Privacy Policy

Elf Paper Co Privacy Policy

At Elf Paper Co, we want you to know that any personal information you share with us is in safe hands, and your data will never be sold on to other companies.

This Privacy Policy describes how your personal information is collected, used and shared when you visit and make a purchase from this site:

Caroline Denton is the data controller and is responsible for your personal data (referred to as “we”, “us” or “our” in this privacy notice).

What personal data we collect and why we collect it

Fulfilling your order

The information you manually provide to us when you make a purchase from our shop, fill out our contact form or sign up to our email newsletter. This information can be tied directly to you because it may contain your name, email address etc.

We use the order information that we collect generally to fulfil any orders placed through the site (including processing your payment information, processing your shipping information and providing invoices and/or order confirmations). Additionally, we use this order information to

– Communicate with you;

– Screen our orders for potential risk or fraud; and

– When in line with the preferences you have shared with us


When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: After approval of your comment, your profile picture is visible to the public in the context of your comment.


If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact forms

When you ask a question using our contact form, your information will only be used to reply to your question, you will not receive any marketing or offers from Elf Paper Co, unless you have signed up to our VIP email Newsletter.


“Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.

When you click on links on my site, they may direct you away from, I am not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

Who we share your data with and what third parties we receive data from

Information is collected and shared with our third party partners, otherwise known as the “data processors”. These partners are Google Analytics, Woocommerce, WordPress, Paypal, Stripe, Mail Chimp & Facebook. We have chosen to work with these companies because they are industry leaders in their fields.

The types of information collected here is gathered with the use of cookies, as referenced above and we only use it for things like improving the design of our website.

We use Paypal & Stripe (for credit card payments) so that we can securely take payments without storing your financial details on our website.

If you make a card payment with us at a market or craft fair, your payment will be processed with iZettle, their Privacy Policy can be accessed here

Sometimes we receive information from our third party partners that is linked directly to you. An example of this is when a customer pays for an order using Paypal, we do not receive any credit card information, this remains safely stored within Paypal, but we do receive the information we need to fulfil your order; your name & address.

In order to deliver your order we use the Royal Mail Postal Service, your delivery address will be shared with them to enable us to fulfil your order. You can read Royal Mails privacy policy here

We do not pass this information on to anybody else, and will only contact you with information about your order, for example to let you know your order has shipped. If you would like to access your data, remove your data and/or read the Privacy Policies of any of these third parties (Google Analytics, Woocommerce, WordPress, Paypal, Stripe, Mail Chimp & Facebook), please contact them directly.

By providing us with your data, you warrant to us that you are over 18 years of age

Email Newsletter

When you choose to sign up to my email list you will only ever receive emails from Elf Paper Co, and each email you receive will contain a very clear option to unsubscribe at the bottom. You can also email me at any time and I will delete your email address from my list.

As mentioned above, Elf Paper Co is using a secure third party partner – MailChimp, to store your email addresses, who happen to be a industry leader for email management. You can view their Privacy Policy here

If you have any problems with this please feel free to email us at and we will be happy to remove you from our email list. You’ll be missed, but we’ll act like grown-ups, I promise.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

I retain your personal information only for as long as necessary to provide you with my services and as described in my Privacy Policy.

However, I may also be required to retain this information to comply with my legal and regulatory obligations, like paying my taxes, to resolve disputes, and to enforce my agreements. I generally keep your data for the period of 6 years as is required of me by Her Majesty’s Revenue & Customs Service (HMRC).

What rights you have over your data

1. Access.

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. Please use the contact info below.

2. Change, restrict, delete.

You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes, for example paying my taxes.

3. Complain.

If you live in the UK or the EU and wish to raise a concern about our use of your information, you have the right to do so with your local data protection authority. We would be grateful if you contact us first if you do have a complaint so that we can try to resolve it for you.

Where we send your data

Visitor comments may be checked through an automated spam detection service.

Your contact information

It is very important that the information we hold about you is accurate and up to date. Please let us know if at any time your personal information changes by emailing us at

Industry regulatory disclosure requirements and how to contact me

For purposes of EU data protection law, I, Caroline Denton, am the data controller of your personal information. If you have any questions or concerns, you may contact me at

Alternatively you may mail me at my private residence, available upon request, Wiveliscombe, Somerset, U.K.