Privacy Policy

Elfin Adventures – Last updated: June 2026

A Note Before We Begin

At Elfin Adventures, we take privacy seriously — especially because our service involves children. This policy explains clearly what information we collect, how we use it, who we share it with, and what rights you have. We have tried to write this in plain language rather than legal jargon, because we believe you deserve to actually understand it.

If you have questions, please contact us at: admin@elfinadventures.com

Elfin Adventures is a children’s subscription service that delivers monthly story letters and activity content from Elf Academy’s Aurora Class. We are operated as a sole proprietorship under the name Elfin Adventures™.

Website: https://elfinadventures.com Contact: admin@elfinadventures.com

When you purchase a subscription or create an account, we collect:

Your name
Your email address
Your billing address
Your payment information (processed securely by WooPayments — we do not store your full credit card details)
Your subscription type and status

From Physical Subscription Tiers

If you subscribe to a plan that includes physical mail delivery (Pen Pal, Explorer, or Academy Scholar tiers), we also collect your mailing address in order to deliver your monthly letter and materials.

From Gift Recipients

If someone purchases a subscription as a gift and designates you as the recipient, we receive your email address in order to create your account and grant you access to member content.

From Our “Tell Us About Your Elf” Onboarding Form

After subscribing, we invite you to complete an optional onboarding form. This form collects:

Your child’s first name (or children’s first names)
Your child’s date of birth (including birth year)

Your child’s full date of birth allows us to send a personalized birthday greeting each year — including your child’s age — from Miss Inkwell and the Aurora Class. We do not use this information for any other purpose.

This form is optional. You may use the service without completing it. You will simply receive non-personalized content.

From Google Login (Optional)

If you choose to log in using your Google account, Google shares your name and email address with us for authentication purposes. We do not receive your Google password.

Automatically Collected Information

Like most websites, we automatically collect basic technical information when you visit, including your IP address, browser type, and pages visited. This information is used for security and to understand how our site is used. We do not sell this information.

Elfin Adventures is a service for children but operated by and with their parents and guardians. We do not knowingly collect personal information directly from children under the age of 13.

All account creation, subscription management, and data submission is done by parents or guardians on behalf of their children. The child information we collect (first name and date of birth) is provided by a parent or guardian and is used only to personalize the subscription experience.

If you believe we have inadvertently collected information directly from a child under 13 without parental consent, please contact us immediately at admin@elfinadventures.com and we will delete it promptly.

We use the information we collect to:

Process your subscription and manage billing
Grant access to member-only content on our website
Send your monthly content notification — an email letting you know the new letter is available
Send personalized birthday greetings to your child, including their age (if you provided their date of birth)
Send subscription renewal reminders to gift purchasers before their subscription expires
Deliver physical mail to your address (physical subscription tiers only)
Respond to your questions and provide customer support
Improve our content and service based on feedback and ratings you provide

We do not use your information for advertising. We do not sell your information to third parties. Ever.

Running a subscription service requires working with trusted third-party platforms. We are transparent about who those are and why. We share your information only with the services listed below, and only to the extent necessary to operate Elfin Adventures.

WooPayments / Stripe

Processes your payment securely. Your payment information is handled according to their privacy policy and PCI compliance standards. We do not store your full credit card number.

Klaviyo

We use Klaviyo, an email marketing and customer relationship platform, to send subscription emails, content notifications, birthday greetings, and renewal reminders. Your name, email address, subscription status, and child information (if provided) are stored in Klaviyo on our behalf.

Klaviyo is SOC 2 Type II certified and maintains enterprise-grade security standards. You can review their privacy policy at klaviyo.com/legal/privacy-notice.

Zapier

We use Zapier to securely pass information between our onboarding form and Klaviyo. Zapier acts as a connector and does not store your personal data beyond what is needed to complete the transfer.

WPForms

The onboarding form you complete after subscribing is built using WPForms. Form submissions are processed and passed to Klaviyo via Zapier. We do not retain form data in WordPress long-term.

Google (OAuth Login)

If you choose to log in with Google, your authentication is handled by Google’s OAuth service. We receive only your name and email address. Google’s privacy policy applies to this interaction.

Our Web Host (Hostinger)

Our website and its database are hosted by Hostinger. Basic account information lives on their servers. Hostinger maintains standard security practices for web hosting.

We do not share your information with any other third parties without your explicit consent.

Our website uses cookies to keep you logged in and to remember your preferences. We do not use advertising cookies or cookies that track you across other websites.

If you are a California resident, you have the right under the California Consumer Privacy Act (CCPA) to know what personal information is collected about you, to request deletion of your personal information, and to opt out of the sale of your personal information. We do not sell personal information. To exercise your rights, contact us at admin@elfinadventures.com.

A cookie consent notice will appear when you first visit our site, giving you the option to manage your cookie preferences.

Active subscriber data is kept for as long as your subscription is active plus 12 months after cancellation, in case you wish to resubscribe.
Child information (name and date of birth) is kept for as long as your subscription is active. You may request deletion at any time.
Billing records are kept for 7 years as required for tax and accounting purposes.
Email communication history is kept for up to 3 years.

You have the right to:

Access the personal information we hold about you
Correct any inaccurate information
Delete your personal information (subject to legal retention requirements)
Withdraw consent for optional data uses (such as birthday personalization)
Cancel your subscription at any time through your account dashboard

To exercise any of these rights, contact us at admin@elfinadventures.com. We will respond within 30 days.

We take the security of your family’s information seriously, and have made deliberate choices to protect it:

All connections to our website are encrypted using HTTPS
Passwords are stored using one-way hashing — we cannot see your password, and neither can anyone else
Sensitive personal data, including your child’s name and date of birth, is stored in Klaviyo — a SOC 2 Type II certified platform with enterprise-grade security — rather than in our website database
Payment processing is handled entirely by Stripe/WooPayments, which is PCI DSS compliant — your full card details never touch our servers
We regularly review our data practices and the security of the platforms we use

We believe that collecting less data, storing it in fewer places, and choosing certified platforms is the most responsible approach for a service trusted by families.

If you ever have a concern about the security of your information, please contact us immediately at admin@elfinadventures.com.

If we make significant changes to this privacy policy, we will notify active subscribers by email before the changes take effect. The “last updated” date at the top of this page will always reflect the most recent version.

If you have any questions, concerns, or requests related to your privacy, please contact us:

Email: admin@elfinadventures.com Website: https://elfinadventures.com/contact