Privacy Policy
Effective date: 2026-10-22
Last updated: 2026-11-06
Brand: Woodseed Stone (woodseedstone.com)
Contact: info@woodseedstone.com
Business entity: 万物自然而然（涿鹿）贸易工作室 (an individual business registered in the People’s Republic of China), Room 1411, Unit 2, Building 1, Shanshui Yuyuan Residential Community, Zhuolu County, Hebei Province, China
1. Who We Are
This Privacy Policy explains how Woodseed Stone (“we”, “us”, “our”), operated by 万物自然而然（涿鹿）贸易工作室 at Room 1411, Unit 2, Building 1, Shanshui Yuyuan Residential Community, Zhuolu County, Hebei Province, China, collects, uses, stores, and protects personal data when you visit woodseedstone.com (the “Site”) and purchase our bracelets made from natural mineral stones, tree seeds, and wood.
We act as the data controller for the personal data described in this policy. For all privacy questions, contact us at info@woodseedstone.com.
2. What Personal Data We Collect
Information you provide to us:
- Contact details: name, email address, shipping address, phone number (optional)
- Order details: products purchased, order history, order numbers
- Payment information: we do not collect or store your card numbers or banking details. Payments are processed by PayPal. We receive the transaction details required to manage your order; direct card checkout is not available on our Site
- Communications: emails and messages you send to us, including photos you share for return or quality enquiries
Information collected automatically:
- Device and usage data: IP address, browser type and version, operating system, pages visited, referral source, time of visit, approximate location at country level
- Cookies and similar technologies, as described in Section 6
3. How We Use Your Personal Data
| Purpose | Legal basis (GDPR) |
|---|---|
| Process and fulfil your orders (payment via PayPal, dispatch, delivery, tracking) | Performance of a contract (Art. 6(1)(b)) |
| Handle returns, refunds, exchanges and quality claims | Performance of a contract (Art. 6(1)(b)) |
| Send order and shipping updates, including tracking numbers | Performance of a contract (Art. 6(1)(b)) |
| Answer your questions by email | Legitimate interest in customer service (Art. 6(1)(f)) |
| Send marketing emails if you opted in (newsletter, promotions) | Your consent (Art. 6(1)(a)) |
| Detect fraud, prevent abuse, ensure the security of the Site | Legitimate interest in protecting our business and customers (Art. 6(1)(f)) |
| Comply with tax, customs, accounting and legal obligations | Legal obligation (Art. 6(1)(c)) |
4. How We Share Your Personal Data
We never sell, rent, or trade your personal data. We share data only with service providers who need it to operate the Site and fulfil your order:
- PayPal — payment processing. When you pay, you are redirected to PayPal’s own pages; PayPal collects and processes your payment data under its own Privacy Policy and acts as an independent controller for that data
- Shipping and logistics carriers (e.g., postal and express couriers) — to deliver parcels and provide tracking. Recipient name, address and phone number are provided as necessary for delivery
- E-commerce and hosting providers (WordPress / WooCommerce hosting, CDN) — to operate the Site
- CookieYes — to manage our cookie consent banner and records of your consent choices
- Marketing and analytics tools — only if you consent (see Section 6)
- Government authorities and customs agencies — where legally required (e.g., customs declarations, tax filings, requests from regulators)
Each service provider receives only the data required for its task and is contractually bound to protect it.
5. International Transfers
Woodseed Stone is operated from the People’s Republic of China, and our service providers may store or process data in China, the EU, the US, or other countries.
When we transfer personal data to a country outside the European Economic Area (EEA), the UK, or Switzerland, we rely on:
- an adequacy decision by the European Commission or UK Secretary of State where one applies, or
- appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent transfer mechanisms, or
- the transfer being necessary for the performance of a contract with you (e.g., to deliver your order).
By using the Site and making a purchase, you understand that your data may be transferred and stored in these locations. Where required, we will provide a copy of the relevant safeguards on request.
6. Cookies and Similar Technologies
The Site uses cookies to operate correctly and to understand how visitors use it. A cookie is a small text file stored on your device when you visit a website.
CookieYes banner: on your first visit, a CookieYes consent banner explains the categories of cookies we use and lets you choose which ones to accept. You can change your choices at any time by clicking the cookie icon on the Site. You can review and update your cookie choices using the consent controls.
Categories:
| Category | Purpose | Consent required |
|---|---|---|
| Strictly necessary | Site security, basket/checkout operation, load balancing | No — cannot be disabled |
| Analytics | Understand how visitors use the Site (pages, duration, errors) | Yes |
| Marketing | Advertising and behavioural tracking (e.g., social media pixels) | Yes |
The consent panel describes the cookies detected on the Site and provides available controls. Necessary cookies support security and checkout. Where required by applicable law, optional analytics or marketing cookies require your consent.
7. Email Marketing and Opt-Out
- We send marketing emails (newsletters, new arrivals, offers) only if you have subscribed — for example, through the signup form on the Site.
- Every marketing email contains a visible unsubscribe link. You can also unsubscribe at any time by emailing info@woodseedstone.com with the subject “Unsubscribe”.
- Order confirmation, shipping notification, and service emails are not marketing emails; you receive them because we are fulfilling a contract with you, and they cannot be opted out of (though you may contact us to reduce their frequency where practical).
8. Your Rights (GDPR and other applicable law)
If you are located in the EEA, the UK, Switzerland, or another jurisdiction granting equivalent rights, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate or incomplete data
- Erasure — ask us to delete your personal data, subject to legal retention obligations (e.g., tax records)
- Restriction — ask us to limit how we process your data in certain circumstances
- Data portability — receive your data in a structured, machine-readable format where technically feasible
- Object — object to processing based on legitimate interests, and object to marketing at any time
- Withdraw consent — withdraw any consent you have given, at any time, without affecting the lawfulness of processing before withdrawal
- Complain — lodge a complaint with your local data protection authority (e.g., the supervisory authority of your country of residence within the EEA)
California residents (CCPA/CPRA): if you are a California resident, you also have the right to know what personal information we collect, the right to request deletion, the right to correct inaccurate information, and the right to non-discrimination for exercising these rights. We do not sell or share personal information as defined under the CCPA.
How to exercise your rights: email info@woodseedstone.com with the subject “Privacy Request”. We will verify your identity before responding and will reply within 30 days (or the period required by applicable law). If an extension is permitted by applicable law, we will notify you of the reason and applicable response period.
9. Data Retention
We keep personal data only as long as needed for the purposes described in this policy:
- Order records (including name, address, PayPal transaction reference): 3 years after the order, to support warranties, returns, accounting and tax obligations (where local law requires longer retention, we comply)
- Customer service correspondence: 24 months after the last contact
- Marketing subscriber data: until you unsubscribe or for 36 months of inactivity, whichever comes first
- Consent records (CookieYes): 24 months, or as configured in your CookieYes settings
- Analytics data: 26 months, or the retention period of the analytics provider
After the retention period, data is deleted or anonymised.
10. Security
We take reasonable technical and organisational measures to protect your personal data, including HTTPS encryption on the Site, restricted access to customer data, and review of our service providers’ security practices. No method of transmission over the Internet is 100% secure, but we work to protect your data and to limit the amount of data we collect to what is necessary.
11. Children
The Site is not directed at children under 16 (or the age of digital consent in your country). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a new “Last updated” date. Material changes will be highlighted on the Site or notified by email where required by law.
13. Contact
For any question about this policy or your personal data:
Email: info@woodseedstone.com
Subject line: “Privacy Request” (or “Unsubscribe” for marketing)
Business entity: 万物自然而然（涿鹿）贸易工作室, Room 1411, Unit 2, Building 1, Shanshui Yuyuan Residential Community, Zhuolu County, Hebei Province, China