Last updated: July 15, 2026
Wonder Bridal Atelier, based in Valencia, Spain, is the controller for personal information collected directly through this website. This policy explains what we collect, why we use it, who may receive it, how long it is kept, and the privacy choices available to you.
If you purchase through Etsy or another marketplace, that platform processes checkout and marketplace information under its own privacy policy and terms.
Information we collect
We collect information you choose to provide, such as your name, email address, account details, delivery address, order information, messages, measurements, customisation notes, and any photos or files you send for a bridal request.
When you use the website, limited technical information may also be processed, including IP address, browser and device information, pages requested, login and security events, and the strictly necessary cookies or browser storage used to run accounts, carts and checkout.
How and why we use information
We use personal information to answer enquiries, provide bridal guidance, create and manage accounts, process and deliver orders, provide customer service, prevent fraud, protect the website, and keep records required by law.
For people in the European Economic Area, the legal basis depends on the activity: steps requested before entering into a contract and performance of a contract for enquiries and orders; legal obligations for tax and required business records; legitimate interests for website security, fraud prevention and service administration; and consent where we specifically ask for it.
Accounts, comments and public information
Your account email, password credentials and delivery information are not displayed publicly. The display name you choose and any avatar you upload may appear beside a blog comment. Do not use your email address as a display name or upload a sensitive image as an avatar.
Payments, delivery and service providers
Website card payments and supported wallet payments are processed through WooPayments and Stripe. We do not receive or store your full card number. Payment providers may process payment, device and fraud-prevention information under their own privacy terms. Delivery details may be shared with the carrier selected for your order. If you buy through Etsy, Etsy processes the marketplace order and payment.
We also use service providers where needed for hosting, security, email, website maintenance, payment and delivery. They receive only the information needed to provide the relevant service or comply with law. Our website is hosted by Hostinger.
International processing
Some providers may process information outside your country or outside the European Economic Area. Where European data-protection law requires it, transfers must rely on an adequacy decision, approved contractual safeguards, or another lawful transfer mechanism.
Cookies and similar technologies
The website currently uses only technologies needed for core functions such as sign-in, account security, the shopping cart, checkout, payment security and interface preferences. Advertising pixels and optional analytics cookies are not active. See our Cookie Policy for the current list and durations.
Sharing and sale of information
We do not sell personal information. We disclose information only when needed to operate the website, complete an order, provide customer service, work with necessary service providers, comply with law, or protect users and our legal rights.
Data retention
Account information is generally kept while the account remains active or until deletion is requested, subject to records we must retain. Order, tax, customer-service, dispute, fraud-prevention and security records are kept only for the period reasonably necessary for their purpose and applicable legal requirements, then deleted or anonymised where appropriate.
Your privacy rights
Depending on the law that applies, you may request access, correction, deletion, restriction, portability, or object to certain processing. Where processing is based on consent, you may withdraw consent without affecting processing that was lawful before withdrawal.
European residents may lodge a complaint with their local supervisory authority. In Spain, the supervisory authority is the Spanish Data Protection Agency (AEPD).
Security
We use reasonable technical and organisational safeguards appropriate to the information involved. No website, email, or online service can be guaranteed to be completely secure.
Contact and privacy requests
To ask a privacy question or exercise an applicable right, use our Contact page. We may need to verify that a request relates to you before providing, correcting, or deleting account information.