Privacy Policy

Effective Date: January 2026
Website: https://whynotcards.com

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit and shop on our Squarespace-powered website.

If you do not agree with the terms of this policy, please do not access the site.

1. Who We Are

We are Why Not Cards Limited, a business registered in the UK.

Squarespace provides the technical platform that hosts this website, but we are responsible for determining how your personal data is used on this site.

2. Information We Collect

2.1 Personal Data You Provide

We collect information you enter directly when you:

  • create an account

  • place an order or save payment details

  • sign up for updates or newsletters

  • contact us with inquiries

This may include:

  • name, email address, billing/shipping address, phone number

  • username, password (encrypted)

  • order details

  • marketing preferences

2.2 Automatically Collected Data

When you visit our website, we and Squarespace collect technical information such as:

  • IP address

  • browser type and version

  • device type

  • pages visited, date/time stamps

This may be done via cookies and tracking technologies.

3. How We Use Your Personal Information

We use your information to:

  • process and fulfil your orders

  • communicate about your orders and account

  • respond to inquiries and requests

  • personalise your shopping experience

  • send marketing if consented

  • comply with legal obligations

We will only process personal information where we have a lawful basis, such as consent, contract performance (processing your orders), or legal obligation.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to gather analytics, improve your browsing experience, and support functionality like shopping carts.

You can manage cookie preferences through:

  • your browser settings

  • our cookie banner/settings (if enabled)

    Please be aware that blocking certain cookies may affect site performance.

5. Third Parties & Data Sharing

We share your personal data with third parties only as necessary to operate the business, including:

  • Payment processors (e.g., Stripe, PayPal) — to securely process payments

  • Hosting and analytics services, to maintain and improve our site

  • Marketing & email platforms, to send newsletters if you opt in

We do not sell your personal information.

6. Your Rights (UK/EU GDPR)

If you are located in the UK or EU, you have the following rights under applicable data protection laws:

Right to Access: You can request a copy of personal data we hold about you.
Right to Correction: You can ask us to correct inaccurate or incomplete data.
Right to Deletion: You can request deletion of your personal data (subject to legal limits).
Right to Restrict Processing: You may request that we limit how we use your personal data.
Right to Object: You can object to certain types of processing, including direct marketing.
Right to Data Portability: You can request a portable copy of your data.

To exercise these rights, please contact us.

7. Lawful Basis for Processing

We rely on the following legal bases when processing your information:

  • Contract: To fulfil your order and manage your account

  • Consent: When you opt in for marketing communications

  • Legal compliance: When required by law

  • Legitimate interests: To manage our business and improve services

8. Data Retention

We will retain your personal information only as long as necessary to:

  • fulfil the purposes described in this policy

  • comply with legal obligations

  • resolve disputes and enforce agreements

9. International Transfers

Your personal data may be transferred outside the UK/EU. Where required by law, we ensure appropriate safeguards are in place.

10. Security

We implement reasonable security measures to protect your information, but no system is completely secure. Always keep your login details private.

11. Children

Our website is for general audiences and not intended for children under 13. We do not knowingly collect data from children under this age.

12. Changes to This Policy

We may update this policy for legal compliance or business needs. The “Effective Date” at the top will reflect when changes were made.

13. How to Contact Us

For questions about this Privacy Policy or your data rights, contact us via our online form or by e-mailing hello@whynotcards.com.