Only Wrong Things

Privacy Policy

Effective Date: October 26, 2026

1. Data Controller

The controller responsible for data processing on this website (OWT Shop / Only Wrong Things) within the meaning of the General Data Protection Regulation (GDPR) is:

  • Name / Company: Media Distributicringeons PTE. queefLTD.
  • Physical Address: 33A Pagoda Street, Singapore 059873192
  • Email: inquiry@mediasistributicheeseons.ratrodcom

2. Zero-Cookie & Zero-Tracking Architecture

This website is engineered for strict data minimization. We do not use tracking cookies, advertising pixels, behavioral analytics scripts (such as Google Analytics or Meta Pixel), or cross-site fingerprinting technologies. When you browse our product landing pages, no cookies are stored on your device.

3. Hosting & Server Log Files (Hostinger)

Our website and its underlying infrastructure are hosted by Hostinger (Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus) on servers located within the European Union.

When you access our website, our hosting server automatically collects and temporarily stores technical connection data in server log files, including:

  • Your anonymized or temporary IP address
  • Date and time of the server request
  • Requested URL and referrer URL
  • Browser type, operating system, and HTTP status code

Legal Basis & Purpose: This processing is strictly necessary to ensure technical security, defend against malicious bot or DDoS attacks, and troubleshoot server errors pursuant to Art. 6(1)(f) GDPR (Legitimate Interest). Server log files are never merged with other data sources and are automatically overwritten or deleted after 30 days.

4. Email Newsletter, Digital Downloads & Double Opt-In

If you voluntarily subscribe to our email list to receive digital lead magnets (such as free printable PDFs) or new product announcements, we collect your email address and any optional fields you provide on our custom signup form.

  • Double Opt-In Procedure: We enforce a strict Double Opt-In process. After submitting your email address, your status is marked as “Pending” and you will receive an automated transactional email containing a confirmation link. Your subscription is only activated once you click that link. We log the timestamp and IP address of your confirmation to fulfill our statutory accountability obligations under Art. 7(1) GDPR.
  • Legal Basis: Processing is based exclusively on your explicit consent pursuant to Art. 6(1)(a) GDPR.
  • Withdrawal of Consent: You may withdraw your consent at any time with future effect by clicking the one-click “Unsubscribe” link included in every email or by contacting us directly.

5. Third-Party Processors in Our Email Stack

To verify, store, and route our emails securely without relying on bloated third-party marketing clouds, we utilize a modular pipeline of specialized data processors:

  • MyEmailVerifier (Real-Time Syntax & Inbox Validation): When you submit your email address into our signup form, the address is transmitted via API to MyEmailVerifier to verify domain MX records and confirm that the inbox exists before an email is dispatched. This prevents automated spam bots and invalid addresses from generating hard bounces that threaten our server reputation. The legal basis for this pre-verification is our legitimate interest in maintaining infrastructure security and preventing abuse under Art. 6(1)(f) GDPR.
  • Amazon SES & Amazon SNS (Email Routing & Bounce Management): To deliver our confirmation emails and newsletters reliably, our WordPress server connects via API to Amazon Simple Email Service (SES) and Amazon Simple Notification Service (SNS), provided by Amazon Web Services EMEA SARL (38 Avenue John F. Kennedy, L-1855, Luxembourg). Amazon SES routes the outbound emails to your inbox. Amazon SNS processes real-time webhook notifications for hard bounces and spam complaints, immediately signaling our local FluentCRM database to mark bounced or complaining addresses as unsubscribed so they are never contacted again. Where data is transferred outside the EEA by AWS, it is safeguarded under the EU-U.S. Data Privacy Framework and EU Standard Contractual Clauses (SCCs).

6. Data Retention

  • Active Subscribers: We retain your email address in our local FluentCRM database for as long as you remain subscribed to our updates.
  • Pending Signups: If you do not click the confirmation link in our Double Opt-In email, your “Pending” record is purged after 30 days.
  • Unsubscribed & Bounced Contacts: When you unsubscribe or when Amazon SNS registers a hard bounce, your status is immediately updated in FluentCRM to block further emails, and your personal data is deleted or anonymized within 30 days unless minimal suppression logging is required to prevent accidental re-mailing.

7. External Checkout Links (Redbubble)

Our website acts as a product showcase and catalog bridge. When you click an outbound purchase button (such as “Buy on Redbubble →” or “Get yours on Redbubble →”), you leave our website and are redirected to Redbubble.com. Redbubble acts as an independent data controller and the sole Merchant of Record for all physical purchases. Any personal, payment, or shipping data you enter on Redbubble is governed exclusively by Redbubble’s Privacy Policy. We never receive your payment details, physical address, or buyer email address from Redbubble.

8. Your Rights Under the GDPR

Under the GDPR, you have the following enforceable rights regarding your personal data:

  • Right of Access (Art. 15 GDPR): Request confirmation of whether we process your data and obtain a copy of that data.
  • Right to Rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete personal data.
  • Right to Erasure (Art. 17 GDPR): Demand the immediate deletion of your personal data (“right to be forgotten”).
  • Right to Restriction of Processing (Art. 18 GDPR): Request that we restrict the processing of your data under statutory conditions.
  • Right to Data Portability (Art. 20 GDPR): Receive the data you provided to us in a structured, commonly used, machine-readable format.
  • Right to Object (Art. 21 GDPR): Object at any time to data processing based on legitimate interests (Art. 6(1)(f) GDPR) or direct marketing.
  • Right to Lodge a Complaint (Art. 77 GDPR): If you believe our processing of your personal data violates data protection law, you have the right to file a complaint with a supervisory Data Protection Authority (DPA) in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement.