Privacy Policy

Account information — if you register, we store your name, email address, and a securely hashed password (we never store your password in readable form).

Order information — your name, email, and delivery address, plus what you ordered. We keep this as a permanent financial record even if you later close your account.

Cart contents — stored in your browser only, not on our servers, until you check out.

Cookies— a secure, essential-only cookie keeps you signed in. We don't use tracking or advertising cookies.

To fulfil and ship your orders, send order confirmations and account emails (verification, password resets), and respond if you contact us. We don't sell your information, and we don't use it for advertising.

Only the service providers that help us run the store — hosting, database, and email delivery — each bound to use your data solely to provide that service. If we add real payment processing, your card details go directly to our payment processor; we never see or store full card numbers.

You can request a copy of the personal data we hold about you, or ask us to delete it, by contacting us. Order records may be retained where we have a legal or accounting obligation to keep them even after a deletion request.

Enchanting Alley is not directed at children, and we don't knowingly collect information from anyone under 13.

If this policy changes materially, we'll update the date at the top of this page.

Questions about this policy or your data? Reach out here.