Scar & Wonder Website
Privacy Policy
1. Introduction
We respect your privacy and comply with the EU General Data Protection Regulation (GDPR). This policy explains what personal data we collect, how we use it, and your rights.
2. Data We Collect
-
Personal details (e.g., name, email, phone, address) you provide when placing orders, subscribing to newsletters, or using the contact form.
-
Payment information processed securely via third-party e-commerce service providers.
-
Usage data collected through Google Analytics to improve website performance and user experience.
-
Data collected by Google Merchant Center to manage product listings and advertising.
-
Cookies and tracking technologies to personalize your experience and for marketing purposes.
3. How We Use Your Data
-
To process and fulfill your orders.
-
To communicate with you about your orders, newsletter, and promotions.
-
To analyze website traffic and improve our services.
-
To comply with legal obligations.
4. Checkout Data Processing
- When you place an order on our store, we collect the personal information you provide during checkout strictly for the purpose of processing and fulfilling your order. This includes details such as your name, shipping and billing address, email, and contact information.
- Payment processing is handled by trusted third-party service providers, including WooCommerce’s integrated payment gateway and Stripe. Depending on your choice of payment method, you may also interact directly with other recognized third-party payment processors. We do not store your payment details on our servers; these are securely managed by the respective payment providers compliant with relevant security and privacy standards.
- By completing your payment, you agree to the terms and privacy policies of these third-party processors. We ensure that appropriate data processing agreements are in place with all our service providers to guarantee your personal data is handled lawfully and securely.
5. Data Sharing & Transfer
-
Your data is processed by trusted third parties for order fulfillment, payment processing, marketing (Google services), and web hosting.
-
Data transfer outside the EU, such as to Google servers in the US, is safeguarded with standard contractual clauses and appropriate protections.
6. Your Rights
-
Access, correction, or deletion of your personal data.
-
Object to or restrict processing.
-
Data portability.
-
Withdraw consent at any time for marketing communications without affecting prior processing.
-
Right to lodge a complaint with a supervisory authority.
7. Cookies
Our website uses cookies essential for providing core website functionality and enabling e-commerce services. In addition, we utilize Google Analytics to collect anonymous data about website usage to improve your experience and optimize our services.
Under EU privacy laws including GDPR and the ePrivacy Directive, we require your explicit consent before activating Google Analytics cookies on your device.
We seek your consent through a cookie consent banner at your first visit. You can accept or decline analytics cookies, and your choice will be respected. If you decline, Google Analytics cookies will not be set, and no analytic data will be collected from your session.
Specific breakdown of cookies is managed by WP Consent plugin as follows:
Essential
Essential cookies enable basic functions and are necessary for the proper function of the website.
| Cookie ID | Purpose | Duration |
|---|
| wpconsent_preferences | This cookie is used to store the user's cookie consent preferences. | 30 days |
Google reCAPTCHA
Google reCAPTCHA helps protect websites from spam and abuse by verifying user interactions through challenges.
| Cookie ID | Purpose | Duration |
|---|
| _GRECAPTCHA | Google reCAPTCHA sets a necessary cookie (_GRECAPTCHA) when executed for the purpose of providing its risk analysis. | 179 days |
Google Tag Manager
Google Tag Manager simplifies the management of marketing tags on your website without code changes.
| Cookie ID | Purpose | Duration |
|---|
| cookiePreferences | Registers cookie preferences of a user | 2 years |
| td | Registers statistical data on users' behaviour on the website. Used for internal analytics by the website operator. | session |
Stripe
Stripe is a payment processing platform that enables businesses to accept online payments securely and efficiently.
Learn more| Cookie ID | Purpose | Duration |
|---|
| __stripe_mid | Fraud prevention and detection | 1 year |
| __stripe_sid | Fraud prevention and detection | 30 minutes |
| m | Set by payment provider stripe.com to process payments | 10 years |
Statistics
Statistics cookies collect information anonymously. This information helps us understand how visitors use our website.
Google Analytics
Google Analytics is a powerful tool that tracks and analyzes website traffic for informed marketing decisions.
Learn more| Cookie ID | Purpose | Duration |
|---|
| __utmt | Used to monitor number of Google Analytics server requests | 10 minutes |
| __utmb | Used to distinguish new sessions and visits. This cookie is set when the GA.js javascript library is loaded and there is no existing __utmb cookie. The cookie is updated every time data is sent to the Google Analytics server. | 30 minutes after last activity |
| __utmc | Used only with old Urchin versions of Google Analytics and not with GA.js. Was used to distinguish between new sessions and visits at the end of a session. | End of session (browser) |
| __utmz | Contains information about the traffic source or campaign that directed user to the website. The cookie is set when the GA.js javascript is loaded and updated when data is sent to the Google Anaytics server | 6 months after last activity |
| __utmv | Contains custom information set by the web developer via the _setCustomVar method in Google Analytics. This cookie is updated every time new data is sent to the Google Analytics server. | 2 years after last activity |
| __utmx | Used to determine whether a user is included in an A / B or Multivariate test. | 18 months |
| _ga | ID used to identify users | 2 years |
| _gali | Used by Google Analytics to determine which links on a page are being clicked | 30 seconds |
| _ga_ | ID used to identify users | 2 years |
| _gid | ID used to identify users for 24 hours after last activity | 24 hours |
| _gat | Used to monitor number of Google Analytics server requests when using Google Tag Manager | 1 minute |
| _gac_ | Contains information related to marketing campaigns of the user. These are shared with Google AdWords / Google Ads when the Google Ads and Google Analytics accounts are linked together. | 90 days |
| __utma | ID used to identify users and sessions | 2 years after last activity |
WooCommerce Sourcebuster
SourceBuster is used by WooCommerce for order attribution based on user source.
| Cookie ID | Purpose | Duration |
|---|
| sbjs_session | The number of page views in this session and the current page path | 30 minutes |
| sbjs_udata | Information about the visitor’s user agent, such as IP, the browser, and the device type | session |
| sbjs_first | Traffic origin information for the visitor’s first visit to your store (only applicable if the visitor returns before the session expires) | session |
| sbjs_current | Traffic origin information for the visitor’s current visit to your store | session |
| sbjs_first_add | Timestamp, referring URL, and entry page for your visitor’s first visit to your store (only applicable if the visitor returns before the session expires) | session |
| sbjs_current_add | Timestamp, referring URL, and entry page for your visitor’s current visit to your store | session |
| sbjs_migrations | Technical data to help with migrations between different versions of the tracking feature | session |
8. Data Retention
We keep your data only as long as necessary for order processing, legal compliance, and legitimate business interests, then securely delete or anonymize it.
9. Contact Information
For any questions or to exercise your rights, contact us via email: cs@scar…er.com
10. Updates to This Policy
We may update this policy from time to time. We will notify you of significant changes via the website or e-mail.
