Privacy Policy
Last updated: July 2026
This Privacy Policy explains what personal data Paper Hazel (“we”, “us”, or “our”) collects when you visit paperhazel.com (the “Website”), how it is used, and the rights you have over it. It is written to meet the disclosure standards of the EU/UK General Data Protection Regulation (GDPR), the Swiss Federal Act on Data Protection (FADP), applicable US state privacy laws, and Brazil’s Lei Geral de Proteção de Dados (LGPD) — collectively, “applicable data protection law.”
1. Who we are
Paper Hazel operates this Website. If you have questions about this policy or want to exercise any of the rights described below, contact us via our Contact page.
2. What data we collect
Automatically collected data
When you visit this Website, our hosting provider, security tools, and (only after you consent) analytics tools may collect:
- IP address (anonymized where possible)
- Browser type and version, device type
- Pages visited, time spent, and referring page or search query
- Approximate location derived from IP address
This data is collected in aggregate and is not used to build an individual profile of you.
Data you provide voluntarily
If you submit a contact form or sign up for updates, we collect the information you enter (such as name and email address). We do not sell this data or share it with third parties for their own marketing purposes.
3. Legal basis for processing (GDPR)
Where GDPR applies, we process your data on the following legal bases: consent (for analytics and non-essential cookies), legitimate interest (for essential site operation and security), and contract (to respond to messages you send us).
4. Cookies
This Website uses cookies for the purposes below. Non-essential cookies are only set after you accept them through our cookie banner. See our Cookie Policy for full details.
- Essential cookies — required for the site to function, including remembering your cookie consent choice.
- Analytics cookies — help us understand how the site is used. See Google’s Privacy Policy.
- Affiliate tracking cookies — set by Amazon Associates and other affiliate partners we work with when you click through to their site, so they can attribute the visit to us. We may work with different affiliate partners over time; this policy applies to all of them.
5. Affiliate links and third parties
This Website contains affiliate links, including links to Amazon.com and other merchants we partner with, which may change from time to time. As an Amazon Associate we earn from qualifying purchases. When you click through to a partner site and make a purchase, the partner may collect its own data under its own privacy policy — we encourage you to review it on the partner’s site. We are not responsible for the privacy practices of third-party websites.
6. Third-party services
| Service | Purpose | Privacy Policy |
|---|---|---|
| Google Analytics | Website analytics (consent-based) | Link |
| Google Tag Manager | Manages the loading of the analytics and consent scripts described in this policy | Link |
| Google Fonts | Typography | Link |
| Cloudflare | Content delivery, performance, and security (e.g. bot and attack protection) | Link |
| Hosting provider | Stores and serves the Website; processes server logs (e.g. IP address) as part of normal hosting operation | See our hosting provider’s privacy policy, available on request |
| Amazon Associates | Affiliate commission tracking | Link |
7. Your rights
Depending on where you live, applicable data protection law may give you the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data (“right to be forgotten”)
- Restrict or object to certain processing
- Receive your data in a portable format
- Withdraw consent at any time (for consent-based processing, such as analytics cookies)
- Not be discriminated against for exercising these rights
To exercise any of these rights, contact us via our Contact page. We will respond within the timeframe required by applicable law.
8. International data transfers
Our service providers (such as hosting and analytics) may process data outside your country of residence, including in the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.
9. Data retention
We retain personal data only as long as necessary for the purposes described in this policy, or as required by law.
10. Children’s privacy
This Website is not directed at children under 16, and we do not knowingly collect personal data from children.
11. Changes to this policy
We may update this policy from time to time. Changes will be posted on this page with an updated date at the top.