Privacy Policy

This Website collects some Personal Data from its Users to process and deliver box orders.

Owner and Data Controller

Blondesbooknook

Owner contact email: blondesbooknook@gmail.com

Types of Data collected

Among the types of Personal Data that this Website collects, by itself or through third parties, are:

  • First name and last name

  • Email address

  • Shipping address

  • Billing address (if different)

  • Payment information (processed securely via third-party payment providers; this Website does not store full payment card details)

  • Cookies and Usage Data

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to the Data collection.

Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using this Website.

Unless specified otherwise, all Data requested by this Website is mandatory and failure to provide this Data may make it impossible for this Website to fulfil an order.

Mode and place of processing the Data

Methods of processing
The Owner takes appropriate security measures to prevent unauthorised access, disclosure, modification, or destruction of Data. Processing is carried out using computers and/or IT enabled tools, following organisational procedures strictly related to the purposes indicated.

In addition to the Owner, Data may be accessible to third parties involved in order fulfilment and Website operation (e.g., hosting providers, payment processors, delivery companies, IT service providers), appointed, if necessary, as Data Processors. The updated list of these parties may be requested from the Owner.

Legal basis of processing

The Owner may process Personal Data relating to Users if one of the following applies:

  • Provision of Data is necessary for the performance of an agreement (fulfilling an order placed by the User).

  • Processing is necessary for compliance with a legal obligation.

  • Users have given their consent for one or more specific purposes (e.g., receiving marketing emails).

  • Processing is necessary for the purposes of the legitimate interests pursued by the Owner (e.g., preventing fraud, maintaining website security).

Place

Data is processed at the Owner’s operating offices and in any other places where the parties involved are located. Data transfers outside the European Union may take place subject to adequate safeguards.

Retention time

Personal Data shall be processed and stored for as long as required by the purpose they have been collected for:

  • Order fulfilment: Data will be retained until the order has been delivered and for a reasonable period afterwards to handle returns, complaints, or legal requirements.

  • Accounting and legal compliance: Certain data may be retained longer where required by law (e.g., tax purposes).

  • Marketing purposes: If Users have opted in, contact details may be retained until they withdraw consent.

Once the retention period expires, Personal Data will be deleted.

The purposes of processing

The Data concerning the User is collected to allow the Owner to provide its services, including:

  • Processing and delivering orders

  • Customer communication (order updates, support inquiries)

  • Payment processing via third-party providers

  • Analytics and website performance monitoring

  • Marketing communications (if consent is given)

Users’ Rights

Users may exercise the following rights regarding their Data:

  • Withdraw consent at any time

  • Access their Data

  • Request correction or updates

  • Request deletion of their Data (except where required by law)

  • Restrict or object to processing

  • Data portability (where applicable)

  • Lodge a complaint with a data protection authority

Requests can be sent to the Owner via the contact details provided above and will be handled within one month.

Additional information about Data collection and processing

  • Legal action: Data may be used in court or for legal obligations.

  • System logs and maintenance: This Website and third-party services may collect logs that record interactions (e.g., IP addresses).

  • Cookies: This Website uses Cookies to function properly and improve User experience. For details, see the Cookie Policy.

Changes to this Privacy Policy

The Owner reserves the right to make changes to this privacy policy at any time by updating this page. It is recommended to check this page regularly, referring to the date of the last modification below.

Last modified: 27th August 2025