Loading the page…
Dimensions, materials and availability on every product.
Made-to-order lead times shown before you choose.
Review your total before payment through Stripe.
At Fairyloop, we respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, who we may share it with, and what rights you have in relation to your personal data.
The controller responsible for the processing of personal data through the Fairyloop online store is:
Svetlana Azarova
Trading as: Fairyloop
Address: Králův Dvůr
Email: [email protected]
If you have any questions about this Privacy Policy or the way we process your personal data, you can contact us at the email address above.
Depending on how you use our website and services, we may process the following categories of personal data:
We only collect personal data that is reasonably necessary for the relevant purpose.
We process the information necessary to:
The legal basis for this processing is primarily the performance of a contract or taking steps at your request before entering into a contract.
If you contact us with a question about a product, availability, an existing order or another request, we process the information you provide in order to respond to you.
This may include enquiries about products that are currently out of stock, possible product modifications, personalised products or made-to-order items.
Depending on the nature of your enquiry, the processing is based on taking steps at your request before entering into a contract, performance of a contract, or our legitimate interest in providing customer support.
If you create a Fairyloop account, we process information needed to create, authenticate and manage your account and provide account-related functionality. This includes an internal account identifier, your email address and password hash. The registration form currently also requires your first and last name; providing a telephone number is optional. Passwords are stored as Argon2id password hashes, not in plain text. To maintain and secure sign-in sessions, we also store refresh-token hashes and session expiry or revocation information.
You can update your first name, last name and telephone number in your profile. Your account lets you access your order history. Orders placed while you are signed in are associated with your account identifier so that they can be shown in your account.
The legal basis for processing information necessary to provide the account service is taking steps at your request before entering into the account arrangement and/or performing that arrangement with you.
Fields marked as required are needed to create the account or provide the relevant account functionality. The current registration form requires your first name, last name, email address and password; your telephone number is optional. If you do not provide required information, we may be unable to create your account or handle the relevant request.
If you ask us to create or modify a product specifically for you, we may process the information necessary to understand your request, prepare an offer and fulfil the resulting order.
This may include descriptions, measurements, preferences, photographs or other information that you voluntarily provide to us.
Please avoid sending sensitive personal information unless it is genuinely necessary for your request.
We may retain and process certain order, payment and customer information where this is necessary to comply with applicable accounting, tax, consumer protection or other legal obligations.
The legal basis for this processing is compliance with a legal obligation.
We may process limited information where necessary to:
This processing may be based on our legitimate interests where those interests are not overridden by your rights and freedoms.
If we offer newsletters or other marketing communications, we will process your contact details only where there is an appropriate legal basis for doing so.
Where your consent is required, you can withdraw it at any time.
Every electronic marketing message will provide an appropriate way to stop receiving further marketing communications.
We use Stripe Checkout to process payments. Fairyloop sends Stripe your email address, order items and amounts, product names and identifiers, and internal checkout, cart and account identifiers needed to match payment events to your order. The delivery name and address, and your telephone number if you provide one, are also sent to Stripe as shipping information attached to the payment. Stripe Checkout is configured to collect billing address information automatically when required by the payment flow; it does not ask you to enter the delivery address again as a separate shipping form.
When Stripe Tax is enabled for a checkout, Fairyloop also creates a Stripe Customer for that checkout and sends Stripe your email address, delivery name and address, and your telephone number if you provide one, together with the checkout-attempt identifier, to calculate tax. Stripe may process this information under its own privacy terms and legal obligations. Stripe Tax is controlled by our deployment configuration.
Payment card details are entered into Stripe's payment interface and processed by Stripe. Fairyloop does not receive or store complete payment card details.
In order to deliver your order, we may provide the selected delivery company with the information necessary to complete the delivery.
This may include:
Depending on the destination and available delivery service, we may use established carriers such as Packeta/Zásilkovna, PPL, DPD, GLS, DHL or UPS.
Only information reasonably necessary for delivery is shared with the relevant carrier.
Where necessary, personal data may be shared with service providers that help us operate Fairyloop, including:
We do not sell your personal data.
Service providers that process personal data on our behalf are required to handle that data appropriately and in accordance with applicable data protection requirements.
Some of the service providers we use may process personal data outside the European Economic Area.
Where personal data is transferred to a country outside the EEA, we take appropriate steps to ensure that the transfer is carried out in accordance with applicable data protection law.
Depending on the provider and destination, this may include an adequacy decision, an applicable data protection framework, Standard Contractual Clauses approved by the European Commission, or another legally recognised safeguard.
We keep personal data only for as long as necessary for the purpose for which it was collected.
The exact retention period depends on the type of information and the reason for processing it.
For example:
When personal data is no longer required, it will be deleted, anonymised or otherwise securely disposed of where appropriate.
Fairyloop uses necessary cookies for language preferences, account and guest-cart sessions, CSRF protection and remembering your cookie choice.
If you enable Analytics in Cookie settings, Fairyloop loads the Umami Cloud analytics script. When the deployment setting is enabled, we may also send minimized Web Vitals and error events to our own analytics endpoint. These optional technologies do not start before you enable Analytics.
Fairyloop does not currently use advertising pixels, profiling or marketing tracking.
You can change or withdraw your Analytics choice at any time using Cookie settings in the website footer.
See our Cookie Policy for the detailed inventory of cookies and similar technologies.
Under applicable data protection law, you may have the right to:
Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
Some rights are subject to legal conditions and exceptions. For example, we may be required to retain certain information despite a deletion request because of accounting, tax or other legal obligations.
To exercise your privacy rights or ask a question about your personal data, contact us at:
We may need to request additional information where reasonably necessary to verify your identity before responding to certain requests.
If you believe that your personal data has been processed in violation of applicable data protection law, you have the right to lodge a complaint with a supervisory authority.
In the Czech Republic, the supervisory authority is:
Úřad pro ochranu osobních údajů (ÚOOÚ)
Office for Personal Data Protection
You may also contact us first at [email protected], and we will do our best to address your concern.
We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.
However, no method of electronic transmission or storage can provide absolute security.
Fairyloop does not use customer personal data to make decisions based solely on automated processing that produce legal effects or similarly significant effects on customers, unless we inform you otherwise where required by law.
We may update this Privacy Policy from time to time, for example when our services, service providers or legal requirements change.
The current version will always be available on this page.
Last updated: 23 September 2026