Privacy Policy 🔒

Welcome to Pencil Paradise ("we", "us", or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and make purchases.

By using our website, you agree to the collection and use of information in accordance with this policy. If you disagree with its terms, please discontinue use of our site.

Personal information you provide directly:

• Name and email address when creating an account
• Phone number (optional, for your profile)
• Profile photo (stored locally on your device, never uploaded to a server)
• Shipping and billing address during checkout (collected by Stripe)
• Payment information (processed entirely by Stripe — we never see or store card numbers)

Information stored automatically on your device:

• Shopping cart contents and quantities
• Saved favorite products
• Authentication session (login state)
• Recent order IDs (for the order tracking page)

We use the information we collect to:

• Process and fulfill orders — send your purchase to the right address
• Customer support — respond to questions and resolve order issues
• Account management — remember your preferences, cart, and favorites
• Improve our service — understand how visitors use the site
• Send communications — order confirmations and shipping updates (only relevant transactional emails)
• Fraud prevention — detect and prevent fraudulent transactions
• Legal compliance — meet our legal obligations under applicable law

We do not use your information for unsolicited marketing without explicit consent.

Pencil Paradise uses your browser's localStorage rather than traditional cookies to store session data. This means:

• All account data, cart items, favorites, and profile photos are stored only on your device
• This data is never transmitted to our servers unless you initiate a checkout
• Data persists until you clear your browser storage or delete your account via Settings

The following keys are written to localStorage:

• pp_session — active login session
• pp_users — registered account data
• pp_cart — shopping cart contents
• pp_favorites — saved product IDs
• pp_recent_orders — recent Stripe session IDs for order tracking

Third-party services (Stripe, Font Awesome CDN) may set their own cookies for functionality purposes.

We use the following third-party services that may process your data:

• Stripe — handles all payment processing. Card details are entered directly on Stripe's secure servers and are never accessible to us. See Stripe's Privacy Policy ↗.
• Font Awesome — icon fonts loaded from their CDN (cdnjs.cloudflare.com). Cloudflare may log your IP address.
• Google Fonts — typography assets loaded from Google's servers when applicable.

We do not sell, trade, or rent your personal information to third parties for marketing or advertising purposes.

Depending on your location (particularly EU/GDPR), you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data via Settings → Profile
• Erasure ("right to be forgotten") — delete your account via Settings → Danger Zone → Delete Account
• Data portability — receive your data in a portable format upon request
• Restriction of processing — request we limit use of your data
• Object to processing — opt out of certain data uses
• Withdraw consent — at any time for consent-based processing

For EU residents, these rights are provided under the General Data Protection Regulation (GDPR). For California residents, see the California Consumer Privacy Act (CCPA).

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Specific measures include:

• Passwords are encoded before being stored in localStorage (and never transmitted in plaintext)
• All payment processing is handled by Stripe, which is PCI-DSS Level 1 compliant
• Profile photos are stored as Base64 data in localStorage and never transmitted to external servers
• HTTPS is used for all connections to payment endpoints

No method of transmission over the Internet or electronic storage is 100% secure, however, and we cannot guarantee absolute security.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out:

• 📧 Email: contact@pencilparadise.store
• 📮 Address: Pencil Paradise, 123 Creative Lane, Brussels 1000, Belgium
• 📞 Phone: +32 2 123 45 67

We will respond to all privacy-related requests within 30 days of receipt. For urgent matters related to data breaches, we aim to respond within 72 hours.

You also have the right to lodge a complaint with your local data protection authority — in Belgium, that is the Data Protection Authority (APD/GBA) ↗.