Privacy Policy

Who we are

The Whimsical Widgets website is owned and operated by Whimsical Widgets, LLC. Our website address is: https://www.whimsicalwidgets.com.

What personal data we collect and why we collect it

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service Privacy Policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact forms

We use WPForms on our Contact page; however, we do not use WPForms entry backup, so no data is stored on their services. The provided email address will only be use by our team to contact you about your inquiry or comment.

Cookies

If you leave a comment on our site you may opt in to saving your name, email address, and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

Embedded content from other websites

We do not use content directly embedded from other websites. YouTube videos that run directly on our website are sourced using Google’s YouTube API so that we can prevent any tracking or ads by Google. However, if you follow the link to visit our YouTube channel, a separate browser window will open for YouTube which is governed by Google’s own policies.

Analytics

We do not use any trackers or ads on our website. However, our YouTube channel is on a platform owned and operated by Google which is governed by their policies.

Who we share your data with

Visitor comments may be checked through an automated spam protection service provided by Askimet. The comment form on our contact page is protected by Cloudflare’s Turnstile service.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

What rights you have over your data

If you have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

Visitor comments may be checked through an automated spam detection service provided by Askimet. The comment form on our contact page is protected by Cloudflare’s Turnstile service.

Your contact information

Your contact information will only be used to reply to a direct inquiry or comment. We will never use your contact information to send any unsolicited emails or offers.

Additional information

How we protect your data

Our website is protected by Cloudflare’s services and we use multi-factor authentication to ensure that only authorized administrators can access the website. Administrator activities are logged. Data that is downloaded from our website uses encrypted storage and offsite backups are also on encrypted storage not accessible by any third parties. All encrypted volumes use private encryption keys known only to us. Local computer systems used by our team require hardware-based security keys for multi-factor authentication and all storage volumes are encrypted to protect against physical theft.

What third parties we receive data from

None.

What automated decision making and/or profiling we do with user data

None.