Privacy Policy

Whispers of the Willow: The Chronicles of Finn and the Hidden Truth Privacy Policy

Effective Date: 10 July 2025

1. Introduction

This Privacy Policy sets forth the principles and practices under which we, Whispers of the Willow, operating from the Netherlands, collect, use, store, and protect your personal data. We are committed to upholding your privacy and ensuring the transparent and lawful handling of your information in compliance with the General Data Protection Regulation (EU 2016/679) (“GDPR”), applicable local laws, and relevant international standards.

By accessing this website — https://whispersofthewillow.com — you acknowledge and agree to the terms herein.

2. Identity of the Data Controller

The data controller responsible for the processing of your personal information on this website is:

Whispers of the Willow
Based in the Netherlands
Contact: sales@whispersofthewillow.com

We do not appoint a Data Protection Officer under Article 37 of the GDPR, as our operations do not require one at this time.

3. Scope of This Policy

This Privacy Policy applies to all users of this website regardless of geographic location. It outlines how we handle any information you may submit via our contact form, email correspondence, or any related engagement, while also affirming the absence of data collection in certain areas (e.g., user tracking, profiling, e-commerce, etc.).

4. Data We Collect

We only collect personal data you voluntarily provide. This includes:

• Name
• Email address
• Message content or inquiry details

No cookies, tracking pixels, analytics tools, profiling technologies, or user accounts are used on this website. We do not collect sensitive personal data as defined in Article 9 of the GDPR.

5. Legal Basis for Processing

All processing activities are grounded in a lawful basis as per Article 6 of the GDPR:

• Legitimate Interest (Art. 6(1)(f)): When you contact us through the website form or via email, we process your data in order to respond to your inquiry and communicate effectively.
• Consent (Art. 6(1)(a)): If you choose to provide personal information, you do so voluntarily and with informed consent.

We do not rely on automated decision-making or profiling (Art. 22 GDPR).

6. Purpose of Processing

Your data is processed exclusively for the following purposes:

• Responding to inquiries or correspondence initiated via the contact form or direct email.
• Maintaining records of communication as needed for legal, administrative, or ethical obligations.
• Preserving the integrity and trust of our author-reader relationship.

7. Data Retention

We retain your personal data only for as long as is strictly necessary to fulfill the purposes for which it was collected:

• Inquiries are stored for a maximum of 90 days, unless extended communication justifies a longer period.
• Emails may be archived securely for up to 1 year if they relate to legal or commercial queries.

You may request deletion at any time by contacting us directly.

8. Data Sharing and Disclosure

We do not share, sell, rent, or otherwise disclose your personal data to third parties. Exceptions may occur only where:

• We are required by law, judicial process, or government request to disclose such information.
• You provide explicit consent to do so.

There are no third-party plugins, payment processors, analytics services, or embedded content that access user data.

9. International Visitors

By using this site, you understand that your information may be transferred to and processed in the Netherlands, where our operations are based. We ensure that all such processing is carried out in accordance with applicable privacy protections, regardless of your location.

If you are located in jurisdictions with additional privacy protections (e.g., California, Canada, United Kingdom), we honour your rights in full.

10. Your Rights (Data Subject Rights)

Under GDPR and applicable global laws, you have the following rights:

• Right of Access – to request what personal data we hold about you.
• Right to Rectification – to correct inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten) – to request deletion of your data.
• Right to Restrict Processing – to limit how your data is used.
• Right to Data Portability – to request transfer of your data.
• Right to Object – to challenge how we process your data under legitimate interests.
• Right to Withdraw Consent – at any time, where processing is based on your consent.
• Right to Lodge a Complaint – with a supervisory authority such as the Autoriteit Persoonsgegevens (Dutch Data Protection Authority) if you believe your data rights are infringed.

To exercise any of the above rights, please email: sales@whispersofthewillow.com

11. Children’s Privacy

This website is not directed to individuals under the age of 13, and we do not knowingly collect personal information from children. If we discover such data has been collected inadvertently, it will be deleted promptly in compliance with applicable child privacy regulations (e.g., COPPA, GDPR Art. 8).

12. Third-Party Links

Our website may include links to third-party retailers and book platforms (e.g., Amazon, Bol.com, Bookshop.org). We are not responsible for their content or privacy practices. We encourage users to review the privacy policies of those external sites before providing any personal information.

13. Data Security

We implement appropriate technical and organisational measures in accordance with Article 32 of the GDPR to ensure data integrity and confidentiality, including:

• Secure hosting infrastructure
• SSL encryption
• Email safeguards
• Access limitation protocols

While no system can be guaranteed to be 100% secure, we take all reasonable steps to prevent unauthorised access or disclosure.

14. Policy Updates

We reserve the right to revise this Privacy Policy periodically. Users will be notified of material changes via our website or email, where appropriate. We encourage you to review this policy regularly.

Last updated: 10 July 2025

15. Contact Us

If you have questions or concerns about this Privacy Policy or your personal data, please contact:

Whispers of the Willow
Email: sales@whispersofthewillow.com
Website: https://whispersofthewillow.com

Privacy Policy – User FAQ

Q1: Do you collect personal data from visitors?
Only if you choose to contact us. We collect your name, email address, and message details to respond to your inquiry. Nothing else is automatically tracked or stored.

Q2: Do you use cookies, analytics, or tracking tools?
No. Our site does not use cookies, analytics software, tracking pixels, or profiling technologies.

Q3: Is my information shared with third parties?
Never. We do not sell, share, or rent your personal data. The only exceptions are legal obligations or with your explicit consent.

Q4: How long is my information stored?
Contact form messages are retained for up to 90 days. Relevant emails may be archived for up to 1 year for legal or administrative purposes.

Q5: Can I delete my data?
Yes. You have the right to request deletion of your data at any time. Just email us at: sales@whispersofthewillow.com

Q6: Is your policy GDPR-compliant?
Absolutely. We operate in the Netherlands and follow the GDPR strictly, along with relevant international privacy laws.

Q7: What if I’m located in another country like Canada or the US?
We respect global privacy rights and honour applicable laws such as CCPA (California), PIPEDA (Canada), and more. Your data rights are protected, regardless of where you live.

Final Legal Note:

This policy has been crafted to align with:

• GDPR (EU)
• CCPA (USA, where applicable)
• PIPEDA (Canada)
• International ethical standards for personal data protection