What we do with your data
Two forms on this site ask for personal data. This page says exactly what happens to it. No tracking, no advertising, no selling anything on.
Who is responsible
The Old Gnome is run by Ferran Usó Boix, C/ José Nebot, 32, 12540 Vila-real (Castellón), Spain, tax number (NIF) 53663124F. Written enquiries go to hello@theoldgnome.com, which is also where you write to have your data removed.
What is collected, and why
There are exactly two places on this site that ask for anything.
The newsletter. One field: your email address. It is stored by Buttondown, the service that sends the letter, along with which page you signed up from and which language you were reading. That is how we know whether the QR code in the box is worth printing. The legal basis is your consent, given by submitting the form.
The trade enquiry form. Name, shop, email, country and your message. It is sent as an email to the workshop through Resend and answered by hand. Nothing is stored in a database. The legal basis is taking steps at your request before entering a contract.
What is not collected
There are no advertising cookies, no tracking pixels, no social media embeds, and no analytics that identify anyone. The site sets no cookies of its own at all. If site-wide traffic measurement is ever switched on it will be a cookieless one that counts pages rather than people.
Orders are handled by Etsy, not here. When you click through to buy, Etsy’s own privacy policy takes over and we never see your payment details.
How long it is kept
The newsletter list keeps your address until you leave. Every letter carries an unsubscribe link, one click, no questions — or write to us and we will do it for you. Trade enquiries stay in the workshop inbox for as long as the commercial relationship is live, and are deleted on request.
Your rights
You can ask for a copy of what we hold, ask for it to be corrected or deleted, withdraw your consent, or object to the processing. Write to hello@theoldgnome.com and we will answer. If the answer does not satisfy you, you can complain to the Spanish data protection authority, the AEPD.
Where the data goes
Buttondown and Resend both process data on servers in the United States under the European Commission’s standard contractual clauses. No data is sold, shared with advertisers, or used to build a profile of you.