Privacy Notice

Last updated: 21 October 2026

Who is responsible

Spooky Colour Sheets is the data controller for personal data processed through Spooky Colouring World. Children can colour without giving us any personal information.

What we collect and why

• Purchase records (order/transaction ID, which pack was bought) — to unlock your sheets. Legal basis: contract.
• Device and usage data (IP address, browser type, pages viewed, data stored on your device to remember purchases) — to run, secure and improve the site. Legal basis: legitimate interests.
• Support messages (name, email, message) — to answer your questions. Legal basis: contract and legitimate interests.

Card and billing details are collected directly by Paddle, not by us.

Who we share data with

• Paddle, our Merchant of Record, for the sale of products, payments, tax compliance and invoicing.
• Service providers who host and operate the site.
• Professional advisers (legal, accounting).
• Authorities where required by law.

International transfers

Some providers may process data outside the UK/EEA. Where they do, we rely on adequacy decisions or Standard Contractual Clauses.

How long we keep data

We keep purchase records as long as needed to provide your packs and meet legal obligations, then delete or anonymise them.

Your rights

Under UK GDPR you can ask to access, correct, erase, restrict or port your data, object to processing, and withdraw consent. We respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).

Security

We use appropriate technical and organisational measures, including encrypted connections and access controls.

Cookies and storage

We only use essential browser storage to remember your unlocked packs. We do not use advertising cookies. You can clear this storage in your browser settings, which will hide unlocked packs on that device.