Skip to content

Curated gifts, delivered to your door

The WishlistThe Wishlist

Privacy policy

How The Wishlist handles your personal data when you shop at The Wishlist.

Who is responsible

The Wishlist is a trading name of Zonda Creative LLC, a Delaware limited liability company. Zonda Creative LLC is the data controller responsible for personal data collected through thewishlist.shop. Our legal postal address is: Zonda Creative LLC 1111B Governors Ave Ste 37778 Dover, DE 19904 United States You can contact us through our contact form.

What we collect

  • Order data: name, email, delivery address, phone number and order contents.
  • Customs identifiers where a destination country requires one (for example CPF or RUT), used solely for the customs declaration.
  • Payment confirmation data from our payment provider - never your full card number.
  • Messages you send us through the contact form.
  • Basic technical data needed to serve and secure the site.

Why we use it

To take and fulfil your order and provide support (performance of our contract with you); to meet tax, accounting, customs and product-safety obligations (legal obligation); and to keep the site secure and prevent fraud (our legitimate interests). We do not sell your personal data, and we do not send marketing email unless you ask us to.

Who we share it with

We disclose only the personal information reasonably necessary to service providers and other recipients involved in operating The Wishlist, processing payments, fulfilling orders, complying with legal obligations and delivering purchases. Depending on their role and applicable law, these recipients may act as service providers or processors acting on our instructions, or as independent controllers responsible for certain processing they carry out. They may include:

  • Hosting and database providers - providers that host our website, application infrastructure and order information.
  • Payment processing - Stripe processes payment and transaction information to provide payment services to us and may also process certain information for its own regulatory, security, fraud-prevention and service purposes, as described in Stripe's privacy documentation. The Wishlist does not receive or store your full card number or card security code.
  • Fulfilment partners and suppliers - information reasonably necessary to fulfil an order, such as your name, delivery address, phone number, products ordered and relevant shipping instructions, may be provided to the third parties responsible for preparing and dispatching your purchase.
  • Carriers and logistics providers - delivery information is provided to postal, courier, freight and logistics companies where necessary to transport and deliver your order.
  • Customs and regulatory authorities - information may be provided where necessary for customs clearance, import requirements, taxation, product-safety obligations or other legal requirements.
  • Professional and legal service providers - where reasonably necessary for accounting, legal, compliance, fraud-prevention or similar business purposes.

Because our suppliers, fulfilment partners, service providers and carriers operate internationally, personal data may be processed outside your country, including outside the EEA or UK. Where data-protection law restricts an international transfer, we use an applicable lawful transfer mechanism or safeguard where required, such as an adequacy decision or approved contractual safeguards.

Cookies and similar technology

The Wishlist does not currently use advertising or cross-site behavioural advertising cookies. We use technologies necessary to operate the website and remember essential choices, such as your shopping cart and selected delivery destination. Our payment provider may use payment, authentication, security and fraud-prevention technologies when you use checkout, subject to its own privacy documentation. If we introduce analytics, advertising or other non-essential tracking technologies in the future, we will update this policy and obtain consent where required.

How long we keep it

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, accounting, tax, fraud-prevention and dispute-resolution requirements. Order and transaction records may be retained for the period required by applicable tax and accounting laws, which may commonly range from approximately 6 to 10 years depending on the relevant jurisdiction. Contact and customer-support messages are generally retained for up to 24 months unless a longer period is reasonably necessary in connection with an order, dispute or legal obligation. Customs identifiers and other identification information required for a particular shipment are collected only where necessary. Access to this information is restricted, and it is retained only for as long as reasonably necessary for customs clearance, order support and applicable legal requirements. When personal data is no longer required, we delete or anonymise it where appropriate.

Your rights

Depending on where you live and the laws that apply to you, you may have rights relating to your personal data, including rights to access, correct or delete your information, restrict or object to certain processing, receive a portable copy of your information, or withdraw consent where processing is based on consent. You may contact us to exercise an applicable privacy right. We will respond within the period required by applicable law. For example, requests made under EU or UK data-protection law are generally handled within one month, subject to any extension permitted by law. We may need to verify your identity before completing certain requests. Where applicable, you may also have the right to complain to the data-protection or privacy authority responsible for your jurisdiction.

Children

We sell products for babies and children, but our shop is intended for adults. We do not knowingly collect personal data from children.

Changes

We may update this Privacy Policy where our services, legal obligations or data-processing practices change. The current version will always be published on this page. If you have questions about this Privacy Policy or how we handle your personal information, contact us through our contact form.