Privacy policy

Department of Magical Letters

1. Data Controller
Department of Magical Letters
Owner: Margarita Mangus
Germany
Email: departmentofmagicalletters@gmail.com

2. Data We Collect
To process your order, we collect:

Name
Shipping address
Email address
Payment details
Personalization details you provide

We do not knowingly collect data directly from children.

3. Purpose of Processing
Your data is used to:

Fulfill your order
Produce and deliver your letter
Communicate with you about your order
Meet legal and tax obligations

4. Legal Basis
Processing is based on:

Art. 6(1)(b) GDPR — performance of a contract
Art. 6(1)(c) GDPR — compliance with a legal obligation

5. Data Sharing
We only share data with essential service providers:

Payment providers
Shipping providers
Production partners
Shopify

We do not sell personal data.

6. Data Retention
Data is retained only as long as legally required.

7. Your Rights
Under GDPR, you have the right to access, correct, or delete your personal data.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work, or the place of the alleged infringement.

8. Cookies
We use only essential cookies required for this website to function.