember your shopping cart. Optional analytics cookies may be set by third‑party services (see “Analytics and Advertising Partners”).
Analytics: We may use services such as Google Analytics to understand how visitors use the site. These services collect device identifiers, location approximations, and usage patterns.
Embedded content: If you view embedded videos, maps, or social‑media posts, the provider may collect your IP address and other data in accordance with its own privacy policy.

How We Use Your Information

We process personal data for the following purposes:

To fulfil orders, process payments, and arrange delivery.
To communicate order status, respond to enquiries, and provide customer support.
To manage user accounts, maintain security, and prevent fraud.
To publish comments or reviews, after moderation, on the public site.
To improve our website, analyse traffic, and optimise marketing efforts.
To comply with legal obligations, such as tax reporting and record‑keeping.

Legal Basis for Processing

We rely on the following lawful bases under the GDPR and comparable provisions in other jurisdictions:

Performance of a contract: Processing order‑related data is necessary to fulfil the sales contract you enter into with us.
Legitimate interests: We process server logs, analytics, and security data to maintain and improve the site, protect against abuse, and understand visitor behaviour.
Consent: Where we use optional cookies or send marketing communications, we obtain your explicit consent before processing.
Legal obligations: Certain data (e.g., tax information) is retained to satisfy statutory requirements.

Data Retention

We keep personal data only as long as necessary for the purposes described above:

Order and payment records are retained for a minimum of seven (7) years to comply with tax and accounting regulations.
Comments and user‑generated content are stored until you request deletion or we remove them for policy violations.
Server logs and analytics data are retained for up to twelve (12) months in aggregated form; raw logs may be kept for up to thirty (30) days for security monitoring.
Contact form submissions are kept for six (6) months unless they are needed for follow‑up or legal purposes.

Sharing Your Information

We may share personal data with the following categories of recipients:

Hosting provider: To store the website and keep it operational.
Payment processors: To handle transactions securely (e.g., Stripe, PayPal). They receive only the data required for payment.
Analytics and advertising partners: Third‑party services that help us understand traffic and deliver targeted ads, subject to their own privacy policies.
Legal authorities: When required by law, court order, or to protect our rights.

We do not sell personal data to third parties for their own marketing purposes.

Your Rights

Depending on your location, you have the following rights regarding your personal data:

Access: Request a copy of the data we hold about you.
Correction: Ask us to rectify inaccurate or incomplete information.
Deletion (right to be forgotten): Request removal of your personal data, subject to legal exceptions.
Restriction of processing: Limit how we use your data in certain circumstances.
Data portability: Receive your data in a structured, commonly used format and transmit it to another controller.
Objection: Object to processing based on legitimate interests or direct marketing.
Complaint: Lodge a complaint with a supervisory authority, such as the data‑protection authority in the country where the site is operated or the relevant authority in your jurisdiction.

To exercise any of these rights, please contact us at contact@wispnest.shop. We will respond within the timeframes required by applicable law.

Children’s Privacy

Our services are intended for individuals aged 16 and older. We do not knowingly collect personal data from children under the age of 16. If you become aware that a child has provided us with personal information without parental consent, please contact us at contact@wispnest.shop and we will promptly delete the data.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology. When we make material changes, we will post a notice on the website and update the “Effective Date” at the top of the page. We encourage you to review this policy periodically.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data‑processing practices, please reach out to:

Owner / Publisher: the team behind wispnest.shop
Email: contact@wispnest.shop
Website: https://wispnest.shop
Jurisdiction: the country where the site is operated

Effective Date

This Privacy Policy is effective as of 2026-10-22.