Privacy Policy

Well Woven Inc. (“Well Woven,” “we,” “us,” or “our”) is a home décor and rug company headquartered in Easton, Pennsylvania. We sell products through our website at wellwoven.com, our wholesale portal at wwoven.com, and through third-party marketplaces including Amazon, Wayfair, TikTok Shop, and other retail channels.

This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit our websites, make a purchase, interact with our advertising, or communicate with us. It applies to all personal information we collect, regardless of the channel through which it is collected.

• Directly from you when you place an order, create an account, sign up for emails or texts, contact customer service, or otherwise communicate with us
• Automatically through cookies, pixels, tags, and similar tracking technologies when you browse our websites (see Section 6)
• From third-party platforms when you purchase our products through marketplaces like Amazon, Wayfair, or TikTok Shop
• From advertising and analytics partners when you interact with our advertisements on other websites and platforms

• Order fulfillment: Processing and shipping your orders, sending order confirmations and shipping updates, handling returns and exchanges, and providing customer support
• Communication: Responding to your inquiries, sending transactional emails, and, with your consent, sending promotional emails, newsletters, and SMS messages
• Website improvement: Analyzing how visitors use our site so we can improve navigation, content, product selection, and overall user experience
• Personalization: Recommending products based on your browsing and purchase history and tailoring content to your interests
• Advertising: Delivering targeted advertisements on third-party platforms based on your browsing and shopping activity, measuring the effectiveness of our ad campaigns, and building audience segments for advertising purposes
• Fraud prevention and security: Detecting and preventing fraudulent transactions, unauthorized access, and other security threats
• Legal compliance: Complying with applicable laws, regulations, and legal processes, and enforcing our terms of service

We share your personal information with the following categories of third parties:

When we share data with advertising partners for targeted advertising, this may be considered a “sale” or “sharing” of personal information under certain state privacy laws. See Sections 12 and 13 for your opt-out rights.

Marketplace platforms such as Amazon, Wayfair, and TikTok Shop, to the extent necessary to fulfill orders placed through those channels.

Professional advisors including lawyers, accountants, and insurance providers as needed to operate our business.

Law enforcement and government authorities when required by law, subpoena, court order, or other legal process, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business transfers: If Well Woven is involved in a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred as part of that transaction. We will notify you of any such change by updating this policy.

We do not sell your personal information for monetary consideration. However, sharing data with advertising partners for targeted advertising purposes may constitute a “sale” or “sharing” under certain state laws (see Section 12).

We use cookies, pixels, web beacons, and similar technologies to collect information about your browsing activity on our site.

We participate in interest-based advertising, which involves collecting information about your browsing and shopping activity on our website and using that information to deliver advertisements that are more relevant to your interests on third-party platforms and websites.

This may involve showing you ads on Facebook, Instagram, Google, TikTok, Pinterest, and other platforms based on your visits to wellwoven.com; creating custom audiences and lookalike audiences using customer information such as email addresses (in hashed form); retargeting you with ads for products you viewed or added to your cart; and measuring which ads lead to purchases or other actions.

Under certain state privacy laws, these activities may constitute the “sale” or “sharing” of personal information. You have the right to opt out — see Sections 13 and 14.

We use artificial intelligence and automated tools in the following ways:

• Product recommendations: Our website and email campaigns may use automated algorithms to suggest products based on your browsing history, purchase history, and the behavior of similar customers.
• Ad targeting and optimization: Advertising platforms use machine learning algorithms to determine which of our ads to show you, when, and on which platform.
• Email personalization: Our email marketing platform uses automated segmentation and predictive analytics to determine which emails and product recommendations to send you.
• Fraud detection: Our payment processors and e-commerce platform use automated systems to detect and flag potentially fraudulent transactions.
• Customer service: We may use AI-powered tools to assist with responding to customer inquiries. When AI is involved in customer interactions, we aim to make that clear.

None of these systems make decisions with legal or similarly significant effects on you without human review. We do not use your personal information to train AI models, and your data is not shared with AI providers for their own model training purposes.

You may opt out of personalized product recommendations and targeted advertising by contacting us at service@wellwoven.com or using the opt-out mechanisms in Sections 13 and 14.

• Order and transaction records (order ID, SKU, quantity, totals, dates, tax amounts): At least seven years for tax and accounting obligations.
• Order PII (recipient name, shipping address, phone, email): Up to 30 days after order fulfillment, except where extended retention is required by law or to resolve a dispute. After that period, PII is purged or redacted; non-PII transaction records are retained as above.
• Account information: As long as your account is active. You may request deletion at any time.
• Email marketing data: Until you unsubscribe. We retain a suppression record to ensure we do not contact you again.
• Website analytics data: Up to 26 months in identifiable form, after which it is aggregated or deleted.
• Customer service records: Up to three years.
• Cookie data: Session cookies expire when you close your browser. Persistent cookies have varying expiration dates (typically 30 days to 2 years).

When your data is no longer needed, we delete or anonymize it using commercially reasonable methods.

We take reasonable measures to protect your personal information, including:

• SSL/TLS encryption for data transmitted between your browser and our website
• PCI-DSS compliance for payment card processing (credit card data is handled by our PCI-compliant payment processor and is not stored on our servers)
• Access controls limiting employee access to personal information on a need-to-know basis
• Regular monitoring of our systems for potential vulnerabilities

While we strive to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee the absolute security of your data.

Depending on where you live, you may have some or all of the following rights:

• Right to know/access: Request a copy of the personal information we have collected about you.
• Right to correct: Request that we correct inaccurate personal information.
• Right to delete: Request that we delete your personal information, subject to certain legal exceptions.
• Right to portability: Request a copy of your data in a portable, machine-readable format.
• Right to opt out of sale/sharing: Opt out of the sale or sharing of your personal information for targeted advertising.
• Right to opt out of profiling: Opt out of automated profiling that produces legal or similarly significant effects.
• Right to limit use of sensitive data: Where applicable, limit our use of sensitive personal information.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to appeal: If we deny your privacy request, you have the right to appeal.

You have the right to opt out. While we do not sell personal information for money, we share data with advertising platforms for targeted advertising, which certain state laws classify as a “sale” or “sharing.”

When you opt out, we will disable advertising cookies and pixels that share your browsing data with third-party advertising platforms. You may still see our ads, but they will not be personalized based on your activity on wellwoven.com.

We recognize and honor the Global Privacy Control (GPC) signal. If your browser or browser extension sends a GPC signal, we will treat it as a valid request to opt out of the sale and sharing of your personal information, as well as a request to opt out of targeted advertising.

You can enable GPC in supported browsers (such as Firefox, Brave, and DuckDuckGo) or by installing a browser extension. Learn more at globalprivacycontrol.org.

If you opt in to receive SMS or text messages from Well Woven:

• You may receive recurring automated marketing and transactional text messages. Message frequency varies.
• Message and data rates may apply depending on your carrier plan.
• Opt out at any time by replying STOP to any message or contacting service@wellwoven.com.
• Reply HELP for assistance.
• We will not sell, rent, or share your phone number with third parties for their marketing purposes.
• SMS consent is not a condition of any purchase.

Our website and services are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at service@wellwoven.com, and we will promptly delete that information.

We do not use personal information from any known minor for targeted advertising purposes.

Our website and services are designed for users in the United States. If you access our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

By using our website or providing us with your information, you acknowledge this transfer. If you have questions, contact service@wellwoven.com.

Our website may contain links to third-party websites, including marketplace platforms, social media platforms, and other external sites. This Privacy Policy does not apply to those sites. We encourage you to review their privacy policies before providing them with your personal information.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last Updated” date at the top of this page and provide notice through our website or by email.

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or want to file a complaint:

For privacy-specific requests, please email service@wellwoven.com with a clear description of your request. We aim to respond within 45 days.

This section applies in addition to the rest of this Privacy Policy when we receive personal information from Amazon to fulfill orders placed on Amazon’s marketplace, and when we use Amazon’s Selling Partner API and Amazon Advertising API for internal performance analytics.