Privacy Policy
Effective Date: August 2025
Last Updated: December 2025
Old World Magic ("we," "our," "us") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, and protect your information when you visit our website and make purchases through our online store.
For the purposes of UK GDPR and applicable data protection laws, Old World Magic, operating from the United Kingdom, is the data controller of your personal information.
1. Information We Collect
When you interact with our site, we may collect the following types of information. Personal information such as your name, email address, shipping and billing address, phone number, and payment details are collected and processed securely through our payment providers. If you create an account, we store your login details and preferences as account information. We maintain records of your purchase history, including products you have bought and your interactions with our store. We also collect technical information including your IP address, browser type, operating system, and browsing behaviour through cookies and analytics tools.
2. How We Use Your Information
We use your information to process and deliver your orders, to communicate with you about your purchases, account, or customer service enquiries, and to send you updates, offers, and newsletters where you have opted in to receive such communications. Your information is used to improve our website, products, and customer experience, to comply with legal and tax obligations, and to prevent fraud and ensure the security of our services.
3. Legal Basis for Processing Your Data
We process your personal information under the following lawful bases as required by data protection law. We process your data on the basis of contractual necessity in order to process and fulfil your orders and provide the services you have requested. Where you have provided consent, we process your data for marketing communications, and you may withdraw this consent at any time. We process your data to comply with legal obligations including tax, accounting, consumer protection, and other legal requirements to which we are subject. We also process your data on the basis of our legitimate interests to prevent fraud, improve our services, analyse website usage, and operate our business effectively, provided that these interests do not override your rights and freedoms as a data subject.
4. Sharing Your Information
We do not sell or rent your personal information to third parties. We may share your information with service providers such as Wix (our website platform), payment processors including Stripe and PayPal, shipping carriers, and email service providers who assist us in operating our business. These service providers are contractually obligated to process your data only as necessary to provide their services to us and in accordance with our instructions. We may also share your information where required to comply with applicable laws, regulations, court orders, or governmental requests, or where necessary to protect our legal rights and property.
5. International Data Transfers
Some of our service providers operate outside the United Kingdom and European Economic Area. When your personal data is transferred internationally, we ensure that appropriate safeguards are in place, such as standard contractual clauses or equivalent legal protections, to protect your information in accordance with UK and EU data protection laws. These safeguards ensure that your data receives an equivalent level of protection to that provided within the UK.
6. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance your browsing experience, analyse traffic patterns, and personalise content. Cookies are small data files that help us understand how visitors use our site and improve functionality accordingly. You can manage cookies through your browser settings, though disabling them may affect the functionality of certain features of our website. Where required by law, we provide cookie consent tools to allow you to manage your preferences regarding non-essential cookies.
7. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected. Specifically, we retain your data to fulfil orders and handle any potential returns, refunds, or disputes that may arise. We retain data to comply with legal obligations, typically for six to seven years for tax and accounting records in the United Kingdom as required by law. We retain data necessary to send marketing communications until such time as you unsubscribe or request deletion of your data. After these retention periods have expired, we securely delete or anonymise your data unless we are legally required to retain it for a longer period.
8. Your Rights Under Data Protection Law
Under applicable data protection law, you have the right to access the personal data we hold about you and to receive a copy of that data. You have the right to correct any inaccurate or incomplete data we hold. You may request deletion of your data, subject to our legal retention requirements and legitimate business needs. You have the right to object to or restrict certain processing activities where we rely on legitimate interests or where data is processed for direct marketing purposes. You may withdraw consent for marketing communications at any time without affecting the lawfulness of processing based on consent before its withdrawal. You have the right to data portability, meaning you may receive your data in a structured, commonly used, and machine-readable format. You also have the right to lodge a complaint with the Information Commissioner's Office if you believe we have mishandled your data or violated your data protection rights.
To exercise any of these rights, please contact us at oldworldmagic@hotmail.com. You can unsubscribe from marketing emails at any time using the unsubscribe link included in our emails or by contacting us directly at the email address provided.
9. Security Measures
We implement reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, misuse, or alteration. These measures include secure data storage, encryption of sensitive information during transmission, and restricted access to personal data on a need-to-know basis. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security of your data. We encourage you to use strong passwords and keep your account information confidential to help protect your personal information.
10. Children's Privacy
Our website and services are not intended for children under thirteen years of age, or under the minimum age required by applicable law in your jurisdiction. We do not knowingly collect personal data from minors without appropriate parental or guardian consent. If we become aware that we have collected information from a child without proper consent, we will take immediate steps to delete that information promptly from our systems.
11. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational, legal, or regulatory reasons. Any changes will be posted on this page with a revised "Last Updated" date clearly displayed. We encourage you to review this policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services following the posting of changes constitutes your acceptance of such changes.
12. Contact Us
If you have any questions or concerns about this Privacy Policy, or if you wish to exercise any of your data protection rights, please contact us at the following address:
Old World Magic
Email: oldworldmagic@hotmail.com
We will respond to your enquiry within one month of receipt, or within such other timeframe as required by applicable data protection law.
This privacy policy was last updated in December 2025 and complies with the UK General Data Protection Regulation and all applicable data protection laws.