1. Scope

This Policy applies globally, including to visitors from the European Union (EU), United Kingdom (UK), United States (including California residents), Canada, Australia, and New Zealand. It is designed to comply with the GDPR, UK Data Protection Act 2018, CCPA/CPRA, PIPEDA, Australia Privacy Act 1988, and New Zealand Privacy Act 2020.

2. Information We Collect

• Information you provide: Name, email address, comments, form submissions, newsletter sign-ups, or purchases.
• Automatically collected data: IP address, browser type, device information, pages visited, and cookies.
• Payment data: If purchases are made, payment details are processed securely by third-party providers (we do not store full card details).

3. How We Use Information

• To operate and maintain the website.
• To communicate with you (newsletters, responses, updates).
• To personalize your experience and improve services.
• To comply with legal and regulatory obligations.
• To detect and prevent fraud, abuse, or unauthorized access.

4. Legal Bases for Processing (GDPR/UK GDPR)

If you are located in the EU/UK, we process your personal data under the following lawful bases:

• Your consent (e.g., newsletters, cookies).
• Contract performance (e.g., to deliver purchased products/services).
• Compliance with legal obligations.
• Legitimate interests (e.g., analytics, improving site functionality).

5. Your Rights

Depending on your location, you may have the following rights:

• GDPR/UK GDPR (EU & UK): Access, rectification, erasure, restriction, objection, data portability, withdraw consent, lodge a complaint.
• CCPA/CPRA (California, USA): Right to know, right to delete, right to opt-out of “sale” or “sharing” of personal data, right to correct, right to non-discrimination.
• PIPEDA (Canada): Right to access, correct, and withdraw consent for data use.
• Australia & New Zealand: Rights to access, correct, and request deletion of personal data, and to complain to regulators.

To exercise any of these rights, please contact us at privacy@smallworldwonder.com.

6. Cookies & Tracking

We use cookies and similar technologies to improve your browsing experience, analyze traffic, and deliver personalized content. You can control cookies through your browser settings or opt-out mechanisms provided.

7. Data Sharing & Disclosure

We do not sell your personal data. We may share limited data with:

• Service providers (hosting, analytics, email delivery, payment processors).
• Legal authorities if required by law.
• Business partners in the event of a merger, sale, or acquisition.

8. International Transfers

Because our services may be global, your data may be transferred outside your country. Where required, we implement safeguards such as Standard Contractual Clauses (SCCs) under GDPR.

9. Data Retention

We retain your personal data only as long as necessary for the purposes described, or as required by law. Data may be anonymized for statistical purposes.

10. Data Security

We implement technical and organizational measures to protect your data (encryption, firewalls, access controls). However, no system is 100% secure.

11. Children’s Privacy

Our website is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal data from minors. If you believe we have collected such data, contact us immediately.

12. Contact Information

If you have questions or wish to exercise your rights, please contact:

Email: privacy@smallworldwonder.com
Address: [Insert Business Address]
Phone: [Insert Business Phone Number]

13. Updates to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page. Significant changes may be notified via email or site notices.