1. Data Controller

S A Shantha Sunthari Naidu Athinaidu (operating as Whispers in Print)

33, rue du Soleil, L-2544, Luxembourg

Email: hello@whispersinprint.com

---

2. Data We Collect

We may collect:

• Name

• Billing and shipping address

• Email address

• Payment details (processed securely via third-party providers)

• IP address and usage data

---

3. Purpose of Processing

Your data is used to:

• Process and fulfill orders

• Provide customer support

• Comply with legal obligations

• Improve website performance

---

4. Legal Basis

Processing is based on:

• Contract performance

• Legal obligations

• Legitimate interest

• Consent (for marketing and cookies)

---

5. Third Parties

We may share your data with:

• Gelato (order fulfillment)

• Payment providers (e.g. Stripe, PayPal)

• Hosting and analytics providers

For purchases made on Spoonflower, data is handled under their own privacy policy.

---

6. Data Retention

• Order data: retained for legal and tax purposes

• Marketing data: retained until consent is withdrawn

---

7. Your Rights

You have the right to:

• Access your data

• Request correction or deletion

• Restrict processing

• Data portability

• Lodge a complaint with the Luxembourg supervisory authority (CNPD)

---

8. Data Security

We implement appropriate technical and organisational measures to protect your data.