Privacy policy
PRIVACY POLICY
Last updated: 14 August 2026
EverWonder Post operates this online store and website, including its content, features, products, purchase options and related services (the “Services”).
Our store is hosted by Shopify, which provides the e-commerce platform that enables us to offer our Services.
This Privacy Policy explains how EverWonder Post collects, uses, stores and shares personal information when you visit our website, create an account, place an order, purchase or manage a subscription, communicate with us or otherwise interact with the Services.
For the purposes of applicable data-protection laws, EverWonder Post is the controller of the personal information described in this policy, except where another provider acts independently as a controller.
Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read and understood the practices described below.
PERSONAL INFORMATION WE COLLECT
“Personal information” means information that identifies you or can reasonably be linked to you or another identifiable person. It does not include information that has been irreversibly anonymised.
Depending on how you interact with the Services, we may collect or process the following categories of personal information:
CONTACT INFORMATION
This may include:
• Your name
• Email address
• Telephone number, if provided
• Billing address
• Shipping address
• Country or region
ACCOUNT INFORMATION
This may include:
• Username or email address
• Encrypted password or account credentials
• Account preferences and settings
• Subscription or purchase-option status
We do not have access to your password in readable form.
ORDER AND TRANSACTION INFORMATION
This may include:
• Products viewed, added to the cart or purchased
• Order number and order history
• Subscription or prepaid-plan selection
• Renewal, cancellation and fulfilment information
• Currency and transaction amount
• Payment status and confirmation
• Shipping and delivery information
• Customer-support history
PAYMENT INFORMATION
Payments are processed by Shopify Payments or another payment provider selected at checkout.
Payment providers may collect card numbers, bank information, billing details and fraud-prevention information. EverWonder Post generally does not receive or store complete payment-card numbers or card security codes.
PERSONALISATION INFORMATION
To prepare a personalised EverWonder Post delivery, we may collect:
• The recipient’s first name
• The recipient family’s surname
• Whether the order is for one child or a family
• The selected language
• A mailbox or doorbell name, when optionally provided
• Other limited personalisation information voluntarily supplied by the adult purchaser and reasonably necessary to complete the order
Please do not provide unnecessary information about a child, including a full date of birth, photograph, health information, school information or other sensitive personal information.
COMMUNICATIONS
We collect information included in messages you send to us, such as:
• Customer-support enquiries
• Requests to correct personalisation or delivery information
• Cancellation requests
• Privacy requests
• Reviews, feedback or complaints
DEVICE AND TECHNICAL INFORMATION
When you use the website, Shopify and other authorised service providers may automatically collect:
• IP address
• Browser type
• Device type
• Operating system
• Network information
• Cookie identifiers
• Approximate location derived from an IP address
• Information about how and when you navigate or interact with the website
MARKETING AND PREFERENCE INFORMATION
This may include:
• Whether you subscribed to marketing communications
• Email communication preferences
• Products or pages that may interest you
• Advertising and cookie preferences
• Whether you opted out of targeted advertising or data sharing where applicable
SOURCES OF PERSONAL INFORMATION
We may collect personal information:
• Directly from you when you browse the website, create an account, place an order, enter personalisation information or contact us
• From the adult purchaser who provides authorised information about a child, family or gift recipient
• Automatically from your browser or device through cookies and similar technologies
• From Shopify and service providers that operate parts of the website, checkout, payment, personalisation, subscription, email or fulfilment process
• From payment providers and fraud-prevention services
• From advertising, analytics or business partners where permitted by law
HOW WE USE PERSONAL INFORMATION
PROVIDING AND PERSONALISING THE SERVICES
We may use personal information to:
• Operate and maintain the website
• Create and manage customer accounts
• Process payments and transactions
• Administer Monthly Memberships and Christmas Season Passes
• Prepare and personalise letters, story chapters, postcards, newspapers, puzzles, keepsakes and related materials
• Print the recipient’s name or family name on relevant materials
• Fulfil, package and dispatch orders
• Send order, payment, renewal, cancellation and delivery communications
• Provide customer support
• Correct customer, personalisation or address information
• Manage returns, replacements, complaints or disputes
• Remember customer preferences
• Improve the Services and customer experience
We use a child recipient’s name or other personalisation information only where reasonably necessary to prepare and fulfil the personalised experience, maintain essential fulfilment records, provide customer support and comply with legal obligations.
We do not use a child recipient’s personalisation information to market independently to the child or for behavioural advertising directed at the child.
MONTHLY MEMBERSHIPS AND PURCHASE OPTIONS
When you select a Monthly Membership, we use your information to:
• Process recurring payments
• Create and fulfil monthly orders
• Send renewal and account communications
• Manage future cancellations
• Maintain subscription records
When you select a Christmas Season Pass, we use your information to:
• Process the one-time prepaid purchase
• Schedule and fulfil the four included deliveries
• Maintain the fulfilment status of each chapter
COMMUNICATIONS
We may use your information to:
• Respond to enquiries and requests
• Provide important information about an order or account
• Notify you about payments, renewals, fulfilment or policy changes
• Send service-related messages necessary to perform our contract with you
Service-related messages are not marketing communications and may continue even if you unsubscribe from promotional emails.
MARKETING AND ADVERTISING
Where permitted by applicable law, we may use adult customer information to:
• Send promotional emails
• Inform customers about new EverWonder themes or offers
• Measure the effectiveness of marketing
• Display or support advertising based on website activity
Where consent is required, we will use personal information for electronic marketing or non-essential cookies only after obtaining the appropriate consent.
You may unsubscribe from promotional emails at any time using the unsubscribe link in the message. Unsubscribing from marketing does not stop necessary order, account or subscription communications.
SECURITY AND FRAUD PREVENTION
We may process personal information to:
• Authenticate accounts
• Protect transactions
• Detect and prevent fraud, abuse or malicious activity
• Investigate suspicious orders or chargebacks
• Protect the website, customers and business
• Enforce our Terms of Service and policies
LEGAL AND REGULATORY PURPOSES
We may process information to:
• Comply with applicable law
• Maintain tax, accounting and transaction records
• Respond to lawful requests from courts, authorities or law enforcement
• Establish, exercise or defend legal claims
• Resolve disputes
• Protect our rights and the rights of customers or other persons
LEGAL BASES FOR PROCESSING
Where applicable law requires us to identify a legal basis, we rely on one or more of the following:
PERFORMANCE OF A CONTRACT
We process information where necessary to accept, personalise, fulfil and manage an order, membership or prepaid purchase.
LEGAL OBLIGATION
We process and retain certain information where required for tax, accounting, consumer-protection, fraud-prevention or other legal purposes.
LEGITIMATE INTERESTS
We may process information where reasonably necessary to operate and secure the business, improve the Services, prevent fraud, provide customer support and understand website performance, provided those interests are not overridden by the individual’s rights.
CONSENT
We rely on consent where required, including for certain marketing communications, cookies and advertising technologies. Consent may be withdrawn at any time, without affecting processing that occurred before withdrawal.
PROTECTION OF LEGAL RIGHTS
We may process information where necessary to establish, exercise or defend legal claims.
HOW WE SHARE PERSONAL INFORMATION
We may share personal information only where reasonably necessary for legitimate business or legal purposes, including with:
SHOPIFY
Shopify hosts the website, checkout and customer-account infrastructure and processes information necessary to provide and improve its services.
Information submitted through the website may be transmitted to Shopify and processed in countries other than your country of residence.
More information is available in the Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/app-users
Shopify privacy requests may also be submitted through:
PAYMENT PROVIDERS
Payment providers process transactions, confirm payments, prevent fraud and manage chargebacks or refunds.
PERSONALISATION AND SUBSCRIPTION PROVIDERS
We may use authorised applications and service providers to collect order options, store personalisation selections, administer memberships, schedule recurring payments and support fulfilment.
These providers receive only the information reasonably necessary to perform their services.
EMAIL, TECHNOLOGY AND SUPPORT PROVIDERS
We may use service providers for:
• Email delivery
• Website operation
• Cloud storage
• Data security
• Analytics
• Customer support
• Technical maintenance
POSTAL AND FULFILMENT PROVIDERS
We may share the recipient’s name and delivery address with postal, shipping, customs or fulfilment providers where necessary to deliver an order.
BUSINESS AND PROFESSIONAL ADVISERS
Information may be shared with accountants, legal advisers, insurers, auditors or other professional advisers where reasonably necessary.
BUSINESS TRANSACTIONS
Information may be disclosed in connection with a proposed or completed business sale, restructuring, merger, financing, insolvency or transfer of assets, subject to appropriate safeguards.
LEGAL DISCLOSURES
We may disclose information where required by law, legal process or a valid authority request, or where reasonably necessary to protect rights, safety, property or prevent fraud.
AT YOUR DIRECTION
We may share information when you expressly request, direct or consent to the disclosure.
We do not sell a child recipient’s personalisation information.
TARGETED ADVERTISING AND DATA-SHARING CHOICES
Shopify and authorised advertising or analytics providers may process adult customer device, usage and shopping information to measure advertising or provide personalised advertising, subject to applicable law and customer consent choices.
Depending on where you reside, you may have the right to opt out of processing considered a “sale”, “sharing” or targeted advertising under applicable law.
You may submit an opt-out request here:
https://everwonderpost.com/pages/data-sharing-opt-out
Where required, we will also recognise a valid Global Privacy Control signal for the browser or device sending the signal.
COOKIES AND SIMILAR TECHNOLOGIES
Our website and Shopify may use cookies, pixels, local storage and similar technologies to:
• Operate the website and checkout
• Keep accounts secure
• Remember preferences
• Analyse website performance
• Understand customer interactions
• Prevent fraud
• Support marketing and advertising where permitted
Some cookies are strictly necessary for the website to function. Other cookies may require consent depending on your location.
You can manage available cookie choices through the website’s privacy or cookie controls and through your browser settings. Blocking necessary cookies may affect website or checkout functionality.
RELATIONSHIP WITH SHOPIFY
The Services are hosted by Shopify.
Shopify collects and processes information about access to and use of the Services to provide, secure and improve its platform. Shopify may also process information from interactions with this store, other merchants and Shopify services in connection with its enhanced features.
In certain circumstances, Shopify acts independently as a controller and is responsible for responding to requests concerning its own processing.
For more information, visit:
https://www.shopify.com/legal/privacy/app-users
CHILDREN’S DATA AND PERSONALISED ORDERS
Our website, customer accounts and purchasing services are intended for adults and are not directed to children.
EverWonder Post creates personalised physical mail experiences that may be addressed to children. An adult purchaser may therefore provide limited information about a child or family, such as a first name, family name, selected language and, where optionally provided, a mailbox or doorbell name.
By providing information relating to a child, the purchaser confirms that they are the child’s parent, legal guardian or another adult authorised to provide the information and arrange the delivery.
We ask customers not to provide unnecessary information about a child, including dates of birth, photographs, health information, school information or other sensitive personal information.
We use recipient personalisation information only where reasonably necessary to:
• Prepare and personalise the purchased product
• Print the recipient’s name or family name on relevant materials
• Fulfil and deliver the order
• Provide customer support
• Maintain necessary transaction and fulfilment records
• Comply with applicable legal obligations
We do not knowingly sell a child’s personal information or use a child recipient’s personalisation information for behavioural advertising.
An authorised adult may contact us to request access, correction or deletion of a child’s personalisation information.
Certain information may need to be retained where necessary to complete an active order, fulfil a membership or Season Pass, comply with legal obligations, prevent fraud or resolve a dispute.
If we learn that a child has directly submitted personal information through our website without appropriate adult involvement, we will take reasonable steps to delete it.
DATA RETENTION
We retain personal information only for as long as reasonably necessary for the purposes described in this policy.
Retention periods depend on factors including:
• Whether an account remains active
• Whether an order, membership or Season Pass still requires fulfilment
• Customer-support and dispute-resolution needs
• Fraud-prevention and security requirements
• Applicable accounting, tax, contractual and legal obligations
• The establishment, exercise or defence of legal claims
Personalisation information will not be retained longer than reasonably necessary for fulfilment, customer support, record-keeping and legal purposes.
When information is no longer required, we will delete, anonymise or securely isolate it, subject to technical and legal limitations.
DATA SECURITY
We use reasonable administrative, organisational and technical safeguards designed to protect personal information.
However, no security system or method of internet transmission is completely secure. We cannot guarantee absolute security.
Customers are responsible for keeping their account credentials confidential and should contact us if they believe their account or information has been compromised.
Do not send sensitive or confidential information through unsecured communication channels.
INTERNATIONAL DATA TRANSFERS
EverWonder Post is based in Switzerland and may use service providers located in other countries.
Personal information may therefore be transferred, stored or processed outside your country of residence.
Where required, international transfers will be protected through recognised safeguards, which may include:
• Adequacy decisions
• Standard Contractual Clauses
• Equivalent contractual safeguards
• Other transfer mechanisms permitted by applicable law
THIRD-PARTY WEBSITES
The Services may contain links to websites or platforms operated independently by third parties.
We are not responsible for the privacy, security, availability or content of third-party websites. You should review their privacy policies before providing information to them.
YOUR PRIVACY RIGHTS
Depending on your location and subject to applicable exceptions, you may have the right to:
ACCESS
Request confirmation of whether we process your personal information and receive a copy of that information.
CORRECTION
Request correction of inaccurate or incomplete personal information.
DELETION
Request deletion of personal information where we no longer have a lawful reason to retain it.
RESTRICTION
Request that certain processing be limited.
OBJECTION
Object to processing based on legitimate interests or to direct marketing.
DATA PORTABILITY
Request certain information in a structured, commonly used and machine-readable format where applicable.
WITHDRAWAL OF CONSENT
Withdraw consent where processing is based on consent. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
OPT OUT OF TARGETED ADVERTISING OR DATA SHARING
Where available under applicable law, opt out of processing considered targeted advertising, sale or sharing.
COMPLAINT
Submit a complaint to the competent data-protection authority.
These rights are not absolute. We may need to retain or continue processing information where permitted or required by law.
EXERCISING YOUR RIGHTS
To exercise a privacy right, contact:
Please describe your request clearly.
We may need to verify your identity or authority before responding. Where permitted by law, an authorised representative may submit a request on your behalf, but we may require evidence of their authority.
We will respond within the period required by applicable law and will not discriminate against you for exercising your privacy rights.
MARKETING PREFERENCES
You may unsubscribe from promotional emails at any time by using the unsubscribe link included in the message or contacting us.
Even after unsubscribing, you may continue to receive non-promotional communications relating to:
• Orders
• Payments
• Membership renewals or cancellations
• Account security
• Fulfilment
• Customer-support requests
• Important legal or policy notices
COMPLAINTS
If you have a concern about how EverWonder Post processes personal information, please contact us first at:
Depending on your location, you may also have the right to lodge a complaint with your local data-protection authority.
Residents of Switzerland may contact the Federal Data Protection and Information Commissioner.
Residents of the European Economic Area may find their relevant supervisory authority through the European Data Protection Board:
https://edpb.europa.eu/about-edpb/about-edpb/members
CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy to reflect changes in our products, technology, service providers, business practices or legal obligations.
We will publish the updated policy on this page and revise the “Last updated” date. Where required by law, we will provide additional notice of material changes.
CONTACT
For questions about this Privacy Policy, our privacy practices or your personal information, contact:
EverWonder Post
Email: hello@everwonderpost.com
Our legal identity and business contact address are available in the Contact Information section linked in the website and checkout footer.
For the purposes of applicable data-protection laws, EverWonder Post is the controller of the personal information described in this policy.