Free EU shipping on orders over €50 · Pay on delivery · Help monday to sunday
Cart0
Home / Privacy Policy

Privacy Policy

How we collect, use and protect your personal data.

This Privacy Policy explains how imaginationshub.com ("we", "us") collects, uses and protects personal data when you visit our website, send us a message or place an order. We process personal data in line with the EU General Data Protection Regulation (GDPR).

1. Who is responsible for your data

The controller of your personal data is the operator of the online store imaginationshub.com. For any privacy question or request, use our contact form. We answer monday to sunday.

2. What data we collect

  • Order data: first and last name, email address, phone number, delivery address, order notes and the products you order.
  • Contact data: your name, email address and the content of your message when you use the contact form.
  • Technical data: IP address and browser information that our hosting provider records in server logs when you visit the site.

We do not collect any payment card data. All orders are paid in cash on delivery to the courier.

3. Why we use it and on what legal basis

  • To process and deliver your order and handle withdrawals – performance of a contract (Art. 6(1)(b) GDPR).
  • To answer your messages – our legitimate interest in replying to enquiries (Art. 6(1)(f) GDPR).
  • To keep invoices and accounting records – legal obligation (Art. 6(1)(c) GDPR).
  • To keep the website secure and working – legitimate interest (Art. 6(1)(f) GDPR).

4. Who receives your data

We share only the data needed for each task with these recipients:

  • Cloudflare, Inc. – hosting and delivery of this website. It processes technical data such as your IP address in server logs.
  • Formspree, Inc. – processor that receives and forwards the order and contact forms you submit on this site to us.
  • Courier companies – they receive your name, delivery address, phone number and the amount to collect so they can deliver your parcel.

Some of these providers are based outside the European Economic Area, in particular in the United States. Where this is the case, transfers rely on appropriate safeguards required by the GDPR, such as standard contractual clauses. We never sell or rent your data to anyone.

5. How long we keep it

Order data is kept for as long as required by tax and accounting law (usually 5–10 years depending on the country). Messages are kept for up to 2 years after the conversation ends. Server logs are kept by our hosting provider for a short period only.

6. Cookies and local storage

This website does not use cookies, and we do not use analytics or advertising trackers, so there is no cookie banner. We only use your browser's storage for functions you ask for: ih-cart (local storage) remembers the contents of your cart between pages, and ih-last (session storage) holds your order summary for the confirmation page after you place an order. You can clear this data at any time in your browser settings.

7. Your rights

You have the right to access your data, correct it, have it deleted, restrict or object to its processing and receive it in a portable format. To use any of these rights, send us a message through our contact form. You also have the right to lodge a complaint with the data protection supervisory authority in your country of residence.

8. Security

Our website uses an encrypted (HTTPS) connection, and access to order data is limited to the people who need it to handle your order.

9. Changes to this policy

We may update this policy when our services or the law change. The current version is always published on this page.

Effective from 1 October 2026.