LEGAL

Privacy Policy

Last updated: 12 September 2026.

1. Data controller

The Little Sorcerer di Santus Walter
Via Ponentino 8/C, 09012 Capoterra (CA), Italy
VAT No.: IT03423340920
Email: info@thelittlesorcerer.com
Tel./WhatsApp: +39 3482352346

2. Data processed

When you use the contact form, we process the information you choose to provide, such as your name, email address, enquiry topic and message. If you choose to join the Sorcerer's Circle, we process your email address, site language, signup source and a record of the consent you gave for email communications. Technical data necessary to deliver and protect the website may also be processed, such as IP address, browser/device information and request logs. If you consent to Google Ads measurement, the site may also process and send advertising consent status, page and browser information, advertising click identifiers, and purchase conversion data consisting of the order identifier, total value and currency. The Google Ads conversion event configured by The Little Sorcerer does not include the customer's name, email address, postal address or payment card details.

3. Purposes and legal bases

Contact data is used to answer enquiries, provide requested information and, where relevant, take steps at your request before entering into a contract. Technical data is processed to operate, secure and maintain the website. Contact-form data is not used for advertising or newsletters. If you separately choose to join the Sorcerer's Circle, your email address is used, on the basis of your consent, to send workshop news, new Grimoire content and occasional promotional communications. Google Ads measurement is used only with your consent to measure completed purchases, assess advertising effectiveness and avoid counting the same order more than once. You may withdraw consent at any time using the method provided in our communications, the Cookie settings control on the website, or by contacting us.

4. Service providers

The website is delivered using Cloudflare infrastructure. Contact-form submissions and Sorcerer's Circle signups are processed through Formspark so that your message or subscription can be delivered to and recorded by us. Payments are processed by Stripe. When you consent to advertising measurement, Google Ads, provided by Google Ireland Limited for users in the European Economic Area and by the applicable Google entity elsewhere, is used to measure advertising visits and completed purchases. These providers may process technical or submitted data on our behalf according to their respective data-protection terms.

5. Payments

Payments made through this website are processed securely by Stripe. The Little Sorcerer does not receive or store complete card details. Payment-related data is processed by Stripe according to its own privacy policy and applicable legal requirements.

6. Retention

Contact messages are kept only for as long as reasonably necessary to answer the enquiry, manage any related request or transaction, comply with legal obligations, or establish, exercise or defend legal claims. Messages that are no longer necessary are deleted or anonymised where appropriate.

Email addresses subscribed to the Sorcerer's Circle and the associated record of consent are retained until consent is withdrawn or they are no longer needed for the stated purpose, subject to any applicable legal obligations.

Your Google Ads consent preference and the local marker used to prevent duplicate purchase reporting remain in your browser until you change the preference or clear the site's stored data. Google retains measurement data according to the applicable Google Ads account settings and its own policies.

7. Recipients and transfers

Personal data may be accessible to service providers strictly to the extent necessary to provide hosting, security, form processing, email delivery, payment processing and, with consent, advertising measurement. This may include Cloudflare, Formspark, Stripe and Google. Where data is transferred outside the European Economic Area, the relevant provider is responsible for applying an appropriate transfer mechanism where required by law.

8. Your rights

Subject to the conditions of the GDPR, you may request access to, rectification or erasure of your personal data, restriction of processing, data portability where applicable, and you may object to processing in the cases provided by law. Where processing is based on consent, you may withdraw that consent at any time without affecting prior lawful processing. You also have the right to lodge a complaint with the competent supervisory authority.

9. Exercising your rights

To make a privacy request, write to info@thelittlesorcerer.com.

10. Cookies, local storage and tracking

The site uses local storage for functions requested by the visitor, including remembering liked creations, preventing accidental duplicate hearts, retaining session or account state where applicable, saving the Google Ads consent choice and preventing the same purchase from being reported twice from the same browser. The heart identifier is randomly generated, does not contain a name, email address or contact details, and is not used for advertising profiling. When the heart feature is actively used, the service also derives a masked network address and country to group hearts left during the same activity session into one anti-spam summary. The full network address is not stored by the heart system, and the temporary session record is removed after the summary is processed.

Google Ads conversion measurement is disabled by default. The Google tag is loaded only after you select Accept in the consent notice. If accepted, Google may set or read advertising measurement cookies and process technical information, page activity, advertising click identifiers and the purchase conversion data described above. Selecting Decline does not affect browsing, checkout, payment or access to purchased content. You can change or withdraw your choice at any time through Cookie settings in the website footer. Withdrawal does not affect processing already carried out on the basis of earlier consent.