Willingham’s Privacy Policy

Effective Date: April 24, 2026

This Privacy Policy describes how Willingham’s collects, uses, shares, and protects your personal information, and explains the choices and rights you have regarding that information.

Information We Collect

When you purchase a product on the Willingham’s website, we collect information you provide to us, which may include your name, email address, phone number, and physical (shipping and billing) address. When you make a payment, we ask for your credit card and billing address. Your credit card information is passed directly to our payment processor and does not pass through our servers. We retain a record of the payment transaction, including the last four digits of the credit card number, for account history, invoicing, and billing support.

Email address. We collect your email address for order management – including order confirmations, shipping notifications, and responses to questions or issues regarding your purchase. An email address is also required if you elect to create a registered account with Willingham’s; account creation is optional and is not required to make a purchase. If you affirmatively opt in (for example, by checking the appropriate box at checkout) to receive promotional emails, we may also use your email address for that purpose, subject to your right to unsubscribe at any time.

Phone number. We collect your phone number solely for order- and shipping-related purposes – for example, to allow our shipping carriers to contact you about delivery, or to allow us to reach you about questions or issues with your order. We do not use your phone number for marketing, and we do not send text messages.

Communications you send us. When you contact us, or we contact you, we collect any information you provide, including the contents of messages or attachments.

Information collected automatically. When you visit our website, our servers and certain third-party tools may automatically collect information including your IP address, browser type, device identifiers, pages viewed, referring URL, and similar usage information. See “Cookies and Tracking Technologies” below for additional detail.

Categories of personal information. For purposes of California and similar state privacy laws, the categories of personal information we collect include: identifiers (such as name, email address, postal address, IP address); commercial information (such as products purchased and transaction history); financial information (limited to the last four digits of payment card numbers and billing address); internet or network activity (such as pages viewed and interactions with our website); and inferences drawn from any of the above. We collect this information directly from you, from your device when you visit our website, and from our service providers (such as our payment processor and shipping carriers).

How We Use Your Information

We use the personal information you provide to:

• Complete and fulfill your orders, including processing payments, arranging shipping, and confirming delivery;
• Maintain a record of your transactions for accounting, invoicing, billing, and tax purposes;
• Respond to your questions, requests, or support inquiries;
• Send you order-related and account-related communications (such as order confirmations, shipping notifications, and account updates);
• Send you promotional emails, if you have opted in to receive them;
• Operate, secure, maintain, and improve our website and our business; and
• Comply with applicable legal obligations, respond to lawful government or regulatory requests, and enforce our policies and agreements.

How We Share Your Information

We do not sell your personal information, and we do not share it with third parties for cross-context behavioral advertising.

We do share personal information with service providers who process information on our behalf, only for the purposes we direct and subject to confidentiality and use-limitation obligations. These service providers include:

• Payment processor – to handle credit card transactions.
• Shipping carriers and fulfillment providers – to deliver your orders.
• Email service provider (Constant Contact) – to send transactional emails and (where you have opted in) promotional emails.
• Website hosting and platform providers – to operate our website and store account and order information.

We may share your personal information in connection with a change of corporate control such as a restructuring, merger, or sale of our assets. With your permission or upon your direction, we may also disclose your personal information to interact with a third party or for other purposes you request.

We may disclose your personal information when required to do so by law, legal process, or a request from a government authority, or to protect our rights, property, or the safety of our customers, employees, or others.

How We Store and Protect Your Information

Retention. We retain different categories of personal information for the periods described below:

• Account information – for as long as you maintain a registered account with us. If you request deletion, we will delete account information as described under “Deleting Your Account.”
• Transactional records (orders, invoices, payment records) – at least seven years, to comply with applicable tax, accounting, and audit obligations.
• Communications – for as long as reasonably necessary to respond to your inquiry, plus a reasonable period thereafter for record-keeping.
• Marketing data (for those who opt in) – until you unsubscribe, plus a short period to process the unsubscribe across our systems.

Security. We use reasonable and appropriate administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, use, disclosure, alteration, or loss. We encrypt sensitive transmissions in transit (for example, using TLS/SSL during checkout), and we limit access to personal information to those who need it to perform their duties. No security measures are 100% effective, however, and we cannot guarantee absolute security.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies, which fall into the following categories:

• Strictly necessary cookies – required for core website functionality, such as adding items to your cart and completing checkout. These cannot be disabled without breaking the website.
• Functional cookies – remember your preferences and improve your browsing experience.
• Analytics cookies – help us understand how visitors use our website so we can improve it.

You can manage cookies through your browser settings. Disabling certain categories may impact your ability to use parts of the website (for example, completing a purchase).

Global Privacy Control (GPC). For residents of jurisdictions where the right to opt out of the sale or sharing of personal information applies (including California), our website honors the Global Privacy Control browser signal as a valid opt-out request. We do not currently respond to other “Do Not Track” browser signals because no industry-standard implementation exists.

Your Rights and Choices

All Users

Email Subscriptions. Promotional emails are sent only if you have opted in to receive them. You may unsubscribe at any time. Because we send email through more than one platform – our website (via WooCommerce/WordPress) and our email service provider Constant Contact – every promotional email contains an unsubscribe link, and clicking it will remove you from the system that sent that particular message. If you wish to be removed from all of our promotional email lists in a single step, please email privacy@willinghams.com and we will ensure removal across all systems. We will continue to send you transactional and order-related emails (such as order confirmations and shipping notifications) regardless of your promotional subscription status, because these are necessary to fulfill your order.

Profile Information. You can review and edit certain account information you have chosen to add to your profile by logging in to your account.

Cookies. See “Cookies and Tracking Technologies” above.

Deleting Your Account. If you would like to delete your Willingham’s account, please send an email request to privacy@willinghams.com. We will verify your request and process it as soon as reasonably practicable. When we delete your account, we may retain certain information for legitimate business purposes or to comply with legal or regulatory obligations (for example, transactional records retained for tax purposes as described above). When we retain such data, we do so in ways designed to prevent its use for other purposes.

California Residents

The California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”), provides California residents with the rights described below.

Right to Know. You have the right to request that we disclose:

• The categories of personal information we have collected about you;
• The categories of sources from which we collected that information;
• The business or commercial purposes for collecting (or, if applicable, selling or sharing) that information;
• The categories of third parties with whom we have shared that information; and
• The specific pieces of personal information we have collected about you.

Right to Delete. You have the right to request that we delete personal information we have collected from you (and direct our service providers to do the same). Common exceptions include where retention is necessary to:

• Complete a transaction or provide a good or service you requested;
• Detect, prevent, or address security incidents, fraud, or illegal activity;
• Debug or repair errors;
• Exercise free speech or another right provided by law;
• Comply with the California Electronic Communications Privacy Act;
• Engage in public-interest research adhering to applicable ethics and privacy laws;
• Comply with a legal obligation; or
• Make other internal and lawful uses compatible with the context in which the information was provided.

Right to Correct. You have the right to request correction of inaccurate personal information we maintain about you.

Right to Opt-Out of Sale or Sharing. Willingham’s does not sell personal information and does not share personal information for cross-context behavioral advertising. If our practices change, this policy will be updated and California residents will be provided a clear means to opt out.

Right to Limit Use and Disclosure of Sensitive Personal Information. Willingham’s does not use or disclose sensitive personal information for purposes beyond those permitted by California law (such as performing the services you requested, security, fraud prevention, and similar operational purposes). California residents therefore do not need to exercise this right with respect to our processing.

Right to Non-Discrimination. We will not discriminate against you for exercising your privacy rights.

Authorized Agents. You may designate an authorized agent to make a request on your behalf. The agent must provide us with written authorization signed by you, and we may require you to verify your identity directly with us before fulfilling the request.

Exercising Your California Privacy Rights. To submit a request, please send your request by email to privacy@willinghams.com. So that we can verify your identity and respond appropriately, please include your full name, the email address associated with your account or order(s), the shipping and/or billing address(es) used for your order(s) if applicable, and a clear description of the right you are exercising. We may follow up to request additional information needed to verify your identity before fulfilling your request.

Response Timing. We will acknowledge receipt of your request within ten business days and provide a substantive response within forty-five days, unless we notify you in writing of a permitted extension.

Minors. California law provides additional protections for minors. We do not knowingly sell or share personal information of California residents under the age of 16, and we would not do so without the affirmative consent required by California law.

Other US State Residents

If you are a resident of a US state with a comprehensive privacy law – including (without limitation) Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, Indiana, Tennessee, Florida, New Jersey, New Hampshire, Kentucky, Rhode Island, Minnesota, or Maryland – you may have rights similar to those described above for California residents. These commonly include the right to access, correct, and delete personal information; to opt out of certain processing; and to non-discrimination for exercising your rights. Specific rights, exemptions, and procedures vary by state.

To exercise any of these rights, please email privacy@willinghams.com using the procedure described under “Exercising Your California Privacy Rights.” We will apply the protections of your state’s law to your request.

If your state requires us to designate an appeal mechanism for denied requests, you may appeal our decision by replying to our written response with the word “Appeal” in the subject line and a brief description of the basis for appeal. We will provide a written response to your appeal within the time required by your state’s law.

Canadian Residents

If you reside in Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) and (where applicable) provincial privacy laws provide you with rights regarding your personal information, including rights to access and correct personal information about you, to withdraw consent, and to file a complaint with a privacy regulator.

If you reside in Quebec, the Act respecting the protection of personal information in the private sector (commonly referred to as “Law 25”) provides additional rights, including the right to access, correct, and request deletion of your personal information; the right to data portability; and the right to know whether automated decision-making is used in respect of you and (if so) to request human review. You also have the right to file a complaint with the Commission d’accès à l’information du Québec.

The person responsible for the protection of personal information at Willingham’s can be contacted at privacy@willinghams.com. Within Willingham’s, access to personal information is limited to personnel and service providers who need access to perform the activities described in this policy (for example, fulfillment, customer support, accounting). Retention periods are described under “How We Store and Protect Your Information.”

If you receive commercial electronic messages from Willingham’s, those messages are sent in compliance with Canada’s Anti-Spam Legislation (CASL). You may withdraw your consent at any time using the unsubscribe mechanism in any such message or by emailing privacy@willinghams.com.

To exercise any rights described in this section, please email privacy@willinghams.com.

Other Jurisdictions

If you reside outside the United States or Canada and your local law provides you with privacy rights regarding your personal information, please email privacy@willinghams.com to exercise those rights. We will respond consistent with applicable law.

International Data Transfers

Willingham’s is based in the United States, and our service providers may also operate in the United States or elsewhere. If you submit personal information to us from outside the United States, you understand and agree that your information may be transferred to and processed in the United States. We take reasonable steps to ensure that your personal information receives an adequate level of protection in the jurisdictions where it is processed.

Children’s Data

Willingham’s website is not directed to children, and we do not knowingly collect personal information from children under the age of 13. If we learn that we have inadvertently collected personal information from a child under 13, we will take reasonable steps to delete that information. If you believe a child under 13 has provided us with personal information, please contact us at privacy@willinghams.com.

Links to Third-Party Websites

The Willingham’s website may contain links to third-party websites. Those websites have their own privacy policies, and we are not responsible for them. We recommend you review the privacy policy of any third-party website you visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Effective Date” at the top of this policy and post the updated version on our website. We encourage you to review this policy periodically. Your continued use of the Willingham’s website after the effective date of an updated policy means you accept the updated terms.

Contact Us

If you have any questions or concerns about your privacy or anything in this policy, including if you need to access this policy in an alternative format, please contact us at privacy@willinghams.com.