North Pole Wonderworks
Privacy & your child's details
Santa's list at the Wonderworks is deliberately short. We ask for a first name, an age and a few happy moments — enough to write something unforgettable, and nothing more. Here is exactly what that means, in plain English.
What we ask for
A child's first name, their age, an optional town, and a handful of happy moments you choose to tell Santa. That is the entire list.
We never ask for a last name, a street address, a school, a date of birth, a phone number or a photograph — not because a form field is hard to build, but because the safest way to hold information about a child is not to hold it at all.
What we do with it
Those details are used for exactly one thing: writing and producing the letter and documents in your package. Your child's details are sent to our writing model to compose the letter, and they are not used to train it.
They are never sold, rented, brokered or shared with advertisers, and we do not build a profile of your child. There are no advertising or tracking pixels on this site.
How long we keep it
Personalization details — the names, ages and moments — are deleted automatically on a schedule after your order, and your download links expire on their own too.
The order record itself (order number, email address, amount, date) is kept for the years our accountant and the tax authorities require. You can ask us to delete personalization details sooner and we will do it.
The two links we give you
Your parent delivery link manages the order: previews, downloads, re-sending and sharing. Keep it to yourself.
The child's magic link opens the North Pole Digital Delivery and nothing else. It deliberately shows no prices, no email address, no order number and no way back into your account — it is safe to hand to a child or put on the family television.
Both links are long, unguessable and time-limited, and either can be switched off on request.
We email you your delivery links and receipt. That is a service email about your order and it always sends.
The reminder opt-in at checkout is separate, optional, unticked by default and never a condition of buying. It applies to your address only and never to anything about your child, and one click removes you for good.
Who we are
North Pole Wonderworks sells personalized, digital-only Christmas printables and interactive deliveries at northpolewonderworks.com. We are the data controller for everything described on this page.
There are no customer accounts, no physical products, no shipping and no mailing addresses anywhere in our system. Contact for any privacy question: hello@northpolewonderworks.com.
What we collect at checkout
At checkout we collect your email address (so we can deliver the order and send the receipt), the package you chose, and — if your tax jurisdiction requires it — the country your card reports. We also record whether you ticked the optional reminder opt-in.
Card numbers, expiry dates and security codes are entered directly into our payment provider's hosted form. They never touch our servers and we could not see them if we wanted to. Back from the provider we receive only a payment reference, the amount, the currency, the result, and in some cases the card brand and last four digits.
Our payment provider is Stripe, acting as an independent controller for fraud prevention and as our processor for the payment itself. Stripe may set its own strictly necessary cookies on the checkout form and applies its own privacy policy to the card data it holds.
We do not charge stored cards, we do not create subscriptions, and we never re-bill an email address later.
Order storage and what the record contains
Each purchase creates one order record containing: an order number, your email address, the package name, the amount paid, the payment reference, the date, the delivery link tokens, and simple delivery counters (whether the email sent, whether the links were opened, how many files were downloaded).
Your child's personalization details — first name, age, town and the moments you shared — are stored separately, linked to the order only so the files can be produced and re-issued if you need them again. They are deleted on a schedule after your order.
Generated files are produced from that data on demand and served over expiring links; they are not left sitting in a public folder.
Order records live in our managed database, hosted in the European Union and encrypted at rest and in transit. Access is limited to the owner account, which is protected by password sign-in, and every administrative action on an order is logged.
Financial records (order number, email, amount, date) are retained for as long as tax law requires — generally six to seven years. Everything else is deleted earlier.
Find My Order — how recovery works
Find My Order exists so you can get your downloads back without an account. You enter the email address you used to buy, and nothing is revealed on that screen: whatever you type, the page gives the same neutral confirmation, so it can never be used to test whether an address has bought from us.
If the address does match orders, we email a single verification link to that address. The link is long, random, single-use and time-limited; opening it shows only the orders belonging to that exact address, and only orders placed with North Pole Wonderworks — our lookup is hard-scoped to this brand and cannot return data from anything else.
Following the link does not create an account, does not sign you in anywhere else and sets no long-lived cookie. Once it is used or expires, it is dead. Request another whenever you need one.
We record that a recovery link was requested and used, so we can spot abuse and rate-limit it. Ask us and we will invalidate every outstanding link on your address immediately.
Who else handles this data
Payments: Stripe (card processing, fraud checks, receipts and tax calculation).
Hosting and database: our managed cloud infrastructure, which stores order records and personalization details in the European Union.
Email delivery: our transactional email provider, which sends your delivery email, receipt and recovery links from notify.northpolewonderworks.com and holds delivery logs briefly.
Letter writing: our AI writing provider, which receives only the interview details needed to write the letter, on terms that forbid using them to train models.
That is the entire list. We add no advertising networks, no data brokers, and no analytics vendor that profiles you.
Files are released by the server
Downloads are authorized server-side after payment is confirmed — not by your browser — so nobody can help themselves to a package they have not bought, and a shared link that has expired stops working everywhere at once.
Your rights
You can ask us what we hold about you, ask for a copy, ask us to correct a misspelled name, or ask us to erase everything we are not legally required to keep. Write to hello@northpolewonderworks.com and a person — not a ticket robot — will handle it.
Because we take no accounts and almost no data, most of these requests take us minutes rather than weeks.
Children
This shop is sold to grown-ups. The purchase, the interview and the delivery page are all designed for a parent or guardian, and we rely on you to be the one entering your child's details.
We do not knowingly collect anything directly from a child, and the child-facing experience collects nothing at all.
Changes to this policy
If we change how any of this works, we update this page and change the date below before the change takes effect. Material changes to how we handle order or child data will also be described in plain language on the page itself.
Last updated: December 2025.
Questions about any of this, or about an order? Email hello@northpolewonderworks.com, or read the full list of questions we get asked.