Privacy Policy

Last updated: September 25, 2026

To Carry Wonder (“we”, “us”) operates this website. This policy explains what personal data we collect, why we collect it, how long we keep it, and the rights you have over it.

1. Who is responsible for your data

The data controller is To Carry Wonder, PO Box 1341, Davis, CA 95617-1341, USA. For any privacy question or request, contact hello@tocarrywonder.com.

2. What we collect

  • Information you give us. Anything you type into a form on this site — for example your name, email address and message when you contact us.
  • Technical data. Your IP address, browser type and the pages you request are processed by our hosting and security provider (SiteGround) in order to serve the site and defend it against abuse.
  • Analytics data. Only if you consent. See the Cookie Policy for the full list of tools and what each one stores.

We do not knowingly collect data from children under 16, and we do not collect special-category data (health, biometrics, political opinions and similar) through this site.

3. Why we process it, and our legal basis

  • To respond to your enquiry — legal basis: steps taken at your request prior to entering a contract, or our legitimate interest in answering you.
  • To keep the site available and secure — legal basis: our legitimate interest in preventing fraud, abuse and automated attacks. This includes Cloudflare Turnstile on our forms.
  • To send you our newsletter — legal basis: your consent when you sign up. Every email has an unsubscribe link.
  • To measure how the site is used — legal basis: your consent. Withdraw it at any time via Privacy Preferences in the footer.
  • To meet legal obligations — legal basis: compliance with a legal obligation to which we are subject.

4. Cookies and similar technologies

No cookie or third-party script outside the strictly necessary category is loaded before you make an affirmative choice. Declining is as easy as accepting, and you can change your decision at any moment using the Privacy Preferences link in the footer. Full details are in the Cookie Policy.

5. Who we share it with

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We use a small number of processors who act only on our instructions: our website host (SiteGround), our newsletter provider (Mailchimp), our email provider, form spam protection (Cloudflare Turnstile) and — where you have consented — our analytics providers (Google Analytics, Plausible) and video provider (Vimeo). Where a provider is located outside the EEA or the UK, transfers rely on the European Commission’s Standard Contractual Clauses or an adequacy decision.

6. How long we keep it

  • Enquiry correspondence: up to 24 months after our last exchange.
  • Security and server logs: up to 30 days.
  • Consent records: retained for the period the consent is relied on plus a limitation period (commonly 3–5 years), then deleted.
  • Aggregate analytics: retained in non-identifying form only, in line with the provider’s default retention.

7. Your rights

If you are in the EEA or the UK, you have the right to access, rectify, erase, restrict, object to and port your personal data, and to withdraw consent at any time without affecting processing carried out before withdrawal. You may also lodge a complaint with your national supervisory authority.

If you are a California resident, you have the right to know, delete, correct, and to opt out of sale or sharing, plus the right not to be discriminated against for exercising them. Use the Do Not Sell or Share page, or contact us directly. We honour Global Privacy Control signals sent by your browser.

To exercise any right, email hello@tocarrywonder.com. We respond within 30 days (45 days for CCPA requests, extendable where permitted).

8. Security

The site is served over HTTPS and sits behind a web application firewall with bot filtering and rate limiting. Access to any personal data we hold is limited to people who need it. To report a vulnerability, email hello@tocarrywonder.com.

9. Changes

We update this policy when our practices change. Material changes are announced on this page, and where the change affects cookies you will be asked to renew your consent.