GDPR Compliance Statement
Last updated: October 2025
At Biophilic Flair, owned and operated by Wonky Dog Limited, we take data protection seriously — not because we love legal jargon (we don’t), but because we respect your privacy. We believe that anyone visiting our site should know exactly what information is collected, how it’s used, and that they remain in full control of it.
This statement explains how we comply with the General Data Protection Regulation (GDPR) and similar data protection laws.
What GDPR Means
The GDPR is a European Union regulation that protects personal data and privacy. It gives you more control over your information — how it’s collected, stored, and used. Even though Biophilic Flair is a small operation, we choose to apply these standards for all our visitors, wherever they’re based.
Legal Basis for Processing
We collect and use personal data only when we have a clear legal reason to do so. That includes:
- Consent — when you choose to sign up for our newsletter, submit a form, or click an affiliate link.
- Legitimate interest — for things like analyzing website traffic or improving how the site functions.
- Contractual necessity — when you request information or services that require us to contact you.
- Legal obligation — if we ever need to retain certain information to comply with applicable law.
What Data We Collect
We collect minimal personal data and only what’s necessary for the site to function or for you to interact with us. This may include:
- Your name and email address (if you contact us or subscribe to updates)
- Basic technical information like your IP address, browser type, and device type (collected automatically through analytics tools)
- Anonymous usage data to understand how visitors use the site
- Affiliate tracking cookies when you click on affiliate links (so our partners know where referrals come from)
We do not collect financial data, sensitive personal information, or anything we don’t genuinely need.
How We Use Your Data
Your data is used only to:
- Deliver and improve website content
- Send optional email updates (only if you’ve opted in)
- Track affiliate link performance
- Maintain security and prevent spam
- Analyze site traffic patterns anonymously
We never sell, rent, or trade your personal information.
How Long We Keep Your Data
We keep your data only as long as necessary for the purpose it was collected. For example:
- Newsletter subscriptions are stored until you unsubscribe.
- Contact form messages are kept until your inquiry is resolved.
- Analytics data is stored in aggregate form only.
When data is no longer needed, it’s securely deleted or anonymized.
Cookies and Analytics
We use cookies (small text files) to improve your experience. Some are essential for the site to function; others help us understand visitor behavior or support affiliate links and ads.
We may use:
- Google Analytics — to understand how visitors use our site
- Google AdSense — to display relevant ads
- Affiliate network cookies — including Awin, FlexOffers, Commission Junction, ShareASale, and Webgains
You can disable or delete cookies anytime through your browser settings.
Data Sharing and Third Parties
We work with a few trusted third-party partners who help us operate the site — for example, analytics, advertising, and email delivery services. These providers only access the data they need to perform their tasks and are required to handle it securely and in compliance with GDPR.
We do not share personal information with third parties for marketing purposes.
Your Rights Under GDPR
You have several important rights regarding your personal data, including:
- The right to access the data we hold about you
- The right to correct or update your information
- The right to request deletion of your data (“the right to be forgotten”)
- The right to restrict or object to processing
- The right to data portability (to receive your data in a common format)
- The right to withdraw consent at any time
You can exercise these rights at any point through the contact options on our Contact Page.
Security Measures
We use secure hosting, SSL encryption, and restricted access to protect any personal information. While no system is 100% invincible, we take all reasonable steps to ensure your data stays safe and private.
Updates to This Statement
We may update this GDPR statement occasionally to reflect changes in the law, our technology, or our practices. Any updates will appear on this page with a new “Last Updated” date.