Privacy Policy - Woolmandu

Last Updated: June 22, 2026

Welcome to Woolmandu (“we,” “our,” or “us”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://woolmandu.com ( the “Site”) and make a purchase.

This policy applies to all global visitors and customers, including those residing in the United States, Canada, the United Kingdom, the European Union, Australia, New Zealand, and Nepal.

1. Important Information and Who We Are

Data Controller

For the purposes of the General Data Protection Regulation (GDPR) and UK GDPR, Woolmandu is the “Data Controller” of your personal data.

Contact Details

If you have any questions about this Privacy Policy, your rights, or our data practices, please contact us at:

Brand Name: Woolmandu
Email Address: [email protected]
Mailing Address: Bijlmerplein 885 B2, 1102MG Amsterdam, Netherlands

2. The Data We Collect About You

We may collect, use, store, and transfer different kinds of personal data about you, grouped as follows:

Identity Data: First name, last name, username, or similar identifier.
Contact Data: Billing address, delivery address, email address, and telephone numbers.
Financial Data: Payment card details, bank account details, or mobile wallet identifiers. (Note: Payment details are processed directly by our secure third-party payment processors; we do not store raw credit card numbers or wallet credentials on our servers).
Transaction Data: Details about payments to and from you and other details of products you have purchased from us.
Technical Data: Internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types, operating system, and platform.
Usage Data: Information about how you use our website, products, and services.
Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.

3. How We Collect Your Data

We use different methods to collect data from and about you, including:

Direct Interactions: You give us your Identity, Contact, and Financial Data by filling in forms, creating an account, or placing an order on our Site.
Automated Technologies: As you interact with our Site, we automatically collect Technical Data about your equipment, browsing actions, and patterns via cookies and server logs.
Third Parties: We receive data from analytics providers (like Google Analytics), ad networks, and payment processors.

4. Legal Basis for Processing (EU & UK Residents Only)

Under the GDPR, we only process your personal data when we have a lawful basis to do so. Most commonly, we rely on the following bases:

Purpose/Activity	Type of Data	Lawful Basis for Processing
To register you as a new customer	Identity & Contact	Performance of a contract with you
To process and deliver your order, manage payments, and collect fees	Identity, Contact, Financial, Transaction	Performance of a contract with you; Necessary for our legitimate interests
To manage our relationship with you (notifying you of changes to terms or policies)	Identity, Contact, Profile, Marketing	Performance of a contract; Necessary to comply with a legal obligation
To administer and protect our business and Site (troubleshooting, data analysis)	Identity, Contact, Technical	Necessary for our legitimate interests (running our business, IT security)
To deliver relevant website content and advertisements to you	Identity, Contact, Usage, Marketing, Technical	Necessary for our legitimate interests (growing our business); Consent where required by law

5. How We Use Your Data

We use your data to process orders, manage your account, deliver customer support, comply with legal obligations, and—where you have explicitly consented—send you promotional offers about our handmade woolen products.

You can opt out of marketing communications at any time by clicking the “unsubscribe” link in any email we send.

6. Disclosures and International Transfers

Third-Party Service Providers

We share your personal data with trusted third parties who help us run our business and fulfill your orders, including:

Our e-commerce store platform infrastructure.
Payment gateways and processors (Stripe, PayPal, Apple Pay, Google Pay, Klarna, Fonepay, Khalti, and eSewa).
Shipping and courier companies used to fulfill your delivery.
Marketing and analytics tools (like Google Analytics).

We require all third parties to respect the security of your personal data and treat it in accordance with the law.

International Data Transfers

Because Woolmandu operates globally (with presence and infrastructure spanning the Netherlands and Nepal), your data will be transferred and stored across international borders.

For EU and UK residents, whenever your data is transferred outside the European Economic Area (EEA) or the UK, we ensure a similar degree of protection is afforded to it by implementing Standard Contractual Clauses (SCCs) approved by the European Commission and the UK Information Commissioner’s Office (ICO).

7. Cookies and Tracking

Our website uses cookies to enhance your browsing experience, remember your cart items, and analyze our traffic.

Essential Cookies: Required for the basic functioning of the store.
Analytics/Marketing Cookies: Used to understand user behavior and show relevant ads.

For Users in the EU, UK, and Australia: We utilize a cookie consent banner. Non-essential cookies will not be placed on your device unless you explicitly click “Accept.” You can modify your cookie preferences through your browser settings at any time.

8. Data Security and Retention

Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. All payment transactions are encrypted using Secure Sockets Layer (SSL) technology.

Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements (usually up to 7 years post-transaction for financial and tax audits).

9. Your Regional Legal Rights

Depending on where you live, you have specific rights regarding your personal data:

A. European Union & United Kingdom (GDPR / UK GDPR)

You have the right to:

Access a copy of the personal data we hold about you.
Rectify (correct) inaccurate or incomplete data.
Erasure (the “Right to be Forgotten”)—request that we delete your data.
Restrict or Object to the processing of your data.
Data Portability—request the transfer of your data to another party.
Withdraw Consent at any time where we rely on consent to process your data.

B. United States (CCPA/CPRA & State Laws)

If you are a resident of California (or states with similar comprehensive privacy laws), you have the right to request:

What personal information we collected, used, and disclosed over the past 12 months.
The deletion of your personal data.
That we do not “sell” or “share” your personal data for targeted advertising. (You can opt out via our cookie banner).

C. Australia & New Zealand (Privacy Act 1988)

You have the right to access the personal information we hold about you and ask for corrections if it is inaccurate. If you believe we have breached the Australian Privacy Principles, you have the right to lodge a complaint with us directly via the contact information above.

D. Canada (PIPEDA)

You have the right to look at the personal data we have about you and challenge its accuracy. You may withdraw consent to data processing at any time.

10. How to Exercise Your Rights

To exercise any of these rights (such as asking for your data to be deleted), please email us at [email protected] with the subject line “Privacy Request.” We respond to all legitimate requests within 30 days.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our legal obligations or business operations. Any updates will be published on this page with an updated “Last Updated” date.