BRIGHT LITTLE HOURS
Privacy Policy
How we handle your information when you browse, get in touch or visit our Etsy shop.
Who is responsible for your information?
Bright Little Hours operates brightlittlehours.com and offers printable games, activities and creative ideas. For questions about your personal information or to exercise your privacy rights, use our contact form.
The data controller is Cindy Willems, trading as Bright Little Hours, established in Belgium. Our full business and contact details are on the About Bright Little Hours page.
When you contact us
Our contact form asks for your name, email address and message. We use these details to answer your question and handle any follow-up. Required fields are marked; without an email address and message, we cannot respond through the form.
The form also records technical information such as your IP address, browser, submission time and the page from which you contacted us. This helps us operate the form and investigate spam or misuse. Messages are stored in WordPress through Fluent Forms and sent to our Gmail inbox.
We handle general enquiries on the basis of our legitimate interest in responding to people who contact us. Where a message concerns a purchase or steps you ask us to take before buying, the relevant basis is performance of a contract or those pre-contractual steps. Please avoid sending payment-card details or sensitive personal information through the form.
Browsing and website security
Our hosting and security services process technical data such as IP addresses, browser information, requested pages, timestamps and error or security events. We use this information to deliver the website, resolve faults and protect it against abuse. Our legitimate interest is maintaining a reliable and secure website.
Hostinger provides our hosting. Wordfence monitors security events and scans for threats. Participation in the Wordfence security network is enabled, which involves sharing information about suspected attacks with its provider, Defiant. The contact form uses a honeypot and token checks to reduce automated spam. These checks can block a suspicious submission; if a legitimate message fails, you can try again or contact our shop through Etsy.
Cookies and your choices
We use CookieYes to display cookie choices and remember your preference. Necessary cookies and browser storage support functions such as security, emoji display and saving that preference. We use consent as the legal basis for optional analytics cookies.
You can choose Reject All, accept optional cookies, or make a more specific choice in the banner. Open Consent Preferences using the cookie icon to revisit your choice at any time. Withdrawing consent does not affect processing that lawfully took place before withdrawal.
The preference panel provides information about cookie names, purposes and durations. The site uses CookieYes preference storage and WordPress emoji-support storage. Google Analytics uses the _ga and _ga_* cookies for visit statistics. Cookie lifetimes are separate from the Analytics data-retention settings described below.
Consent logging is enabled. CookieYes records your consent identifier, choices, date and time, and a masked IP address as evidence of your choice. We use this record to meet our obligations to manage and demonstrate consent.
Google services and visit statistics
Google Site Kit connects this website to Google Search Console, Google Analytics and PageSpeed Insights. A Google tag is installed for Analytics. We use Analytics to understand how visitors find and use the site, on the basis of consent for analytics tracking.
Analytics processes information about pages viewed, interactions, device and browser characteristics, referral sources and approximate location. Search Console provides reports about the site’s appearance in Google Search, and PageSpeed Insights provides performance reports. These reporting connections do not themselves add separate visitor-tracking cookies.
See Google’s Privacy Policy for information about Google’s processing. The Analytics retention settings are described below.
Etsy links and purchases
Product buttons take you to our Etsy shop or an Etsy listing. Purchases, payments and downloads currently take place on Etsy, rather than through a checkout on this website. We do not collect payment-card details through this website.
Our shop links may use Etsy’s Share & Save programme to attribute a visit or purchase to our link. Once you follow an Etsy link, Etsy’s own cookies, privacy notice and settings apply. If you place an order or contact us on Etsy, Etsy provides the information needed to manage that order or conversation. Read Etsy’s Privacy Policy.
Who receives information
People authorised to manage Bright Little Hours may access enquiries and relevant website records. The services supporting this website and communication include Hostinger for hosting, Google for Gmail and the Google services described above, CookieYes for consent management, and Defiant for Wordfence security services. Fluent Forms stores form entries within our WordPress installation.
We may disclose relevant records where legally required or necessary to establish, exercise or defend legal claims. Sending a contact message does not subscribe you to a newsletter.
International processing
Our providers operate internationally, so information may be processed outside the European Economic Area, including in the United States. This can apply to email handled by Google, Analytics data, consent-management information and security information shared with Wordfence.
Google describes its use of the EU–US Data Privacy Framework for covered transfers to its certified US entities and Standard Contractual Clauses in its data-transfer information. The published data-processing terms of Hostinger, CookieYes and Wordfence provide contractual safeguards, including Standard Contractual Clauses for relevant transfers where required.
These safeguards are intended to protect personal information when it is processed internationally. You can contact us for further information about the safeguards relevant to your information.
How long information is kept
We keep contact-form entries in WordPress for as long as needed to answer the enquiry and handle relevant follow-up. The appropriate period depends on whether the enquiry is resolved and whether the information is still needed for an order, dispute or legal obligation. Entries require manual review and removal; there is no automatic twelve-month deletion rule.
Email correspondence is managed separately by the owner of Bright Little Hours. It is kept for as long as needed to answer the enquiry, manage relevant follow-up and meet applicable legal or dispute-handling requirements. Removing a WordPress entry does not automatically delete the email copy.
Google Analytics is configured to retain event-level data for two months and user-level data for fourteen months. The user-data retention period resets when new activity occurs. These settings do not limit most standard reports based on aggregated data.
Wordfence Live Traffic is set to record security-related traffic, with a maximum retention of thirty days and a limit of 2,000 records. Other website and security records are kept for the period needed to diagnose faults or investigate abuse. Cookie durations are shown in Consent Preferences.
On our current CookieYes Free plan, consent records are available for export for up to one year, as described in CookieYes’s consent-log information.
Your privacy rights
Depending on the circumstances, you can request access to your personal information, correction, deletion, restriction of use or a portable copy. You can object to processing based on legitimate interests and withdraw consent for processing that relies on it.
Use our contact form to make a request. We may ask for proportionate information to confirm your identity. We normally respond within one month; if a permitted extension is needed, we will explain this within that month.
You can lodge a complaint directly with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit). You can also complain to the competent authority where you live or work, or where an alleged infringement occurred.
Children and family activities
Some of our activities are designed for school-age children, but the contact and purchasing services are intended to be used by adults. Parents or guardians can contact us if a child has sent personal information and they would like help removing it.
Changes to this policy
We will update this page when our services or use of information change. In particular, adding direct sales, a newsletter or embedded video may require changes.
Last updated: 13 September 2026.