PandoraSoul / Last updated: April 2026 GDPR Compliant

1. Who We Are

PandoraSoul is operated by Yana Yaneva, Edinburgh, Scotland, UK. Data Controller: Yana Yaneva Contact: hello@pandorasoul.com

2. What Data We Collect

When you make a purchase: Name, email address, delivery address, payment information (processed by our payment provider — we do not store card details).

When you join the waiting list or mailing list: Name and email address.

When you visit the website: Anonymous usage data via cookies (see Section 6).

3. How We Use Your Data

• To process and fulfil your orders

• To send you your subscription and related communications

• To send you updates about the book, letters, and programme (only if you have opted in)

• To improve our website and services

We do not sell your data. We do not share your data with third parties except as necessary to deliver your order (e.g. postal services).

4. Your Rights (GDPR)

Under UK GDPR, you have the right to:

• Access the data we hold about you

• Request correction of inaccurate data

• Request deletion of your data

• Withdraw consent for marketing communications at any time

• Lodge a complaint with the ICO (ico.org.uk)

To exercise any of these rights, contact: hello@pandorasoul.com

5. Data Retention

We retain customer data for 6 years for tax and legal purposes. Mailing list data is retained until you unsubscribe.

6. Cookies

Our website uses cookies to improve your experience. These include functional cookies (necessary for the site to work) and analytics cookies (to understand how visitors use the site). You can manage cookie preferences in your browser settings.

7. Third-Party Services

We use the following third-party services which may process your data:

• Wix (website platform)

• Payment processor (Stripe or Wix Payments)

• Email marketing platform

Each has their own privacy policy governing their data use.

8. Contact

For any privacy-related questions: hello@pandorasoul.com pandorasoul.com