Privacy Policy

Last Updated: April 2026

1. Introduction. Potter World Ltd ("Potter World," "we," "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you visit our website, create an account, or make a purchase.

2. Information We Collect. We may collect the following categories of personal information: (a) Identity Data: name, username, date of birth; (b) Contact Data: email address, billing address, shipping address, phone number; (c) Financial Data: payment card details (processed securely via third-party payment processors — we do not store full card numbers); (d) Transaction Data: details of products purchased, order history, and payment records; (e) Technical Data: IP address, browser type, device information, operating system, and cookies; (f) Usage Data: browsing history on our Site, search queries, page interaction data, and referral sources.

3. How We Use Your Information. We use your personal data to: process and fulfil your orders; manage your account; communicate order updates and customer support responses; send marketing communications (with your consent); improve our Site, products, and services; detect and prevent fraud; and comply with legal obligations.

4. Lawful Basis for Processing. We process your data on the following lawful bases: (a) performance of a contract (order fulfilment); (b) legitimate interests (fraud prevention, analytics, service improvement); (c) consent (marketing communications); and (d) legal obligation (regulatory compliance).

5. Data Sharing. We do not sell your personal information to third parties. We may share your data with: (a) payment processors to complete transactions; (b) delivery partners to ship physical products; (c) analytics providers to improve our services; and (d) legal authorities when required by law. All third-party service providers are contractually obligated to handle your data securely and in compliance with applicable data protection laws.

6. Data Security. We implement industry-standard security measures including SSL/TLS encryption, secure password hashing, access controls, and regular security audits to protect your information. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Data Retention. We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Account data is retained for the duration of your account plus 6 years following closure. Transaction records are retained for 7 years in compliance with tax and accounting regulations.

8. Your Rights. Depending on your jurisdiction, you may have the right to: access your personal data; rectify inaccurate data; erase your data ("right to be forgotten"); restrict or object to processing; data portability; and withdraw consent. To exercise any of these rights, contact us at privacy@potterworld.shop.

9. International Transfers. Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the relevant authorities.

10. Children's Privacy. Our Site is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we become aware of such collection, we will promptly delete the data.

11. Changes to This Policy. We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our Site. Your continued use of the Site following any changes constitutes your acceptance of the revised policy.

12. Contact. For privacy-related enquiries, contact our Data Protection Officer at privacy@potterworld.shop or write to: Potter World Ltd, Data Protection Officer, 14 Diagon Crescent, London EC2A 4NE, United Kingdom.