Using Personal Information

We use your personal Information to provide our services to you, which includes: offering products for sale, processing payments, shipping and fulfillment of your order, and keeping you up to date on new products, services, and offers.

Lawful basis

Pursuant to the General Data Protection Regulation (“GDPR”), if you are a resident of the European Economic Area (“EEA”), we process your personal information under the following lawful bases:

  • Your consent;

  • The performance of the contract between you and the Old World Christmas Site;

  • Compliance with our legal obligations;

  • To protect your vital interests;

  • For our legitimate interests, which do not override your fundamental rights and freedoms.

Personal Information We Collect:

  • The Personal Information we collect about you will depend upon how you use Old World Christmas properties. Accordingly, we may not collect all of the below information about you.

  • We may collect additional categories of personal information or use it for different purposes, and will do so after providing you notice and obtaining your consent to the extent such notice and consent is required by the GDPR.

  • Personal Identifiers (such as name, mailing address, IP address, email address or account name)

  • Protected classification characteristics (such as age, gender, race, ethnicity, religion, marital status, and veteran/military status)

  • Commercial information (such as what you purchase or consider purchasing from us and other requests you make)

  • Geolocation data (such as the location of your computer or mobile device)

  • Internet or Electronic Network Activity (such as browsing history, search history, banners you click, and pages you visit on our site)

  • Sensory data (such as audio, electronic, visual or similar information)

  • Biometric information

  • Inferences drawn from other personal information (such as preferences, characteristics, predispositions and behaviors)

We may collect this type of information from:

  • Consumers;

  • Cookies and tracking technologies;

  • Third party social media companies;

  • Third party business partners, such as data analytics providers, data brokers, advertising networks, or joint marketing partners. ;

We may use this type of information for:

  • Providing our services to you and allowing you to participate in the features Old World Christmas offers;

  • Recognizing you across devices so as to improve your experience with us;

  • Identifying your preferences and tailor our content and recommendations for you;

  • Investigating and preventing fraud, illegal activities, and activities that violate our policies, and resolving technical issues reported;

  • Improving our services and marketing endeavors;

  • Internal business purposes;

  • Complying with the law and protecting the safety, rights, property, or security of Old World Christmas, consumers, and the general public;

  • Other purposes disclosed to you at the time you provide your information, or otherwise with your consent.

We may disclose this type of information to:

  • Third party service providers;

  • Affiliates and subsidiaries;

  • Third parties whose features are integrated with Old World Christmas, such as social media companies;

  • Third party advertising and analytics companies;

  • Third parties with whom we have joint marketing and similar arrangements;

  • Law enforcement, government entities, or others if required by law or in connection with court proceedings (such as pursuant to subpoenas or court orders);

  • Third parties who may acquire your information as a result of a merger, acquisition or other ownership transition;

  • Third parties when you agree to or direct that we share your information with them.

Categories of Third Parties to Whom this Type of Information is Sold:

  • Third party advertising, analytics, and similar third parties may have access to this data through cookies and similar technologies, and this may be considered a sale under GDPR under certain circumstances.


When you place an order through the Site, we will retain your Personal Information for our records unless and until you ask us to erase this information. For more information on your right of erasure, please see the ‘Your rights’ section below.

Automatic decision-making

If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on you or otherwise significantly affects you.

We DO NOT engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.

Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you.

Services that include elements of automated decision-making include:

  • Temporary deny list of IP addresses associated with repeated failed transactions. This deny list persists for a small number of hours.

  • Temporary deny list of credit cards associated with deny listed IP addresses. This deny list persists for a small number of days.

Your rights


If you are a resident of the EEA, you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information below.

Your Personal Information will be initially processed in Ireland and then will be transferred outside of Europe for storage and further processing, including to Canada and the United States. For more information on how data transfers comply with the GDPR, see Shopify’s GDPR Whitepaper:


For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at or by mail using the details provided below:

Old World Christmas, 4007 E Main Ave, Spokane WA 99202, United States

Last updated: 5/2/2022

If you are not satisfied with our response to your complaint, you have the right to lodge your complaint with the relevant data protection authority. You can contact your local data protection authority, or our supervisory authority.