Privacy Policy

The Enchanted Hollow ("we," "us," "our") is a small business that designs and sells handcrafted 3D printed collectibles, fidget toys, and fantasy items. We operate the website theenchantedhollow.com. Questions about this policy can be sent to contact@theenchantedhollow.com.

Order information. When you place an order we collect your name, email address, shipping address, and order details. Payment card information is entered directly into Square's secure payment form and is never transmitted to or stored on our servers.

Account information. If you create an account we store your email address and any profile details you provide (display name). Passwords are managed by Supabase Auth and are never accessible to us in plaintext.

Newsletter sign-ups. If you subscribe to our email list we store your email address and the date of subscription.

Usage data. We collect anonymized analytics data (pages visited, traffic sources, purchase events) via Google Analytics 4, Meta Pixel, and TikTok Pixel. This data is subject to the privacy policies of those platforms.

Cookies. We use cookies for session management (Supabase Auth), analytics (GA4), ad attribution (Meta, TikTok), and cart persistence. You can decline non-essential cookies via our consent banner.

• To fulfill and ship your orders
• To send order confirmation and shipping notification emails (transactional)
• To send marketing emails if you have subscribed (you can unsubscribe at any time)
• To manage your account and loyalty points balance
• To improve our products and website via aggregated analytics
• To measure advertising effectiveness on TikTok, Meta, and Google

We do not sell your personal information to third parties.

We share data with the following service providers as necessary to operate our business:

• Square — payment processing (theenchantedhollow.com never stores card numbers)
• Supabase — database and authentication infrastructure
• Resend — transactional and marketing email delivery
• Vercel — website hosting and edge functions
• Google Analytics 4 — website traffic analytics
• Meta (Facebook/Instagram) — advertising measurement
• TikTok — advertising measurement

Each of these providers has their own privacy policy governing their data practices.

We retain order and account data for as long as your account is active or as needed for legal and tax compliance (typically 7 years). Newsletter subscriptions are retained until you unsubscribe. You may request deletion of your account data by contacting us.

You have the right to access, correct, or delete your personal data. To exercise these rights, email contact@theenchantedhollow.com. Newsletter subscribers may unsubscribe via the link in any marketing email. California residents have additional rights under the CCPA; contact us for details.

Our website is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have done so, please contact us immediately.

We may update this policy from time to time. Material changes will be noted at the top of this page with a revised date. Continued use of the site after changes constitutes acceptance of the updated policy.

Questions about this privacy policy? contact@theenchantedhollow.com