Privacy Policy

Last updated: February 2026

1. Who We Are

The Whispered Wisdom is a trading name of The Online Craft & Gift Fayre Ltd (Company No. 12675057), registered in England and Wales.

For the purposes of UK data protection law, we are the data controller of your personal data.

If you have any questions about this Privacy Policy, you may contact us at:

[insert your email address here]

2. What Personal Data We Collect

We may collect and process the following information:

  • Your name

  • Your email address

  • Your postal address

  • Order details

  • Transaction details

  • Information provided via our contact form

  • Email address provided for receipts at in-person events

We do not knowingly collect sensitive personal data.

3. How We Collect Your Data

We collect data when you:

  • Place an order through our website

  • Contact us via email or contact form

  • Request an email receipt at a fayre or in-person event

  • Interact with our website

4. How We Use Your Data

We use your personal data to:

  • Process and fulfil orders

  • Provide customer support

  • Respond to enquiries

  • Issue receipts

  • Comply with legal and accounting obligations

  • Prevent fraud or misuse of our website

  • Send marketing communications where you have expressly opted in

We do not sell, rent or trade your personal data to third parties.

5. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

  • Contract – to fulfil orders and provide products

  • Legal obligation – to comply with tax and accounting requirements

  • Legitimate interests – to operate and protect our business

  • Consent – where you have voluntarily contacted us

6. Payment Processing

Online payments are processed securely by third-party providers such as Stripe or PayPal via Squarespace.

In-person payments may be processed using Zettle (PayPal Zettle).

We do not store full payment card details.

These providers act as independent data controllers and process your data in accordance with their own privacy policies.

7. Data Storage & Retention

Your data is stored securely via:

  • Squarespace (website hosting and order management)

  • Payment processors

  • Email provider

We retain order and transaction information for up to 6 years to comply with UK tax and accounting laws.

Contact enquiries may be retained for as long as reasonably necessary to manage communication.

8. Data Sharing

We may share your data with:

  • Payment processors

  • Delivery providers

  • Website hosting providers

  • Professional advisers where legally required

We only share information necessary to provide services or comply with legal obligations.

9. Your Rights

Under UK data protection law, you have the right to:

  • Request access to your personal data

  • Request correction of inaccurate information

  • Request erasure of your data (where legally permitted)

  • Restrict or object to certain processing

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, please contact us using the details above.

10. Cookies

Our website may use cookies for essential functionality and performance purposes.

You may control cookies through your browser settings.

For more information, please refer to Squarespace’s cookie information.

11. Data Security

We take reasonable technical and organisational measures to protect your personal data.

However, no internet transmission is completely secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be published on this page.