This Privacy Policy outlines how papersculptkit (acting as the Data Controller) collects, processes, and protects your personal information when you visit or make a purchase from www.papersculptkit.com (the “Website”). This document is designed to strictly comply with European data protection regulations, including the General Data Protection Regulation (GDPR), establishing a formal framework for the handling of your personal data.

1. The Data Controller

For the purposes of applicable European data protection laws, the Data Controller responsible for the privacy and processing of your personal information is papersculptkit.

2. Information We Collect

When you engage with the Website or make a purchase, we collect specific information necessary to facilitate your order and meet legal obligations. This includes:

  • Contact and Identity Information: Your name, billing address, shipping address, email address, and phone number.
  • Transaction Data: Details regarding the items you have purchased from us.
  • Device Information: Information about the device used to access our Website, including IP address, browser type, time zone settings, and how you interact with the Website.

3. Payment Processing

To facilitate transactions, all financial processing on our Website is handled exclusively by Stripe. When you place an order, your payment details are transmitted directly to Stripe. papersculptkit does not collect, store, or process your complete credit card information on our own servers. Stripe processes your financial data in accordance with their respective privacy and regulatory frameworks.

4. How We Use Your Information

We strictly limit the processing of your personal data to lawful bases. We use the collected information to:

  • Process and fulfil your orders, including arranging shipping and providing order confirmations.
  • Communicate with you regarding your purchase, shipping updates, or customer support inquiries.
  • Screen our orders for potential risk or fraud, in strict compliance with international commerce regulations.
  • Comply with applicable legal obligations, accounting standards, and regulatory requests.

5. Data Protection Measures

We implement appropriate physical, electronic, and administrative protocols to protect your personal information against unauthorised access, disclosure, alteration, or destruction. We strive to maintain industry-standard defensive measures; however, please note that no method of transmission over the Internet or electronic storage is absolutely impervious to risk, and no absolute certainty can be provided regarding data transmission.

6. Data Retention

In strict compliance with European data protection regulations, we retain your personal data only for as long as is reasonably necessary to fulfil the purposes outlined in this policy.

  • Order and Transaction Data: We are legally required to retain basic information about our customers (including Contact, Identity, and Transaction Data) for tax, accounting, and legal compliance purposes for a period of up to ten (10) years after an order is fulfilled.
  • Communication Data: General correspondence will be retained for up to two (2) years following the final interaction, after which it will be permanently deleted or anonymised.

7. Sharing Your Personal Information

We share your personal data with selected entities only when strictly necessary to operate our business and fulfil your orders:

  • Stripe: To process your payments.
  • Logistics Providers: To deliver your purchased items to your specified shipping address.
  • Legal Authorities: We may disclose your information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful requests for information we receive, or to otherwise protect our legal rights.

8. Your Rights Under European Law

If you are a resident of Europe, you possess comprehensive rights regarding your personal data under the GDPR:

  • Right of Access: You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification: You may request that we correct any inaccurate or incomplete data.
  • Right to Erasure (Right to be Forgotten): You may request the deletion of your personal data, subject to our overriding legal and tax retention obligations.
  • Right to Restrict Processing: You may request the suspension of data processing under certain conditions.
  • Right to Data Portability: You have the right to request the transfer of your data to another entity.
  • Right to Object: You may object to the processing of your personal data under specific circumstances.

To exercise any of these rights, please submit a formal request using the contact details provided below.

9. Cookies and Tracking

Our Website utilises standard tracking mechanisms (such as cookies) solely to ensure the essential functionality of the cart and checkout processes, and to analyse broad user interactions to improve website navigation. You may adjust your browser settings to decline these tracking mechanisms, though doing so may limit your ability to complete a purchase.

10. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect changes to our operational practices or for other legal or regulatory reasons. Any modifications will be effective immediately upon posting to the Website.

11. Contact Us

For more information about our privacy practices, if you have questions, or if you wish to exercise your legal rights, please contact the Data Controller in writing via email at:

Email: origami@papersculptkit.com

We endeavour to acknowledge and respond to all legitimate privacy-related inquiries within 72 hours.