Privacy Policy
WOOD FACTORY ECO S.R.L., trading as NeuroKids (“we”, “us”, “our”), operates this website and online store, including all related content, features, tools, products and services (the “Services”). We are the data controller for the personal information described below.
This Privacy Policy explains how we collect, use and share your personal information when you visit, use or make a purchase from our Services, or otherwise communicate with us.
By using our Services, you acknowledge that you have read and understood this policy.
1. Who Is Responsible for Your Data
2. Information We Collect
We may collect the following categories of personal information:
Personal details
- Name
- Email address
- Billing address and country
- Phone number, if you provide one
Payment information
- Payment method details, collected and processed by Stripe
- Transaction records, including amount, currency and date
We never see or store your full card number. Card data is entered directly on Stripe’s systems. We receive only the last four digits and the card brand.
Order information
- Products viewed or purchased
- Purchase history
- Download and file access activity
Device and usage data
- IP address
- Browser type and language
- Device and operating system
- Pages visited and on-site interactions
Communications
- Messages sent to customer support
- Email correspondence
3. How We Collect Information
We collect personal information:
- Directly from you, when you make a purchase or contact us
- Automatically, through cookies and similar technologies
- From service providers acting on our behalf, such as our payment processor and analytics tools
4. How We Use Your Information and Why
Under the GDPR we must have a legal basis for each purpose. Ours are as follows.
Providing the Services
- Process orders and payments
- Deliver digital products
- Provide customer support
Legal basis: performance of a contract with you.
Improving the Services
- Understand how the website is used
- Improve performance, content and functionality
Legal basis: our legitimate interest in running and improving our business.
Marketing and advertising
- Send promotional emails about our products
- Show relevant advertising on third-party platforms such as Meta and Google
Legal basis: your consent, or our legitimate interest in marketing to existing customers. You may withdraw consent at any time.
Security and fraud prevention
- Detect and prevent fraudulent or unauthorised activity
- Protect the security of our Services and files
Legal basis: our legitimate interest in protecting our business and customers.
Legal compliance
- Meet accounting, tax and invoicing obligations
- Respond to lawful requests from authorities
Legal basis: compliance with a legal obligation.
5. Who We Share Information With
We share personal information only with providers who help us run the business, and only as far as they need it:
- Stripe — payment processing and fraud prevention
- Google — file delivery via Google Drive, and analytics
- Our hosting provider — operation of the website
- Meta and Google — advertising and campaign measurement
- Our email provider — sending order and marketing emails
We do not sell your personal information, and we do not share it with anyone for their own independent marketing purposes.
6. Payment Processing
Payments are handled by Stripe. Stripe acts as an independent controller for the data it collects to process payments and prevent fraud, and applies its own privacy policy: stripe.com/privacy.
7. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Keep the website working correctly, including your cart and session
- Measure traffic and understand how pages are used
- Deliver and measure advertising
Cookies that are not strictly necessary are set only with your consent, which you give through the cookie banner and can change at any time. You can also manage or delete cookies through your browser settings.
8. International Data Transfers
Some of our providers, including Google and Meta, are based outside the European Economic Area. Where personal data is transferred outside the EEA, we rely on the European Commission’s adequacy decisions or on Standard Contractual Clauses to ensure an appropriate level of protection.
9. How Long We Keep Your Data
- Order and invoice records — retained for the period required by Romanian accounting and tax law
- Customer support correspondence — up to 3 years after the last contact
- Marketing contact details — until you unsubscribe or withdraw consent
- Analytics and advertising data — according to the retention settings of the relevant provider
When data is no longer needed, we delete it or irreversibly anonymise it.
10. Children’s Information
Our products are educational materials for children, but they are bought and used by adults. Our Services are directed at parents, carers and educators, not at children.
We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Data Security
We use reasonable technical and organisational measures to protect your personal information, including encrypted connections and restricted access to customer records. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Your Rights
Under the GDPR you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request deletion of your data
- Request restriction of processing
- Object to processing based on our legitimate interests, including direct marketing
- Receive your data in a portable format
- Withdraw consent at any time, without affecting processing carried out beforehand
To exercise any of these rights, write to contact@theneirokids.com. We respond within one month.
You also have the right to lodge a complaint with a supervisory authority. In Romania this is the National Supervisory Authority for Personal Data Processing (ANSPDCP), dataprotection.ro. You may also complain to the authority in your own country of residence.
13. Marketing Preferences
Every marketing email we send contains an unsubscribe link. Unsubscribing stops promotional messages but does not stop transactional emails such as order confirmations and file delivery.
14. Third-Party Links
Our Services may link to third-party websites. We are not responsible for their content or privacy practices, and we encourage you to read their policies.
15. Changes to This Policy
We may update this Privacy Policy from time to time. Any update is published on this page with a revised date. Where a change is significant, we will notify you by email.
Contact Us
Questions about this policy or about your personal data?
WOOD FACTORY ECO S.R.L. · Reg. J2025058525008 · VAT RO52275519