1. Who We Are

35 Wonder Street is a creative boutique offering fine-art prints, portrait services, digital downloads, workshops, and membership-based content.
Our website address is: https://35wonderstreet.com.

If you have questions about this Privacy Policy or wish to exercise your rights, you may contact us at:
ad***@************et.com

2. What Personal Data We Collect

We collect information in the following ways:

2.1 Information You Provide Directly

• Name, email address, phone number, and billing/shipping address

• Payment details (processed securely via third-party processors; we do not store full card data)

• Account information (username, password)

• Portrait session details, booking preferences

• Messages, inquiries, and customer support correspondence

• Newsletter subscription details

• Membership signup and usage data

• Comments on posts or reviews (including IP address for spam detection)

2.2 Information Collected Automatically

• IP address

• Browser type and device information

• Pages visited and time spent

• Cookies and tracking tools

• Referrals and campaign sources

2.3 Information from Integrated Services

We may receive data from:

• WooCommerce

• MailPoet

• PayPal or Stripe

• Printful or other print-on-demand partners

• Analytics providers

• Social media embeds (YouTube, Instagram, etc.)

3. Media Uploads

If you upload images, avoid including EXIF GPS data. Visitors may be able to view this metadata if not removed.

4. Cookies & Tracking Technologies

We use cookies to:

• Remember your login or cart

• Improve your browsing experience

• Track newsletter engagement

• Securely authenticate users

• Prevent spam

• Enable wishlist and membership features

You may disable cookies in your browser. Some features may not function without them.

Full cookie breakdown (MailPoet, WooCommerce, wishlist cookies) is maintained in the Cookie List section of this Policy.

5. Embedded Content From Other Websites

Content embedded from external platforms behaves as though you visited the external site directly.
Such platforms may collect:

• usage data

• cookies

• interaction information, if logged in

Examples: YouTube videos, Instagram posts, Spotify players.

6. How We Use Your Data

We use your information to:

• Process orders, bookings, and memberships

• Deliver digital products and portrait services

• Send transactional emails (order confirmations, support replies)

• Provide newsletters, creative updates, and product launches

• Improve our Site, services, and customer experience

• Prevent fraud, spam, and security risks

• Meet legal and tax obligations

We do not sell your personal data.

7. Legal Basis for Processing (GDPR)

For EU users, we process data under these lawful bases:

• Contract – to fulfill orders and bookings

• Consent – newsletters, cookies

• Legitimate interest – analytics, fraud prevention

• Legal obligation – tax, accounting, compliance

8. Who We Share Your Data With

We share data only with trusted service providers necessary for operating the business:

• Payment processors: PayPal, Stripe

• Email services: MailPoet

• E-commerce services: WooCommerce

• Fulfillment providers: Printful or similar

• Hosting and security providers

• Anti-spam services

Each third party processes data in line with strict industry security standards.

9. Data Retention

• Comments: retained indefinitely

• Customer orders: retained for 7–10 years (tax & accounting laws)

• Wishlist & cart data: retained per browser cookie settings

• Membership data: retained until the account is deleted

• Analytics: stored in aggregated form

You may request deletion at any time (except where law requires retention).

10. Your Rights (GDPR, CCPA, Global)

Depending on your region, you may have the right to:

• Access your data

• Correct or update your data

• Request deletion (“right to be forgotten”)

• Object to processing

• Withdraw consent

• Request a copy of your data

• Opt-out of marketing anytime

• Restrict how your data is processed

To exercise any rights:
ad***@************et.com

11. Children’s Privacy

The Site is not intended for individuals under 16.
We do not knowingly collect children’s data.

12. How We Protect Your Data

We use:

• SSL encryption

• Secure hosting

• Limited-access admin controls

• Payment gateways with full PCI-DSS compliance

• Regular security reviews and malware scans

13. International Data Transfers

Your data may be stored or processed in India, Europe, or the United States.
We ensure appropriate safeguards (Standard Contractual Clauses, etc.) are applied where applicable.

14. Changes to This Policy

We may update this Privacy Policy occasionally.
Revisions will be posted on this page with a new “Last Updated” date.

15. Contact Us

If you have questions, requests, or concerns:
ad***@************et.com