Privacy Policy

Last Updated: April 6, 2026 · Effective Date: April 6, 2026

Key Points

This is a summary of our privacy practices. The full details follow below.

- What we collect: Business contact information (name, email, phone, company name, shipping/billing address), order and account data, and website browsing activity. - Why we collect it: To fulfill wholesale orders, manage trade accounts, communicate about products and promotions, and improve our website. - Who we share it with: Service providers that help us operate our business — payment processors, shipping carriers, email marketing platforms, and analytics tools. We do not sell your personal information for money. - Your rights: Depending on your state, you may have the right to access, correct, delete, or port your data, and to opt out of targeted advertising and data sharing. - How to reach us: Email privacy@wellwoven.com or call 973-689-9261.

1. Who We Are

Well Woven Inc. (“Well Woven,” “we,” “us,” or “our”) is a home décor and rug company headquartered in Easton, Pennsylvania. This policy applies to our wholesale and trade website at wwoven.com, which serves retailers, designers, hospitality buyers, and other business customers.

Well Woven also operates a direct-to-consumer website at wellwoven.com, which is governed by a separate privacy policy available on that site.

Well Woven Inc. Easton, PA Phone: 973-689-9261 Email: privacy@wellwoven.com

2. What Information We Collect

Information you provide directly

Business contact information including your name, job title, company name, email address, phone number, and mailing address.

Trade account application details such as business type, resale certificate or tax ID, trade references, and years in business.

Billing and payment information including billing address and payment method details (credit card numbers are processed by our payment processor and are not stored on our servers).

Order information including products purchased, quantities, pricing tiers, and shipping preferences.

Communications you send us, including inquiries about products, pricing, availability, custom orders, and customer service requests.

Information you provide when subscribing to our wholesale newsletters, product launch announcements, or promotional emails.

Information collected automatically

Device information such as your IP address, browser type and version, operating system, device type, and screen resolution.

Browsing information including pages visited, products viewed, time spent on pages, links clicked, referring and exit URLs, and search terms used on our site.

Location information derived from your IP address (approximate city, state, country).

Cookie and tracking data as described in Section 7.

3. How We Collect Your Information

Directly from you when you apply for a trade account, place a wholesale order, subscribe to emails, attend a trade show, contact our sales team, or otherwise communicate with us.

Automatically through cookies, pixels, and similar tracking technologies when you browse wwoven.com (see Section 7).

From trade show and industry event organizers when you visit our booth or register interest through event platforms.

From publicly available business directories when our sales team researches potential wholesale partners.

4. How We Use Your Information

Account management: Setting up and maintaining your wholesale trade account, verifying your business credentials, and assigning appropriate pricing tiers.

Order fulfillment: Processing and shipping wholesale orders, generating invoices, managing payment terms, handling returns and claims, and providing order support.

Sales communication: Contacting you about new collections, product availability, pricing updates, promotions, trade show appearances, and other business opportunities.

Email marketing: Sending newsletters, product launch announcements, catalogs, lookbooks, and promotional offers to subscribers (see Section 6).

Website improvement: Analyzing how trade customers use our site to improve navigation, product presentation, and the ordering experience.

Personalization: Tailoring product recommendations, pricing, and content based on your account history and browsing activity.

Advertising: If and when we run digital advertising campaigns, delivering targeted ads and measuring their effectiveness (see Section 8).

Fraud prevention and security: Detecting and preventing fraudulent orders, unauthorized account access, and other security threats.

Legal compliance: Complying with applicable laws and regulations, enforcing our terms of service and wholesale agreements, and collecting outstanding receivables.

5. How We Share Your Information

We share your personal information with the following categories of third parties:

Service providers that help us operate our business, including payment processors (such as Shopify Payments), shipping and freight carriers (such as FedEx and common carriers), email marketing platforms (such as Klaviyo), cloud hosting and e-commerce platforms (such as Shopify), analytics providers (such as Google Analytics), CRM and sales tools, and ERP and accounting systems.

Advertising partners, if and when we run digital advertising campaigns, with whom we may share or make available certain information for advertising purposes.

Professional advisors including lawyers, accountants, and insurance providers as needed.

Credit and collections agencies if necessary to collect outstanding receivables on delinquent trade accounts, in accordance with applicable law.

Law enforcement and government authorities when required by law, subpoena, court order, or other legal process, or when we believe disclosure is necessary to protect our rights or the safety of others.

Business transfers: If Well Woven is involved in a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred as part of that transaction.

We do not sell your personal information for monetary consideration. If we share data with advertising partners for targeted advertising in the future, that may constitute a “sale” or “sharing” under certain state laws (see Sections 13 and 14).

6. Email Marketing

We may send you commercial email communications about new product lines, collections, promotions, trade show appearances, industry news, and other information relevant to your business. We send marketing emails through our email marketing platform (currently Klaviyo).

What we track: When you receive our emails, our email platform may collect information about whether you opened the email, which links you clicked, and the device and location from which you opened it. We use this information to improve our communications and send you more relevant content.

How to opt out: Every marketing email we send includes an unsubscribe link at the bottom. You may also opt out by emailing privacy@wellwoven.com or contacting your Well Woven sales representative. We will process your unsubscribe request promptly — typically within 2 business days, and no later than 10 business days as required by the CAN-SPAM Act.

What continues after unsubscribing: Opting out of marketing emails does not affect transactional communications. You will continue to receive order confirmations, shipping notifications, invoices, payment reminders, and other messages necessary to service your trade account.

Suppression list: After you unsubscribe, we retain your email address on a suppression list solely to ensure we do not send you further marketing emails.

7. Cookies and Tracking Technologies

Essential cookies

Essential cookies are required for the website to function. These include Shopify session and cart cookies that maintain your browsing session, keep items in your cart, and process checkout; authentication cookies that keep you logged into your trade account; and security cookies that help prevent fraud.

Analytics cookies

Analytics cookies help us understand how visitors interact with our website. These include Google Analytics (GA4), which collects data about page views, session duration, traffic sources, and user interactions (Google may use this data in accordance with its own privacy policy), and Shopify Analytics, which tracks website performance and sales data within the Shopify platform.

Marketing cookies

Marketing cookies may be used to deliver relevant content and measure the effectiveness of any email or advertising campaigns. These currently include Klaviyo tracking, which tracks on-site browsing behavior to personalize email marketing content and product recommendations.

If we add advertising pixels or tags in the future (such as Google Ads, Meta Pixel, or others), we will update this policy accordingly and provide notice.

How to manage cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies, though doing so may affect the functionality of our website (for example, you may be logged out of your trade account).

8. Advertising and Targeted Marketing

As of the effective date of this policy, we do not actively run digital advertising campaigns that use tracking pixels on wwoven.com.

However, we may in the future participate in interest-based advertising on platforms such as Google, Meta (Facebook/Instagram), LinkedIn, or other advertising networks. If and when we do, this may involve showing you ads on third-party platforms based on your visits to wwoven.com, creating custom audiences using business contact information, retargeting you with ads for products you viewed, and measuring which ads lead to orders.

Under certain state privacy laws, these activities may constitute the “sale” or “sharing” of personal information. If we begin targeted advertising activities, you will have the right to opt out — see Sections 14 and 15. We will update this policy and provide notice before launching any such campaigns.

9. AI and Automated Decision-Making

We use artificial intelligence and automated tools in the following ways:

Product recommendations: Our website may use automated algorithms to suggest products based on your browsing history, order history, and the purchasing patterns of similar trade customers.

Email personalization: Our email marketing platform uses automated segmentation and predictive analytics to determine which product announcements and promotions to send you and when.

Fraud detection: Our payment processors and e-commerce platform use automated systems to detect and flag potentially fraudulent transactions.

Customer service: We may use AI-powered tools to assist with responding to inquiries. When AI is involved in customer-facing interactions, we aim to make that clear.

None of these systems make decisions with legal or similarly significant effects on you without human review.

You may opt out of personalized product recommendations by contacting us at privacy@wellwoven.com. We do not use your personal information to train AI models, and your data is not shared with AI providers for their own model training purposes.

10. Data Retention

We retain your personal information only as long as reasonably necessary for the purposes described in this policy, unless a longer retention period is required by law.

Trade account and order data: We retain records of your account and purchase history for at least seven years to comply with tax and accounting obligations and to service your ongoing wholesale relationship.

Trade account applications: If your application is not approved, we retain application data for up to one year in case you reapply, after which it is deleted.

Email marketing data: We retain your email address and marketing preferences until you unsubscribe. After unsubscription, we retain a suppression record to ensure we do not contact you again.

Website analytics data: Browsing and analytics data is retained in identifiable form for up to 26 months, after which it is aggregated or deleted.

Customer service and sales records: We retain communications for up to five years to support ongoing trade relationships and resolve any disputes.

Cookie data: Session cookies expire when you close your browser. Persistent cookies have varying lifespans (typically 30 days to 2 years).

When your data is no longer needed, we delete or anonymize it using commercially reasonable methods.

11. Data Security

We take reasonable measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include SSL/TLS encryption for data transmitted between your browser and our website, PCI-DSS compliance for payment card processing (credit card data is handled by our PCI-compliant payment processor and is not stored on our servers), access controls limiting employee access to personal information on a need-to-know basis, secure authentication for trade account access, and regular monitoring of our systems for potential vulnerabilities.

While we strive to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee the absolute security of your data.

12. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

Right to know/access: Request a copy of the personal information we have collected about you.

Right to correct: Request that we correct inaccurate personal information.

Right to delete: Request that we delete the personal information we have collected, subject to certain legal exceptions.

Right to portability: Request a copy of your data in a portable, machine-readable format.

Right to opt out of sale/sharing: Opt out of the sale or sharing of your personal information, including sharing for targeted advertising.

Right to opt out of targeted advertising: Opt out of the processing of your personal information for targeted advertising.

Right to opt out of profiling: Opt out of automated profiling that produces legal or similarly significant effects.

Right to limit use of sensitive data: Where applicable, limit our use of sensitive personal information.

Right to non-discrimination: We will not discriminate against you for exercising any of your privacy rights.

Right to appeal: If we deny your request, you have the right to appeal our decision.

How to exercise your rights: Email us at privacy@wellwoven.com, call us at 973-689-9261, or use the “Do Not Sell or Share My Personal Information” link in the footer of our website. We aim to respond within 45 days.

13. State-Specific Disclosures

California (CCPA/CPRA)

If you are a California resident, you have the rights described in Section 12. In addition:

Categories of personal information collected in the preceding 12 months: Identifiers (name, email, phone, mailing address, IP address); commercial information (purchase history, trade account details); internet or electronic network activity (browsing history, interaction data); geolocation data (approximate location from IP address); professional or employment-related information (job title, company name); and inferences drawn from the above.

Categories of personal information disclosed for a business purpose: Identifiers (to shipping carriers, payment processors, email marketing platforms); commercial information (to payment processors, ERP systems, shipping carriers); internet or electronic network activity (to analytics providers, email marketing platforms).

As of the effective date, we do not actively sell or share personal information for cross-context behavioral advertising through wwoven.com.

California’s “Shine the Light” law (Civil Code § 1798.83) permits California residents to request information about disclosures to third parties for their direct marketing purposes. Contact privacy@wellwoven.com.

Other states

Residents of Virginia, Colorado, Connecticut, Texas, Oregon, Montana, Delaware, New Hampshire, New Jersey, Nebraska, Iowa, Tennessee, Indiana, Kentucky, Rhode Island, Minnesota, and Maryland have rights to access, correct, delete, and port their data, and to opt out of targeted advertising and the sale of personal information. Contact privacy@wellwoven.com to exercise your rights.

Of special note: Maryland restricts the sale of sensitive data entirely. Minnesota grants the right to question profiling results. Rhode Island has no cure period for violations. Colorado, Connecticut, Texas, Oregon, Montana, Nebraska, New Hampshire, New Jersey, Minnesota, Maryland, and Delaware require us to honor universal opt-out signals including Global Privacy Control (see Section 15).

14. Do Not Sell or Share My Personal Information

You have the right to opt out of the sale or sharing of your personal information. While we do not currently sell personal information for money or actively share it with advertising platforms through wwoven.com, we provide this opt-out mechanism to comply with applicable state laws.

To opt out: Email us at privacy@wellwoven.com with the subject line “Do Not Sell or Share,” call us at 973-689-9261, or enable Global Privacy Control in your browser (see Section 15).

15. Global Privacy Control

We recognize and honor the Global Privacy Control (GPC) signal. If your browser or browser extension sends a GPC signal, we will treat it as a valid request to opt out of the sale and sharing of your personal information and of targeted advertising, as required by applicable state laws.

You can enable GPC in supported browsers (such as Firefox, Brave, and DuckDuckGo) or by installing a browser extension.

16. Children’s Privacy

Our website and services are directed at business customers and are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at privacy@wellwoven.com, and we will promptly delete it.

17. International Visitors

Our website and services are designed for and directed at business customers in the United States. If you access wwoven.com from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

By using our website or providing us with your information, you acknowledge this transfer.

18. Third-Party Links

Our website may contain links to third-party websites, including supplier sites, industry resources, and social media platforms. This Privacy Policy does not apply to those sites. We encourage you to review their privacy policies before providing personal information.

19. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make changes, we will update the “Last Updated” date at the top of this page.

We encourage you to review this policy periodically. If we make significant changes that materially affect your rights, we will provide notice through our website or by email.

20. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or want to file a complaint, you may reach us at:

Well Woven Inc. Easton, Pennsylvania Phone: 973-689-9261 Email: privacy@wellwoven.com

For privacy-specific requests, please email privacy@wellwoven.com with a clear description of your request. We aim to respond within 45 days.

Questions about this policy? Contact us at privacy@wellwoven.com or call 973-689-9261.