Wonderful Walls Studio – Privacy Policy

Last updated: September 2026

Wonderful Walls Studio is the trading name of William Paul Gillette, a sole trader established in England.

This Privacy Policy explains how we collect, use, store and share personal information when you visit our website, use our services, purchase from us or otherwise communicate with us.

Wonderful Walls Studio is the data controller for the personal information described in this policy, except where another organisation, such as Shopify, acts as a separate controller for its own processing.

1. Personal information we collect

Depending on how you interact with us, we may collect or process:

• your name, billing address, delivery address, email address and telephone number;
• information about products you view, design, order, return or cancel;
• information you provide when creating or managing an account;
• information you provide when contacting us or giving instructions for a personalised product;
• payment and transaction information needed to process your purchase;
• information about your device, browser, IP address and use of our website; and
• information collected using cookies and similar technologies.

Payment information is processed through the payment services made available through our checkout. We do not need to receive or store your complete payment-card details ourselves in order to fulfil your order.

2. Where we obtain information

We may obtain personal information:

• directly from you;
• automatically when you use our website;
• from Shopify and other service providers involved in operating our store;
• from payment providers;
• from shipping and fulfilment providers; and
• from other third parties where permitted by law.

3. How and why we use personal information

We use personal information only where we have an appropriate lawful basis.

Providing products and fulfilling orders

We use information to process orders, take payment, create personalised products, arrange delivery, manage returns and communicate with you about your purchase.

Our lawful basis is normally performance of a contract, or taking steps at your request before entering into a contract.

Customer service

We use information to answer enquiries, resolve problems and provide support.

Our lawful basis may be performance of a contract where the enquiry relates to an order, or our legitimate interests in providing effective customer service and operating our business.

Legal and accounting requirements

We may retain or use information where necessary for accounting, taxation, consumer-protection or other legal requirements.

Our lawful basis is compliance with a legal obligation.

Security and fraud prevention

We may use information to protect our website, customers and business, detect fraud, investigate suspicious activity and maintain the security of our services.

Our lawful basis is our legitimate interests in protecting our business and customers, and where applicable compliance with a legal obligation.

Website operation, analytics and improvement

We may use information about how our website is used to maintain, understand and improve our website and services.

Where processing is necessary for the basic operation and security of our website, we may rely on our legitimate interests.

Where applicable law requires consent for cookies or similar technologies used for analytics, advertising or other non-essential purposes, our lawful basis is consent.

Marketing

Where you have chosen to receive marketing communications, we may use your contact information to send information about Wonderful Walls Studio products, news or offers.

Where required, our lawful basis is consent. Where applicable law permits another basis, we may rely on our legitimate interests in marketing our products to existing customers.

You can opt out of marketing communications at any time using the unsubscribe option provided or by contacting us.

Personalised advertising

Where we use personal information for personalised or targeted advertising and applicable law requires your permission, our lawful basis is consent.

You can change applicable privacy or cookie choices using the controls provided on our website.

4. Legitimate interests

Where we rely on legitimate interests, those interests may include:

• operating and improving our business and website;
• providing customer support;
• protecting our customers, website and business from fraud or misuse;
• understanding how our services are used; and
• marketing our products where permitted by law.

We consider the effect of this processing on your rights and privacy before relying on legitimate interests.

5. Information required to fulfil an order

Certain information is necessary for us to enter into and perform a contract with you.

For example, we need sufficient contact, order and delivery information to process and deliver a purchase.

If required information is not provided, we may be unable to accept or fulfil an order.

6. How we share personal information

We may share personal information where necessary with organisations that help us operate our business, including:

• Shopify, which provides our ecommerce platform;
• payment processors;
• shipping and delivery providers;
• website, technology and cloud-service providers;
• professional advisers where necessary; and
• government, regulatory or law-enforcement authorities where disclosure is legally required.

We only share information where there is an appropriate reason to do so.

We may also disclose information where necessary in connection with the sale, transfer or restructuring of our business.

7. Shopify

Our online store is hosted by Shopify.

Shopify collects and processes personal information about your access to and use of our store in order to provide its services to us and to you.

We also use Shopify services that may use information about your interactions with our store, Shopify and other merchants to help provide a more personalised shopping experience, show more relevant advertising and understand how customers interact with our store and advertising.

Information about your activity on our store may therefore be shared with Shopify and with service providers or other third parties involved in providing these services, including organisations located in countries other than the country in which you live.

Where required, Shopify respects the consent and privacy choices you make through our cookie banner, privacy controls and data-sharing opt-out tools.

Shopify may act as a separate data controller for some of this processing.

You can learn more about Shopify's processing and your rights through the Shopify Consumer Privacy Policy and can exercise applicable rights directly through the Shopify Privacy Portal.

8. Cookies and similar technologies

Our website uses cookies and similar technologies for functions including operating the store, remembering preferences, security, analytics and, where enabled, advertising.

Where consent is required for non-essential cookies or similar technologies, you can make or change your choices using the cookie or privacy controls provided on our website.

9. Data sharing and targeted advertising choices

Depending on where you live, you may have the right to opt out of certain uses or sharing of personal information for targeted advertising.

Where applicable, you can use our data-sharing opt-out page:

wonderfulwallsstudio.com/pages/data-sharing-opt-out

We also honour applicable privacy preference signals supported by Shopify, including Global Privacy Control where required.

10. International transfers

Some of the organisations that process personal information on our behalf may operate outside the United Kingdom or the country in which you live.

Where applicable data-protection law requires safeguards for an international transfer, we rely on recognised mechanisms such as adequacy regulations or approved contractual safeguards.

11. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, accounting, tax, dispute-resolution and record-keeping requirements.

Retention periods therefore vary depending on the type of information and why we hold it.

When information is no longer required, we will delete or anonymise it where appropriate.

12. Security

We take reasonable organisational and technical measures to protect personal information.

No method of electronic transmission or storage can be guaranteed to be completely secure, so we cannot guarantee absolute security.

13. Your rights

Depending on the law that applies to you, you may have rights relating to your personal information, including the right to:

• request access to your personal information;
• ask us to correct inaccurate information;
• request deletion of information in certain circumstances;
• ask us to restrict certain processing;
• object to certain processing;
• receive certain information in a portable form;
• withdraw consent where processing is based on consent; and
• complain to a data-protection authority.

These rights are subject to the conditions and exceptions provided by applicable law.

You have the right to object at any time to the use of your personal information for direct marketing.

To exercise a privacy right, contact us using the details below. We may need to verify your identity before completing a request.

14. Complaints

If you have a concern about how we use your personal information, please contact us first so that we can try to resolve it.

You also have the right to complain to the UK Information Commissioner's Office (ICO) or, where applicable, another data-protection authority responsible for your location.

Information about the ICO is available at ico.org.uk.

15. Children's privacy

Our products and services are not directed specifically at children, and we do not knowingly seek to collect personal information from children who are not legally able to provide it.

If you believe a child has provided personal information to us inappropriately, please contact us.

16. Automated decision-making

We do not currently make decisions about customers that produce legal or similarly significant effects based solely on automated processing.

Third-party payment, security or fraud-prevention providers may use automated systems as part of their services and are responsible for explaining any processing they undertake as separate controllers.

17. Changes to this policy

We may update this Privacy Policy to reflect changes to our business, website, services, legal requirements or privacy practices.

When we make changes, we will update the date shown at the beginning of the policy and provide any additional notice required by law.

18. Contact

For privacy questions or requests, contact:

Wonderful Walls Studio
Trading name of William Paul Gillette, sole trader
Email: hello@wonderfulwallsstudio.com
Telephone: +44 7496 889567

Our business address is published in our Contact Information and Legal Notice pages.