Privacy policy
Last updated 7 September 2026.
The short version: you can read everything on this site without giving us anything. We do not sell from this site, we have no checkout, and we have never held anyone’s card or bank details.
1. What we collect
When you just read
Google Analytics records the pages you visit, roughly where in the world you are, and what kind of device you used. It is aggregated — we can see that forty people read a candle review last week, not who they were. We do not run advertising trackers or sell data to anyone.
When you write to us
If you email us or submit a page to the gallery, we keep your message and your email address for as long as it takes to answer you, and afterwards so we can find the conversation if you write again. That is it — no mailing list you did not ask for.
If you use the app
The optional mobile app has an account: an email address, a display name, and what you saved or favourited. You can delete all of it from inside the app — the steps and the retention window are on the account deletion page.
2. What we do not collect
- Card numbers, bank accounts or PayPal details — there is nothing to pay for here.
- Shipping addresses — nothing ships from us.
- Anything from a child. The site is not directed at children under 13.
3. Cookies
This site sets analytics cookies through Google Analytics. It does not set advertising cookies. Blocking cookies in your browser will not stop you reading anything here.
When you follow a product link to Amazon or Etsy, that company sets its own cookies under its own policy, including the affiliate cookie that credits us if you buy. We never see who clicked or what they bought — only a monthly total.
4. Who else sees your data
Google (analytics) and our hosting and email providers, each acting on our behalf. We do not sell, rent or trade personal information, and we do not share it for advertising.
5. Your choices
You can ask us what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. Write to support@thenookart.com and we will act within 30 days. If you are in the EEA or the UK, these are your rights under the GDPR; if you are in California, the CCPA gives you equivalent ones.
6. Keeping it safe
Traffic to this site is encrypted in transit. We hold as little as possible, which is the most reliable protection available: data that was never collected cannot be leaked.
7. Changes to this policy
If this changes we will update the date at the top. Material changes will be flagged on the site rather than made quietly.
8. Contact
support@thenookart.com — or by post to 270 Trace Colony Park, Ste B, Ridgeland, MS 39157.