Introduction

WoodenLife (“we”, “our”, “us”) operates the e-commerce website https://dev.woodenlife.store (the “Site”). We sell home-decor products to customers in Morocco and throughout the European Union. This Privacy Policy explains what personal data we collect, how and why we use it, the legal bases for that use, the circumstances under which we share data, and the rights you can exercise in relation to your information.

Scope

This Policy applies to all visitors, customers and other users of the Site, including those who check out as guests. By using our Site you acknowledge that you have read and understood this Policy.

Personal data we collect

When you browse or purchase from WoodenLife we collect identity and contact details such as your name, billing and shipping addresses, email address and telephone number; order information such as the products you buy, delivery methods and order totals; payment information including card type, the last four digits of your card number and the tokenised payment ID supplied by Stripe; marketing information such as your subscription preferences and Facebook Ads audience data; technical data such as your internet-protocol address, browser and device characteristics and server log files; and usage data describing how you navigate and interact with our pages.

How we use your data

We process personal data so that we can accept and deliver your orders, take payment through Stripe, provide customer support, send marketing messages you choose to receive, improve our Site and advertising performance through analytics and Facebook Ads, and comply with our legal obligations in areas such as accounting and taxation.

Legal bases for processing

Where the EU General Data Protection Regulation applies, we rely on one of the following bases: the performance of a contract when we process and deliver an order; our legitimate interests when we improve our Site, prevent fraud or respond to enquiries; your consent when you sign up for marketing messages; and compliance with legal obligations when record-keeping is required by tax law.

Cookies and similar technologies

The Site uses essential WooCommerce cookies to keep your basket and enable checkout, Stripe cookies to detect fraud and process payments, and the Facebook pixel for advertising analytics. You may block cookies in your browser settings, but doing so could affect Site functionality.

Sharing and disclosure

We share data only with trusted service providers when that disclosure is necessary to run our business. Payment information is transmitted to Stripe Payments Europe Ltd for secure processing. Avatar images in blog comments are handled by Automattic’s Gravatar service. Meta Platforms Ireland Ltd receives usage data for Facebook advertising and analytics. Forminator, a plugin from WPMU DEV, stores form submissions that generate orders. Our web-hosting and content-delivery partners store the Site itself and provide security backups. Each provider processes personal data under its own privacy policy and under contract with us.

International transfers

If personal data is transferred outside Morocco or the European Economic Area, we protect it using the European Commission’s Standard Contractual Clauses, an adequacy decision for the destination country, or, where appropriate, your explicit consent.

Payment processing

WoodenLife never stores full credit-card numbers. Card details are encrypted in transit and sent directly to Stripe, which exchanges them for a secure payment token. Stripe may store and process data in the United States or other regions and performs fraud screening on our behalf.

Data retention

Order records and invoices are retained for ten years to satisfy accounting requirements. Failed or cancelled carts are deleted after thirty days. Marketing-list entries are kept until you unsubscribe. Enquiries sent through contact forms are retained for up to twelve months unless a longer period is required to resolve a dispute.

Your rights

You may request access to the personal data we hold about you, ask for inaccuracies to be corrected, request deletion or restriction of processing, object to certain uses of your data, withdraw consent for marketing at any time, and, if you are an EU customer, request that we transfer your data to another controller. To exercise these rights, email [email protected] or use the postal details below. We will respond within one month.

Security measures

We protect personal data with HTTPS/TLS encryption across the Site, secure servers with firewalls and malware scanning, role-based access controls inside WordPress and WooCommerce, and regular software updates and off-site backups.

Children’s privacy

We do not knowingly collect personal data from children under sixteen years of age. If you believe a child has provided us with personal information, please contact us so we can remove it promptly.

Changes to this Policy

We may update this Privacy Policy from time to time. Any material change will be announced on the Site or by email. The new version will be effective as soon as it is posted, and the “Last updated” date will change accordingly.

Contact information

Email : [email protected]
Email : [email protected]

(We operate solely online and have no physical retail address.)