Privacy policy.

Information Sharing

We DO NOT sell, rent, or trade your personal information to third parties for marketing purposes.

We Share Information Only With:

  • Squarespace: We share analytics information with Squarespace, our website hosting and analytics provider, to learn about site traffic and activity

  • Payment Processors: Squarespace Payments (our primary payment solution) or other secure payment processors for transaction processing

  • Shipping Partners: Delivery companies for order fulfilment

  • Printing Partners: Printing companies for order fulfilment

  • Email Service Providers: For sending order confirmations and marketing emails (only with your consent)

  • Third-Party Services: Any additional services you connect to your account (such as Google Analytics)

  • Legal Requirements: When required by law or to protect our business rights

Effective Date: 19 August 2025
Last Updated: 19 August 2025

Our Commitment to Your Privacy

At Tales of Wanderlust ("ToW", "we", "us", or "our"), we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you visit our website and purchase our photography prints.

We are based in the United Kingdom and comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025.

Data Controller Information

Data Controller: Tales of Wanderlust
Website: talesofwanderlust.co.uk

Information We Collect

Information You Provide Directly

  • Contact Details: Name, email address, phone number

  • Order Information: Billing and shipping addresses, purchase history

  • Account Information: Username, password (encrypted), preferences

  • Communications: Messages sent through contact forms, email correspondence

  • Marketing Preferences: Your consent for marketing communications and newsletter subscriptions

Information Collected Automatically by Our Website

This website collects personal data to power our site analytics, including:

  • Information about your browser, network, and device

  • Web pages you visited prior to coming to this website

  • Pages visited on our site, time spent browsing

  • Referring websites and search terms used to find us

Cookies and Tracking Technologies

This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app.

Squarespace places two kinds of cookies on visitors' browsers:

  • Necessary cookies so visitors can navigate and use key features on your site

  • Non-essential, or analytics and performance cookies that collect information on your site's performance and visitors' behavior

For detailed information about cookies used on this site, visit our Cookie Policy.

Legal Basis for Processing

We process your personal data under the following legal bases:

  • Contract Performance: To fulfill orders and provide services you've requested

  • Legitimate Interests: For business operations, fraud prevention, and improving our services

  • Consent: For marketing communications and non-essential cookies

  • Legal Obligations: To comply with tax, accounting, and other legal requirements

How We Use Your Information

Order Fulfillment and Customer Service

  • Process and fulfill your photography print orders

  • Send order confirmations and shipping notifications via email

  • Handle returns, exchanges, and customer service inquiries

  • Maintain order history for your account

Marketing and Communication (with your consent)

  • Send promotional emails about new photography collections

  • Notify you about sales, special offers, and new print releases

  • Provide personalised recommendations based on your purchase history

  • Send our newsletter (you can unsubscribe at any time)

Business Operations (Legitimate Interests)

  • Analyse website traffic to enhance user experience

  • Optimise our print catalog and website functionality

  • Ensure website security and prevent fraud

  • Comply with legal and regulatory requirements

  • Improve our products and services

Information Sharing

We DO NOT sell, rent, or trade your personal information to third parties for marketing purposes.

We Share Information Only With:

Third-Party Services

We may use third-party services through connected accounts, product integrations, or code-based modifications. These services may have their own terms of service, privacy policies, and practices which are different from ours. Common third-party services include:

  • Google Analytics (if enabled)

  • Social media integrations

  • Email marketing platforms (if connected)

  • Printing, shipping and fulfilment services

It's important to review the policies of all services connected to our website to understand how they handle your data.

Data Security

Protection Measures

  • SSL encryption for all data transmission

  • Secure payment processing through PCI-compliant providers

  • Regular security audits and updates

  • Limited access to personal data on a need-to-know basis

  • Secure data storage with reputable hosting providers

Payment Security

  • We do not store complete credit card information on our servers

  • All payment data is processed through encrypted, secure payment gateways

  • We comply with industry-standard security protocols

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right to be Informed

You have the right to know how we collect and use your personal data (this privacy policy provides this information).

Right of Access

You can request a copy of the personal data we hold about you, free of charge.

Right to Rectification

You can ask us to correct any inaccurate or incomplete personal data.

Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data in certain circumstances.

Right to Restrict Processing

You can ask us to limit how we use your personal data in certain situations.

Right to Data Portability

You can request your data in a structured, commonly used format to transfer to another service.

Right to Object

You can object to processing based on legitimate interests or for direct marketing.

Rights Related to Automated Decision Making

You have rights regarding any automated decision-making that significantly affects you.

How to Exercise Your Rights:

We aim to respond to all requests within one month. If your request is complex, we may extend this by up to two months and will inform you of any delay.

Data Retention

  • Order Information: Retained for 7 years to comply with UK tax and accounting requirements

  • Account Data: Kept until you request deletion or close your account

  • Marketing Data: Removed immediately upon unsubscribe request

  • Website Analytics: Anonymised after 26 months

  • Customer Service Records: Retained for 3 years to improve our service quality

International Transfers

Squarespace is committed to treating personal data received from the EEA, the UK, Switzerland, and elsewhere around the world in a secure and privacy-first way. Squarespace processes personal data in a way that meets the European Commission and UK Standard Contractual Clauses.

Squarespace uses the European Commission Standard Contractual Clauses (also known as Model Contractual Clauses) and the UK's International Data Transfer Addendum (UK Addendum) as the legal basis for transferring personal data to third countries, including the United States.

If we use additional third-party services that involve international data transfers, we ensure appropriate safeguards are in place.

Complaints and Regulatory Contact

If you have concerns about how we handle your personal data, please contact us first using the details above. We have procedures in place to investigate and respond to complaints.

If you're not satisfied with our response, you can complain to the UK's data protection authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Phone: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Children's Privacy

Our website and services are not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

Third-Party Links

Our website may contain links to photography communities, social media, or partner sites. This Privacy Policy does not apply to those external sites. We encourage you to review their privacy policies.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will:

  • Post the updated policy on this page with a new "Last Updated" date

  • Notify you via email if there are significant changes affecting your rights

  • Continue to protect your data according to this policy until you accept any changes

Contact Us

If you have questions about this Privacy Policy or your personal data:

Contact Form: Available on our website at talesofwanderlust.co.uk/contact

This Privacy Policy is designed to be transparent and easy to understand. If you have any questions about how we handle your personal information, please don't hesitate to contact us. We are committed to protecting your privacy and ensuring compliance with UK data protection laws.