Privacy policy

PRIVACY POLICY

Effective Date: September 11, 2026
Last Updated: September 11, 2026

Enchanta respects your privacy.

This Privacy Policy explains how Nina Bustamante, operating Enchanta (“Enchanta,” “we,” “us,” or “our”) collects, uses, discloses, stores, and otherwise processes personal information when you visit enchantauniverse.com, purchase products, enroll in Velmere School of Magic, subscribe to communications, memberships, or mail clubs, participate in games, promotions, community features, or other experiences, interact with us, or otherwise use Enchanta products and services (collectively, the “Services”).

This Privacy Policy applies to Enchanta and Enchanta-operated sub-brands, properties, programs, games, fictional institutions, and experiences, including Velmere School of Magic, as well as future Enchanta offerings, unless a separate privacy notice is provided.

By using the Services, you acknowledge the practices described in this Privacy Policy.

1. WHO IS RESPONSIBLE FOR YOUR INFORMATION

Enchanta is operated by:

Nina Bustamante
Enchanta
Henderson, Nevada, United States
Email: enchanta.universe@gmail.com

For privacy-related requests, please use the subject line:

Privacy Request

2. PERSONAL INFORMATION WE MAY COLLECT

The information we collect depends on how you interact with Enchanta.

Contact and Identity Information

We may collect information such as:

  • name;

  • email address;

  • telephone number;

  • billing address;

  • shipping or mailing address;

  • username or account identifier;

  • age or age-range information where necessary; and

  • similar contact or identifying information.

Order and Transaction Information

When you purchase something from Enchanta, we may collect or receive:

  • products purchased;

  • order numbers;

  • order history;

  • transaction amounts;

  • discounts or promotional offers used;

  • billing and shipping information;

  • delivery information;

  • returns and refunds;

  • subscription information; and

  • related customer-service records.

Payment Information

Payments are processed through Shopify and applicable payment providers.

We may receive information such as transaction status, payment-method type, billing information, and payment confirmation.

Enchanta generally does not need to receive or store your complete payment-card number in order to process a standard Shopify transaction.

Account Information

If account functionality is available, we may collect information associated with your account, including:

  • login and account information;

  • account preferences;

  • saved addresses;

  • order history;

  • subscriptions;

  • memberships; and

  • account activity.

Velmere and Enchanta Participation Information

If you enroll in Velmere School of Magic or participate in another Enchanta experience, we may collect information connected to your participation, such as:

  • enrollment status;

  • email address;

  • selected preferences;

  • fictional classifications or Sigils;

  • participation history;

  • progress or completion information;

  • membership level;

  • communication preferences; and

  • other information necessary to provide the experience.

Velmere is a fictional entertainment experience. Information concerning your participation does not constitute an academic or educational record from an accredited educational institution.

Communications and Customer Service

We may collect information you provide when you:

  • contact customer service;

  • email us;

  • complete a form;

  • answer a survey;

  • request a return or refund;

  • report a problem;

  • communicate about an order;

  • enter a promotion; or

  • otherwise communicate with Enchanta.

User Content

If Enchanta provides features allowing submissions, we may collect content you voluntarily provide, including:

  • reviews;

  • photographs;

  • artwork;

  • comments;

  • messages;

  • contest entries;

  • fan creations;

  • game-related submissions; and

  • other content.

Please do not submit sensitive personal information through public or community features.

Device, Internet and Usage Information

When you interact with our Services, we and our service providers may automatically collect information such as:

  • IP address;

  • browser type;

  • device type;

  • operating system;

  • device identifiers;

  • cookie identifiers;

  • advertising identifiers;

  • approximate location derived from IP address;

  • referring and exit pages;

  • pages viewed;

  • products viewed;

  • links clicked;

  • shopping and browsing activity;

  • interaction with advertisements;

  • interaction with emails or communications;

  • date and time of activity;

  • session information; and

  • diagnostic, security, performance, and log information.

Marketing and Advertising Information

We may collect or receive information relating to:

  • marketing preferences;

  • email subscriptions;

  • email engagement;

  • advertising interactions;

  • campaign attribution;

  • advertisements viewed or clicked;

  • purchases attributed to campaigns; and

  • advertising or marketing audiences.

3. HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information:

Directly From You

For example, when you:

  • make a purchase;

  • create an account;

  • enroll in Velmere;

  • subscribe to email;

  • join a membership or mail club;

  • contact us;

  • submit a review;

  • enter a promotion; or

  • provide content.

Automatically

We and our providers may collect information through cookies, pixels, tags, local storage, device identifiers, server logs, APIs, and similar technologies.

From Service Providers and Other Parties

Depending on the Services we use, we may receive information from:

  • Shopify;

  • payment processors;

  • shipping and fulfillment providers;

  • analytics providers;

  • advertising platforms;

  • social-media platforms;

  • email and marketing providers;

  • fraud-prevention providers;

  • security providers; and

  • other providers supporting Enchanta.

4. HOW WE USE PERSONAL INFORMATION

We may use personal information to:

  • operate Enchanta and the Services;

  • provide products and experiences;

  • process and fulfill orders;

  • process payments;

  • arrange shipping and delivery;

  • process returns, refunds, and cancellations;

  • create and maintain accounts;

  • administer Velmere enrollment;

  • send requested Velmere correspondence and content;

  • administer subscriptions, memberships, and mail clubs;

  • provide customer service;

  • respond to questions and requests;

  • authenticate users;

  • prevent fraud and abuse;

  • maintain security;

  • communicate about purchases or services;

  • send marketing where permitted;

  • personalize content and experiences;

  • remember preferences;

  • conduct analytics;

  • understand how visitors use our Services;

  • measure advertising and marketing campaigns;

  • provide or measure advertising where permitted;

  • administer contests, promotions, surveys, and giveaways;

  • operate community or user-content features;

  • develop and improve products, games, content, and experiences;

  • maintain business, transaction, tax, and legal records;

  • enforce our Terms of Service and policies;

  • establish, exercise, or defend legal claims;

  • comply with legal obligations; and

  • carry out other purposes disclosed when information is collected.

5. LEGAL BASES FOR PROCESSING

Where applicable law requires us to identify a legal basis for processing personal information, our bases may include:

Contract

We may process information where necessary to fulfill a purchase, provide something you requested, administer an account or subscription, or otherwise perform our agreement with you.

Consent

We may rely on your consent for certain activities, including certain marketing communications, analytics technologies, advertising technologies, or cookies where applicable law requires consent.

Where processing relies on consent, you may withdraw that consent as permitted by law.

Withdrawal does not affect processing that lawfully occurred before consent was withdrawn.

Legitimate Interests

Where permitted, we may process information for legitimate business interests such as:

  • operating Enchanta;

  • improving our Services;

  • customer service;

  • fraud prevention;

  • security;

  • analytics;

  • understanding our customers; and

  • protecting our legal rights.

We rely on legitimate interests only where those interests are not overridden by applicable rights and freedoms.

Legal Obligations

We may process information where necessary to comply with applicable legal, regulatory, tax, accounting, law-enforcement, or other obligations.

6. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information to companies and individuals that help us operate Enchanta, including:

  • Shopify and ecommerce providers;

  • payment processors;

  • banks and payment networks;

  • shipping, postal, logistics, and fulfillment providers;

  • hosting and cloud providers;

  • email and marketing providers;

  • analytics providers;

  • advertising platforms and networks;

  • social-media platforms;

  • customer-support providers;

  • fraud-prevention and security providers;

  • technology providers;

  • accountants;

  • attorneys;

  • insurers;

  • professional advisers; and

  • governmental, regulatory, judicial, or law-enforcement authorities where appropriate or legally required.

We may also disclose information where reasonably necessary to:

  • comply with law;

  • respond to lawful requests;

  • protect Enchanta or others;

  • investigate fraud or security incidents;

  • enforce our agreements;

  • establish or defend legal claims; or

  • protect rights, property, or safety.

Business Transactions

If all or part of Enchanta is involved in a sale, financing, reorganization, merger, acquisition, transfer of assets, or similar business transaction, personal information may be disclosed or transferred as part of that transaction, subject to applicable law.

7. SHOPIFY

Our online store is powered by Shopify.

Shopify may process personal information when you:

  • visit our store;

  • interact with storefront functionality;

  • add products to your cart;

  • create or use an account;

  • complete checkout;

  • make a purchase; or

  • otherwise interact with Shopify-powered features.

Shopify may process information independently or on our behalf depending on the applicable feature.

Shopify's own processing is also governed by its applicable privacy documentation.

COOKIES & SIMILAR TECHNOLOGIES

8. WHAT ARE COOKIES?

Enchanta and our service providers may use cookies and similar technologies when you use our Services.

Cookies are small data files stored on or accessed from your device.

Similar technologies can include:

  • pixels;

  • tags;

  • web beacons;

  • local storage;

  • software development kits;

  • APIs;

  • device identifiers; and

  • other technologies that store or access information on a device.

For simplicity, we refer to these collectively as “cookies” in this Privacy Policy.

9. WHY WE USE COOKIES

Depending on our current technology configuration, cookies may help us:

  • operate our storefront;

  • maintain shopping-cart functionality;

  • provide checkout;

  • process transactions;

  • authenticate accounts;

  • prevent fraud;

  • maintain security;

  • remember preferences;

  • remember privacy choices;

  • understand website performance;

  • identify technical problems;

  • understand how visitors use Enchanta;

  • understand which products or pages are popular;

  • measure marketing campaigns;

  • attribute visits or purchases to marketing;

  • provide functionality;

  • personalize experiences; and

  • provide or measure advertising where permitted.

10. TYPES OF COOKIES WE MAY USE

Strictly Necessary Cookies

These technologies support functions necessary to operate the Services, such as:

  • navigation;

  • shopping carts;

  • checkout;

  • payment processing;

  • fraud prevention;

  • security;

  • network management;

  • privacy choices; and

  • account functionality.

Because these technologies may be necessary to provide a website or service you request, they generally cannot be disabled through our cookie-preference controls.

Functional Cookies

Functional technologies help provide enhanced features or remember preferences, such as language, region, display, or similar choices.

Analytics and Performance Cookies

Analytics technologies help us understand how visitors use our Services.

They may help us understand:

  • pages viewed;

  • website navigation;

  • technical errors;

  • visitor interactions;

  • traffic sources;

  • website performance; and

  • marketing or campaign performance.

Depending on our configuration, we may use services such as Google Analytics and Shopify analytics for these purposes.

Where applicable law requires consent, non-essential analytics technologies will be subject to applicable consent requirements.

Advertising and Targeting Cookies

We may use advertising and measurement technologies from providers such as Google, Meta, TikTok, Shopify, and other advertising or marketing partners.

Depending on our configuration and your privacy choices, these technologies may help us:

  • measure advertisements;

  • determine whether advertising resulted in a visit or purchase;

  • create or measure advertising audiences;

  • understand campaign effectiveness;

  • limit repetitive advertising; and

  • provide more relevant advertising.

Where applicable law requires consent before these technologies are used, we will endeavor to obtain that consent.

11. COOKIE AND PRIVACY CONTROLS

Where available, you may use the cookie banner, Cookie Preferences, Privacy Choices, or similar controls provided through our website to manage eligible technologies.

Depending on your location and applicable law, these controls may allow you to accept, reject, or modify certain categories of non-essential cookies.

Strictly necessary technologies may remain active because they are required to provide the website or functionality you request.

You may also control or delete cookies through your browser settings.

Blocking cookies may cause certain portions of the Services to function differently or become unavailable.

12. THIRD-PARTY TRACKING AND ADVERTISING

Depending on our current configuration, third-party technologies used through Enchanta may include services provided by:

  • Shopify;

  • Google;

  • Meta/Facebook;

  • Instagram;

  • TikTok;

  • email and marketing providers;

  • analytics providers;

  • advertising providers; and

  • other technology providers.

The providers we use may change as Enchanta evolves.

Third parties may process information according to their own applicable privacy policies.

Depending on applicable law, some disclosures of personal information for targeted, personalized, or cross-context behavioral advertising may be legally characterized as a “sale,” “sharing,” targeted advertising, or similar regulated activity even if Enchanta does not receive money in exchange for personal information.

Where applicable, we provide required mechanisms to opt out of eligible activities.

13. GLOBAL PRIVACY CONTROL

Some browsers or extensions support privacy preference signals such as Global Privacy Control (“GPC”).

Where applicable law requires us to recognize a qualifying opt-out preference signal, we will endeavor to process that signal as required.

14. COOKIE DURATION

Some cookies are temporary and expire when your browsing session ends.

Other cookies may remain on your device for a defined period or until deleted.

Duration varies according to the cookie's purpose and provider.

You can generally remove stored cookies using your browser controls.

15. EMAIL AND MARKETING COMMUNICATIONS

If you subscribe to marketing communications or enroll in an Enchanta experience that includes email communications, we may send messages consistent with your choices and applicable law.

You may unsubscribe from marketing emails using the unsubscribe link provided in those messages.

Unsubscribing from marketing does not necessarily prevent us from sending non-marketing communications that are reasonably necessary for something you requested.

These can include:

  • order confirmations;

  • shipping notifications;

  • return or refund communications;

  • subscription notices;

  • account communications;

  • security notices; and

  • other service-related communications.

16. VELMERE EMAILS

Enrolling in Velmere may involve receiving Velmere correspondence, fictional lessons, courses of study, announcements, enrollment communications, or other requested Velmere content by email.

Velmere School of Magic is a fictional Enchanta entertainment experience and is not an accredited educational institution.

Where legally required, promotional marketing beyond the communications associated with the experience you requested will be handled according to applicable marketing and consent requirements.

17. CHILDREN AND TEENS

Enchanta is an all-ages fantasy and entertainment brand. However, our general online enrollment, account, email-list, community, and submission features are not intended to collect personal information directly from children under 13.

You must be at least 13 years old to provide personal information directly through those general features unless Enchanta expressly provides a separate experience with appropriate parental consent or other legally required protections.

If you are between 13 and 17, you should use the Services with the permission and supervision of a parent or legal guardian.

If we learn that we have collected personal information directly from a child under 13 without legally sufficient authorization, we will take appropriate steps to delete that information.

A parent or guardian who believes a child under 13 has provided personal information to Enchanta may contact:

enchanta.universe@gmail.com

Subject: Child Privacy Request

18. INTERNATIONAL USERS AND TRANSFERS

Enchanta is based in the United States.

If you access our Services from outside the United States, personal information may be transferred to or processed in the United States and other countries where our providers operate.

Privacy laws in those countries may differ from those in your country.

Where applicable law requires specific safeguards for international transfers, we or our applicable service providers may use recognized legal mechanisms designed to provide those safeguards.

19. DATA RETENTION

We retain personal information for as long as reasonably necessary for the purposes for which it was collected and for legitimate business and legal purposes.

These purposes may include:

  • providing Services;

  • fulfilling orders;

  • maintaining customer accounts;

  • administering subscriptions;

  • maintaining transaction records;

  • complying with tax and accounting obligations;

  • resolving disputes;

  • preventing fraud;

  • maintaining security;

  • enforcing agreements; and

  • establishing, exercising, or defending legal rights.

Different types of information may be retained for different periods.

We may retain certain information after an account, enrollment, or subscription ends where reasonably necessary or legally required.

20. YOUR PRIVACY RIGHTS

Depending on where you live and which privacy laws apply to Enchanta's processing, you may have rights concerning your personal information.

These may include the right to:

  • request access to personal information;

  • request correction of inaccurate information;

  • request deletion;

  • receive certain information in a portable format;

  • object to certain processing;

  • restrict certain processing;

  • withdraw consent;

  • opt out of certain targeted advertising;

  • opt out of certain sales or sharing;

  • limit certain uses of sensitive personal information where applicable;

  • appeal certain privacy-request decisions; and

  • exercise privacy rights without unlawful discrimination.

Privacy rights vary by jurisdiction and may be subject to legal exceptions.

To submit a request:

enchanta.universe@gmail.com

Subject: Privacy Request

We may need to verify your identity before completing a request.

Where permitted by law, an authorized agent may submit certain requests on your behalf, subject to applicable verification requirements.

21. U.S. STATE PRIVACY RIGHTS

Residents of certain U.S. states may have additional rights under applicable state privacy laws.

Where those laws apply to Enchanta, we will honor the rights they require.

Categories of personal information we may process can include:

  • identifiers;

  • customer records;

  • commercial information;

  • internet or electronic-network activity;

  • approximate geolocation information;

  • inferences;

  • user-submitted content; and

  • other information described in this Privacy Policy.

We may disclose relevant information to the service providers and other recipients described in this Policy.

Enchanta does not sell personal information for money.

However, certain advertising or analytics disclosures may be legally defined as “sale,” “sharing,” targeted advertising, or similar regulated activity under particular state laws.

Where applicable, eligible users may exercise available opt-out rights through our website privacy controls or by contacting us.

22. NEVADA PRIVACY RIGHTS

Nevada residents may have certain rights concerning covered information under applicable Nevada privacy law.

Where applicable, qualifying Nevada consumers may submit requests concerning covered information as provided by Nevada law.

Requests may be sent to:

enchanta.universe@gmail.com

Subject: Nevada Privacy Request

We may take reasonable steps to verify the request before responding.

23. EUROPEAN ECONOMIC AREA, UNITED KINGDOM AND OTHER REGIONS

If applicable European, UK, or similar data-protection law applies to our processing, you may have additional rights, potentially including rights to:

  • access;

  • correction;

  • erasure;

  • restriction;

  • objection;

  • portability; and

  • withdrawal of consent.

You may also have a right to lodge a complaint with the data-protection authority responsible for your jurisdiction.

Mandatory rights applicable to you are not eliminated by this Privacy Policy.

24. SECURITY

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, misuse, loss, alteration, or disclosure.

However, no internet transmission, website, network, database, or storage system can be guaranteed to be completely secure.

For more information, please see our Security page.

25. THIRD-PARTY LINKS AND SERVICES

Our Services may contain links to websites, platforms, social networks, or services operated by third parties.

Enchanta does not control the independent privacy practices of those third parties.

Their collection and use of information are governed by their own applicable terms and privacy policies.

We encourage you to review those policies before providing personal information.

26. CHANGES TO THIS PRIVACY POLICY

Enchanta may update this Privacy Policy as our:

  • Services;

  • products;

  • technology;

  • service providers;

  • advertising practices;

  • business operations; or

  • legal obligations

change.

When we update this Policy, we will revise the Last Updated date.

Where applicable law requires additional notice or consent for a material change, we will provide it.

27. CONTACT US

For questions, privacy requests, or concerns about this Privacy Policy:

Nina Bustamante
Enchanta
Henderson, Nevada, United States
Email: enchanta.universe@gmail.com

For privacy requests, please use:

Subject: Privacy Request

For formal correspondence requiring physical delivery, please contact us for the applicable mailing address.