​​

Privacy Information

1. What type of information do we collect?

This notice explains how we use personal information when you visit our website, buy products, use our services, hold an account or subscription, book an activity, contact us, or participate in our community and book-gifting programmes. It also covers Libbie™, Cuttie™ and related reading and recommendation features. The information used depends on the activity you choose.

This notice provides information about our practices. Reading it or accepting our Terms and Conditions does not give blanket consent to marketing or other optional processing.

2. What type of information do we collect?

Account and contact information. This can include your name, email address, telephone number, login and authentication records, communication preferences and account activity. Account credentials are handled through our website and authentication services.

Order and service information. This can include billing and delivery details, products ordered, subscription and booking details, transaction references, payment status, correspondence, refunds, loyalty points and referral or partner reward records. Payment details are handled through the payment service used at checkout. We receive information needed to administer and reconcile the payment; please do not send full card details or passwords by email, chat or contact form.

Reading and family information. When you use a reading or recommendation feature, we may receive the selected age range, reading interests, quiz responses, resulting descriptions and recommendations, chat messages, clarifications and records needed to save or send the result. Information about a child is treated as personal information when linked to a parent’s account or another identifiable person, even if no child’s name is given.

Community and support information. This can include enquiries, reviews, posts and uploads you choose to publish, event requirements, partnership enquiries and book-gifting requests. Public contributions may be visible to other people. Give us only the information needed for the request; a book-gifting enquiry does not require a child’s medical report or a detailed account of family hardship.

Technical information. This can include IP address, device and browser information, access and security records, pages or features used, session identifiers and information about failures. Cookie and similar-technology choices affect which optional information is collected. Records with account or device identifiers are not treated as anonymous merely because a name has been removed.

​​​​

3. How do we collect information?

We collect information directly when you complete a form, register, order, make a booking, use a reading feature, contact us or submit a contribution. We also receive information generated by your use of the site and by the service providers that help deliver it, such as payment confirmations and delivery updates.

A purchaser, parent, carer, school, community organisation or referring partner may supply information about another person where necessary for a gift, delivery, activity or request. We ask them to have an appropriate basis for providing it and to share this notice with the person where appropriate. We remain responsible for assessing our own use of that information and providing any further privacy information the law requires.

Fields needed to provide a chosen product or service will be identified when requested. Without required delivery, payment or booking information, we may be unable to complete that transaction. Optional marketing choices are separate.

We receive, collect and store any information you enter on our website or provide us in any other way. In addition, we collect the Internet protocol (IP) address used to connect your computer to the Internet; login; e-mail address; device type and connection information and purchase history. We may use software tools to measure and collect session information, including page response times, length of visits to certain pages, page interaction information, and methods used to browse away from the page. We also collect personally identifiable information (including name, email, communications); payment details (including credit card information), comments, feedback, product reviews, recommendations, and personal profile.

These information you provide are used to provide relevant products and service to you.

​​

4. Why do we collect such personal information?

Orders and paid services.

We use necessary order, payment, delivery, subscription and booking information to take steps you request before entering a contract and to perform our contract with you. We retain information needed for accounting and other legal obligations on the basis of those obligations.

Accounts and requested features.

We use information necessary to provide the account, reading result, recommendation email or other feature you request under our contract with you. For information about a child, gift recipient or organisational contact who is not a party to that contract, we rely on our legitimate interest in providing the requested service appropriately, after considering necessity and their interests and rights. Children’s interests receive particular weight.

Support and protection.

We use relevant information to answer enquiries, investigate complaints, correct errors, maintain service security, prevent misuse and fraud, administer genuine rewards and establish or defend legal claims. These are our legitimate interests, except where processing is necessary to perform a contract or meet a specific legal obligation.

Marketing.

We use consent for optional marketing where consent is required. Where the electronic-marketing rules permit us to contact an existing customer about our own similar products or services without consent, we rely on our legitimate interest in promoting those offerings and provide the required opt-outs. The conditions are explained under How do we communicate with our site visitors?

Optional website measurements and personalisation.

We use optional analytics, advertising and non-essential preference technologies with your consent. Necessary operational records and appropriately limited service statistics may be used for our legitimate interest in operating and improving the service.

We assess cookie and device-access rules separately.

Community and book gifting. We use the minimum information necessary to consider a request, coordinate a book gift, administer a partnership and account for a contribution, relying on our legitimate interests in running those activities and, where applicable, our contract or legal obligations. Permission to publish a recipient’s story or image is considered separately from providing books.

​

5. Children and family information

Adults may provide limited information about a child to choose books, arrange a service or explore a reading. Except where explicitly requested and necessary for result quality, please use an age band and broad interests where possible. Some service like book subscriptions and Cuttie Book recommendation and book matchmaking service require preferences, a full name, address, or exact birth date, and are used specifically for those purposes they are requested only.  Use designated delivery or booking fields when identifying information is genuinely needed.

Children have their own privacy rights. We consider their age, understanding and best interests when using their information or responding to a request made on their behalf. We may need to check an adult’s authority and whether acting through that adult is appropriate. Where a feature requires consent or parental authorisation, we will explain and obtain it in a suitable way.

Please do not enter school, personal history, medical records, diagnoses, assessment reports or other sensitive identifying details into general reading, chat fields or form field.

Privacy information for younger readers. We use what you or your grown-up tell us to help with the reading activity you choose. Keep private details, such as your school, address and passwords, out of chat. Ask a trusted grown-up if you are unsure. You or your grown-up can contact hello@wonderwing.co.uk to ask about your information or tell us something is wrong.

​

6. How do we store, use, share and disclose our site visitors' personal information?

We use Wix to host and operate our website and related account, commerce and database functions. Depending on the feature, relevant information is also handled by payment providers, carriers, communications providers, technical and security services, and professional advisers. We restrict access and sharing to what is appropriate for the relevant purpose and put the required arrangements in place with providers processing information for us.

Payment providers and carriers may also use some information for their own legal, security or operational purposes as independent controllers. Their own privacy information explains that use. A school, community organisation or partner receives only the information needed for the arrangement in which it is involved. The relevant form or order information will explain any material additional sharing.

Cuttie is an in-house code-based design, which uses artificial intelligence augmentation in some parts of Cuttie's chat responses. Augmentation is specifically for user conversation context within Cuttie readings interpretation. We use OpenAI for Cuttie's AI augmented responses. Identifiable personal information are cleared during augmentation; while only relevant requests and reading or recommendation context are sent to that service when the augmentation service is used. Technical and safety services may also process request information to operate and protect the feature. 

We may share necessary information when required by law, to handle a legal claim or protect people and the service. In a genuine business transfer, information may be disclosed subject to appropriate safeguards and used consistently with applicable law; a transfer does not give a new owner unrestricted permission to use it.

We use appropriate organisational and technical measures to protect information. No system can guarantee absolute security. Please contact us promptly if you believe an account or disclosure has been compromised.

Wix.com provides us with the online platform that allows us to sell our products and services to you. Your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. Wix.com stores your data on secure servers behind a firewall.  

All direct payment gateways offered by Wix.com and used by our company adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

 

7. International processing

Our website and service providers may process information outside the United Kingdom. Where a transfer of personal information requires protection under UK data protection law, we use an applicable UK adequacy arrangement or appropriate contractual safeguards and the required assessment of protection. These arrangements can include the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses, as appropriate.

You can ask support@wonderwing.co.uk for information about the destinations and safeguards relevant to your information, including a copy of applicable safeguards subject to necessary redactions. Where a provider relies on an adequacy framework, we check that the relevant recipient and processing are covered.

​

8. How long we keep information

We keep personal information for the time needed for the purpose for which it was collected and for any applicable legal requirement. We assess the type and sensitivity of the information, the service requested, whether an account or transaction remains active, and the need to resolve complaints, fraud concerns or legal claims.

Order, payment and accounting records are retained for the applicable accounting, tax and legal-record periods. Account information is kept while needed to provide the account and deal with outstanding matters. Closing an account does not require us to delete records that we must lawfully retain.

Reading results, recommendation records and chat-related information are kept for the relevant feature and support purposes. Any saved-reading access period will be shown with the feature. Expiry of access is not a promise that every operational or backup copy is immediately erased. We retain identifying security and diagnostic records only for as long as needed for their specific purposes, then delete or anonymise them where appropriate.

Book-gifting, partnership and enquiry information is reviewed when the request or relationship ends and retained only as needed for outstanding commitments, accountability or legal requirements. Public contributions may remain until removed under the relevant service arrangements, subject to privacy rights and lawful retention.

If you opt out of marketing, we may keep a limited suppression record so we can respect that choice. Information in routine backups is removed under the backup replacement cycle and is not ordinarily used for new purposes. We may retain genuinely anonymous aggregate statistics that no longer identify anyone.

​​​​