top of page

Privacy Policy

Effective Date: August 31, 2025
Last Updated: August 31, 2025

At Tale House (www.tale-house.com), we value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website, make a purchase, or interact with our services. This policy complies with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

1. Who We Are

Tale House is an online store selling curated antiques and paintings, operated by Victoria Henderson as an individual. Our contact details are:​

For privacy-related inquiries, please contact us at hello@tale-house.com.

2. Information We Collect

We collect personal information to operate our online store and fulfill your orders. The types of data we collect include:

a. Information You Provide

  • Order Information: When you make a purchase, we collect your name, billing address, shipping address, email address, phone number, and payment details (processed securely by third-party payment processors).

  • Account Information: If you create an account on our website, we collect your name, email address, and password.

  • Communications: If you contact us (e.g., via Wix Chat or email), we collect your name, email address, and any information you provide in the communication.
     

b. Information Collected Automatically

  • Website Usage Data: We collect data about your interactions with our site, such as your IP address, browser type, device information, pages visited, and timestamps, using cookies and similar technologies (e.g., via Wix Analytics, Google Analytics, Microsoft Clarity, and Google Ads).

  • Cookies and Tracking Technologies: Our website uses essential, functional, and analytics cookies to ensure site functionality, analyze performance, and serve relevant advertisements. We display a cookie consent banner to comply with GDPR requirements, allowing you to manage your cookie preferences.
     

c. No Data from Minors

We do not knowingly collect personal information from children under 16. Our services are not directed to minors, and we request that minors do not provide personal data through our website.
 

3. How We Use Your Information

We use your personal information for the following purposes:

  • Order Fulfillment: To process and ship your orders (via Shippo), communicate order updates, and manage returns or refunds.

  • Website Improvement: To analyze website usage and improve functionality and user experience (via Wix Analytics, Google Analytics, and Microsoft Clarity).

  • Advertising: To serve relevant ads through Google Ads based on your browsing behavior.

  • Customer Support: To respond to your inquiries or provide assistance via Wix Chat or email.

  • Legal Compliance: To comply with legal obligations, such as tax reporting or responding to data protection requests.
     

We do not send marketing emails or spam. Your data is used solely for order fulfillment, website functionality, and analytics unless you explicitly consent to other uses via our cookie banner.
 

4. Legal Basis for Processing (UK GDPR and GDPR)

For users in the UK and EU, we process your data based on the following legal grounds:

  • Contractual Necessity: To fulfill your orders and provide our services (e.g., processing payments and shipping).

  • Legitimate Interests: To improve our website, analyze usage, and serve relevant ads (where you have not opted out via the cookie banner).

  • Consent: For non-essential cookies and tracking (via our cookie consent banner).

  • Legal Obligation: To comply with applicable laws, such as tax or data protection regulations.
     

5. Sharing Your Information

We share your personal information only with trusted third parties necessary to operate our business:

  • Shipping Providers: Shippo, to generate shipping labels and manage deliveries to the UK, Europe, Japan, Singapore, and other destinations.

  • Payment Processors: PayPal, Stripe, and Klarna, to securely process your payments. These providers handle payment details directly and do not share them with us.

  • Analytics and Advertising Providers: Google Analytics, Microsoft Clarity, and Google Ads, to analyze website performance and serve targeted ads.

  • Website Host: Wix, which hosts our website and processes data through its infrastructure, which may involve servers outside the UK (e.g., in the US).
     

We ensure that third parties comply with applicable data protection laws and use appropriate safeguards (e.g., Standard Contractual Clauses for international data transfers). We do not sell your personal information to third parties.
 

6. International Data Transfers

As a UK-based business, we primarily process data in accordance with UK GDPR. However, because we use Wix and other third-party services, your data may be transferred to and stored in countries outside the UK or EEA, such as the United States. We rely on Wix’s infrastructure and third-party providers’ compliance mechanisms (e.g., Standard Contractual Clauses or adequacy decisions) to ensure these transfers meet UK GDPR and GDPR requirements. For more details, see Wix’s Privacy Policy (https://www.wix.com/about/privacy).
 

7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your experience, analyze performance, and deliver relevant ads. Categories include:

  • Essential Cookies: Necessary for website functionality (e.g., navigation, account access).

  • Functional Cookies: Enable features like Wix Chat and user preferences.

  • Analytics Cookies: Track usage via Google Analytics and Microsoft Clarity to improve our site.

  • Advertising Cookies: Serve targeted ads via Google Ads.
     

You can manage your cookie preferences through our cookie consent banner, as required by GDPR. Disabling non-essential cookies may limit some website features. For details on cookies used by Wix, see https://www.wix.com/about/privacy.
 

8. Your Data Protection Rights

Depending on your location, you have the following rights regarding your personal information:

  • Access: Request a copy of the data we hold about you.

  • Rectification: Correct inaccurate or incomplete data.

  • Deletion: Request deletion of your data (subject to legal obligations, e.g., retaining order records for tax purposes).

  • Restriction: Request that we limit how we process your data.

  • Objection: Object to processing based on legitimate interests (e.g., analytics or ads).

  • Data Portability: Request your data in a machine-readable format.

  • Withdraw Consent: Opt out of non-essential cookies or other consent-based processing.
     

To exercise these rights, log in to your account on www.tale-house.com to manage your data or contact us at hello@tale-house.com. We will respond within one month, as required by UK GDPR and GDPR. California residents have additional rights under CCPA, such as opting out of data sales (which we do not engage in).
 

9. Data Retention

We retain your personal information only as long as necessary:

  • Order Data: Kept for 7 years to comply with UK tax and accounting laws.

  • Account Data: Retained until you delete your account or request deletion.

  • Analytics Data: Retained in anonymized form for up to 26 months (Google Analytics default) or as specified by Microsoft Clarity.

  • Communication Data: Kept until the inquiry is resolved, unless required for legal purposes.
     

10. Data Security

We use industry-standard security measures, including encryption and secure protocols, to protect your data. Wix, Shippo, PayPal, Stripe, and Klarna also implement robust security practices. However, no online system is completely secure, and we cannot guarantee absolute security.
 

11. Third-Party Links

Our website may include links to third-party sites (e.g., Instagram). We are not responsible for their privacy practices. Please review their privacy policies before providing personal information.
 

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via a pop-up on our website. If legally required, we may also send an email to the address associated with your account.
 

13. Contact Us

For questions, concerns, or to exercise your data protection rights, please contact:

If you are in the UK or EU and believe we have not addressed your concerns, you have the right to lodge a complaint with a supervisory authority, such as the UK Information Commissioner’s Office (ICO) at www.ico.org.uk.

bottom of page