Privacy policy
1. Introduction
This Privacy Policy describes how Wallace Pottery (“we,” “us,” or “our”) collects, uses, discloses, and safeguards personal information when you visit our website, make a purchase, sign up for marketing communications, or otherwise interact with our business. We are committed to protecting the privacy of our customers, visitors, and partners. This policy is designed to provide transparency regarding the types of information we collect, how and why we process it, the circumstances under which we may share it, and the rights available to you under applicable privacy laws.
This Privacy Policy applies to all personal information collected through:
• Our website and online store
• Checkout and order fulfillment processes
• Email or SMS marketing signup forms
• Embedded tracking technologies
• Interactions with our customer support team
• Manual account creation for institutional or tax-exempt entities
• Any other online or offline interactions you may have with Wallace Pottery
By accessing or using our website or providing personal information to us, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms of this policy, please refrain from using our website or providing personal information. For residents of regions with specific privacy regulations—such as the European Union (EU), United Kingdom (UK), Canada, and California—this Privacy Policy also outlines additional rights and obligations that apply under GDPR, UK GDPR, PIPEDA, and CCPA/CPRA.
2. Information We Collect
We collect various types of personal information in order to operate our business, fulfill orders, improve customer experience, and conduct marketing and analytics activities. The specific information we collect depends on how you interact with Wallace Pottery—such as browsing our website, making a purchase, signing up for marketing communications, or communicating with us directly.
Below is a detailed breakdown of the categories of information we may collect.
2.1. Identifiers
We may collect personal identifiers such as:
• Full name
• Email address
• Billing address
• Shipping address
• Phone number (if provided during checkout or for SMS communications)
• Order number and associated transaction details
These identifiers are collected during checkout, when subscribing to email or SMS lists, or when contacting us for support.
2.2. Payment Information
We do not store or have direct access to full credit card numbers or bank account information.
All payment details are processed securely through third-party payment processors such as:
• Shopify Payments
• Shop Pay
• PayPal
• Apple Pay / Google Pay (if available on your device)
• Any other payment method supported through Shopify
These providers collect and process payment information under their own privacy and security standards.
2.3. Order and Transaction Data
When you place an order, we collect:
• Products purchased
• Order value
• Discounts applied
• Shipping method
• Delivery confirmation information
• Return/refund history
• Any notes or customizations you provide
This information is used for order fulfillment, customer service, analytics, and business
operations.
2.4. Communication Information
When you contact us or respond to our emails, we may collect:
• Email correspondence
• Attachments you provide
• Support requests and inquiry details
• Internal notes relating to your communication
This includes both direct emails and replies to order notifications.
2.5. Marketing and Engagement Data
When you engage with our marketing channels, we may collect:
• Email open rates, click behavior, and subscription status (via Klaviyo)
• Items viewed, cart activity, and browsing linked to your email if consented
• Behavioral triggers used for automated flows (e.g., browse abandonment, product
interest)
Whether you engage with promotional or transactional emails If you later sign up for SMS, we may also collect:
• Phone number
• SMS delivery status
• SMS click behavior
2.6. Device, Usage, and Technical Data
When you browse our website, we automatically collect technical data such as:
• IP address
• Device type
• Browser type
• Operating system
• Referring/exit pages
• Time spent on pages
• Clicks, scrolls, and general on-site behavior
• Error logs
This information is collected primarily through:
• Shopify’s built-in analytics
• Meta Pixel
• Meta Conversions API
• Klaviyo onsite tracking
• A behavioral analytics provider (e.g., session recording and heatmap technology)
2.7. Cookies and Tracking Technologies
We use cookies, pixels, tags, and other tracking technologies to:
• Maintain website functionality
• Remember items in your cart
• Enable order processing
• Measure website performance
• Provide analytics
• Improve our advertising effectiveness
• Personalize content and communications
More detailed information is provided in Section 5: Cookies and Tracking Technologies.
2.8. Business and Institutional Account Information
In certain cases—such as when working with schools, tax-exempt organizations, or business entities—we may manually create a customer profile in our system.
This may include:
• Organization name
• Point-of-contact name
• Email address
• Tax exemption documentation
• Purchase history
• Shipping and billing details
These profiles are used solely for order processing, invoicing, and maintaining institutional purchasing records. They are not customer-facing login accounts.
2.9. Social Media and Advertising Data
When interacting with our ads or content on social media platforms (e.g., Meta), we may receive:
• Engagement metrics
• General demographic insights
• Aggregated performance data
• Purchase attribution information
• Hashed identifiers or anonymized data used for ad targeting
These platforms may also collect data directly according to their own privacy policies.
2.10. Information from Third-Party Services
We may receive certain limited information from:
• Payment processors
• Shipping carriers
• Review platforms (e.g., Judge.me)
• Contractors or service providers assisting with marketing, analytics, or operations
This information is only used to provide services or support business functions.
2.11. Optional or Voluntarily Provided Information
You may choose to provide additional information directly, such as:
• Survey responses
• Contest or giveaway entries
• Product review content
• Notes added to your order
• Photos or media you submit (e.g., to customer support)
This information is used only for its intended purpose.
3. How We Collect Information
We collect personal information through a variety of sources and interactions. The type and amount of information collected depend on how you engage with Wallace Pottery—whether browsing our website, placing an order, communicating with us, or interacting with our marketing tools. Below is a comprehensive explanation of the methods through which information is collected.
3.1. Information You Provide Directly
You may provide personal information to us voluntarily when you:
• Place an order
• Complete checkout
• Enter your delivery or billing information
• Subscribe to marketing emails or SMS messages
• Enter your name and email into website pop-ups
• Leave a product review
• Contact us via email or through order-related messages
• Participate in surveys, giveaways, or promotions
• Submit a customer service request
• Send photos or files to support a conversation
This information typically includes identifiers (like name, email, and address), payment details (processed by third parties), communication content, and other voluntarily provided information.
3.2. Information Collected Automatically
When you use our website, certain information is automatically collected by Shopify and our integrated technologies, including:
• IP address
• Browser and device information
• Pages visited
• Items added to cart
• Actions taken on the site
• Date and time of visits
• Referrer URLs
• General device identifiers
• Interaction data (scrolling, clicking, navigation paths)
Automatic collection occurs through:
• Shopify’s built-in analytics
• Cookies and tracking technologies
• Meta Pixel
• Meta Conversions API
• Klaviyo onsite tracking
• A behavioral analytics provider (heatmaps, session recordings, interaction tracking)
These technologies allow us to understand website performance, analyze customer behavior, and improve our online store.
3.3. Information Collected Through Purchases
When you make a purchase, Shopify collects and stores:
• Contact information
• Shipping address
• Billing details
• Items purchased
• Order notes
• Shipping selections
• Payment method details (processed externally)
This information enables us to:
• Fulfill your order
• Process returns and refunds
• Provide customer support
• Maintain records for legal and financial compliance
3.4. Information Collected Through Marketing Activities
We collect information through marketing-related interactions such as:
• Signing up for email marketing via Klaviyo opt-in forms
• SMS opt-ins (if and when enabled)
• Responding to abandoned cart flows
• Clicking links in promotional or transactional emails
• Receiving automated campaigns or flows
• Interacting with Meta (Facebook/Instagram) ads
• Linking browsing behavior to an email address (where consented)
Information gathered may include:
• Email engagement (opens, clicks)
• Product interests
• Browsing behavior
• Purchase attribution details
• Device and session information
• Marketing consent preferences
3.5. Information Collected Through Product Reviews
When you leave a review through our third-party review provider (e.g., Judge.me), the provider collects:
• Name
• Email
• Product purchased
• Review content
• IP address (for fraud protection)
• Rating and any media submitted (photos/video)
Review providers may also send customers automated review-request emails following an order.
3.6. Information Collected Through Cookies & Tracking Technologies
Cookies, web beacons, pixels, tags, and similar technologies collect information to support:
• Site functionality
• Shopping cart persistence
• Checkout processes
• Analytics and traffic measurement
• Marketing attribution
• Ad performance tracking
You can learn more in Section 5: Cookies and Tracking Technologies.
3.7. Information Collected Through Third-Party Services
We may receive limited information from third parties, including:
• Payment processors: payment confirmations, fraud signals, and transaction IDs
• Shipping carriers: tracking information, delivery issues, address corrections
• Marketing service providers: engagement metrics, attribution data
• Contracted service providers: analytics insights, marketing performance reports
• Review platforms: review submissions and related metadata
These third parties collect and process information under their own policies before passing relevant information to us for operational use.
3.8. Information Collected Through Customer Support Interactions
If you contact customer support, we collect:
• The information you provide in your message
• Attachments you submit
• Internal notes related to your case
• Contact metadata (email address, timestamps)
This information is used solely to resolve your inquiry and support your order or request.
3.9. Information Collected Through Institutional or Business Accounts
For schools, tax-exempt organizations, and business entities, we may manually create a customer profile for operational purposes. Information collected may include:
• Organization name
• Representative contact details
• Shipping and billing addresses
• Tax-exemption documentation
• Purchase history and order preferences
These profiles are created only when necessary and are not customer-login accounts.
4. How We Use Your Information
We use the personal information we collect to operate our business, fulfill customer orders, improve our products and website, and deliver a reliable, secure, and personalized experience. The purposes for which we use your information depend on how you interact with Wallace Pottery, but generally fall within the categories outlined below.
4.1. To Fulfill and Manage Orders
We use your information to:
• Process payments
• Verify and confirm your orders
• Prepare, pack, and ship orders
• Provide order status updates
• Deliver digital receipts and confirmations
• Handle returns, refunds, and replacements
• Communicate about delays, issues, or changes to your order
This includes sharing necessary information with shipping carriers and payment processors to complete your transaction.
4.2. To Provide Customer Support
We use personal information to:
• Respond to inquiries
• Resolve issues or complaints
• Identify orders and verify identity
• Provide tailored support based on prior history
• Communicate about product questions or troubleshooting
Support-related data is used only to assist you and maintain accurate records.
4.3. To Communicate With You
We may use your information to send:
• Order confirmations
• Shipping updates
• Return or refund notifications
• Important service or policy updates
• Responses to your messages
These communications are transactional or required for operating our business.
4.4. To Send Marketing and Promotional Communications
With your consent (where required), we use your information to:
• Send promotional emails via Klaviyo
• Deliver personalized product recommendations
• Send abandoned cart reminders
• Share new product launches, sales, and relevant announcements
• Deliver automated email flows based on your behavior or interests
If SMS marketing becomes active in the future, we may also use your phone number (with
explicit opt-in) for:
• Promotional texts
• Reminder messages
• Shipping or support notifications
You may opt out of marketing communications at any time.
4.5. To Personalize and Improve Your Experience
We use browsing behavior, analytics, and engagement metrics to:
• Understand how visitors use our website
• Improve navigation, design, and usability
• Recommend relevant products
• Enhance website performance
• Analyze trends and identify issues
• Optimize email and advertising campaigns
Our behavioral analytics provider may record anonymized or pseudonymized interactions—including clicks, scrolling, or navigation—to help us identify usability improvements.
4.6. For Analytics and Advertising Performance
We use aggregated and behavioral data to:
• Measure website and campaign performance
• Understand customer interests
• Attribute purchases to marketing sources
• Improve advertising accuracy
• Manage Meta Pixel and Meta Conversions API integrations
• Build anonymized insights about overall traffic and conversions
Where required, certain data is shared with advertising partners in hashed or pseudonymized form to measure effectiveness and improve relevance. We do not sell personal information.
4.7. To Maintain Security and Prevent Fraud
We use information to:
• Authenticate transactions
• Detect suspicious activity
• Protect against unauthorized access
• Maintain the integrity of our website and payment system
• Fulfill legal and compliance obligations
• Prevent fraudulent orders, returns, or chargebacks
This includes signals generated by Shopify, payment processors, and anti-fraud systems.
4.8. To Manage Business Operations
We may use information internally for:
• Accounting and tax compliance
• Business reporting
• Inventory management
• Demand forecasting
• Product development
• Supply chain planning
• Quality control
• Evaluating performance of service providers and contractors
• Analysis related to selling on third-party platforms (e.g., Amazon)
Internal data use is limited to Wallace Pottery and authorized service providers.
4.9. To Create Institutional or Business Profiles
For schools, tax-exempt entities, or organizational customers, we may create internal profiles to:
• Manage tax exemption status
• Maintain institutional order records
• Streamline ordering for repeat institutional purchases
• Provide tailored support for non-consumer accounts
These profiles are not accessible via online login and are used solely for operational purposes.
4.10. To Comply With Legal and Regulatory Obligations
We may use or disclose information when necessary to:
• Meet tax or reporting requirements
• Comply with U.S. and international privacy regulations
• Respond to lawful requests from government authorities
• Enforce our terms and policies
• Protect our legal rights or defend against legal claims
5. Cookies and Tracking Technologies
We use cookies and other tracking technologies to operate our website, support key
functionalities, improve performance, analyze traffic, and measure the effectiveness of our marketing. These technologies help us understand how visitors use our site, personalize your experience, and ensure that essential features—such as shopping cart persistence and checkout—function correctly.
This section explains what cookies are, the types we use, the tools involved, and how you can manage your cookie preferences.
5.1. What Are Cookies?
Cookies are small text files that are stored on your device when you visit a website. They allow the website to recognize your device, remember your preferences, and maintain continuity between page loads and sessions.
Related technologies include:
• Pixels
• Tags
• Web beacons
• Local storage
• Session recording scripts
• SDKs and device identifiers
These technologies work together to improve functionality, analytics, advertising measurement,
and user experience.
5.2. Types of Cookies and Technologies We Use
5.2.1. Strictly Necessary Cookies
These cookies are required for the website to function properly. They allow you to:
• Navigate the site
• Add items to your cart
• Log checkout information
• Complete purchases
• Maintain basic site stability
These cannot be turned off through our website because they are required for core functionality.
5.2.2. Performance & Analytics Cookies
These cookies help us understand how visitors browse our website, identify performance issues,
and optimize the experience.
They may collect:
• Page views
• Session duration
• Click behavior
• Navigation paths
• Device and browser data
• General location derived from IP address
We use analytics through:
• Shopify Analytics
• Klaviyo onsite tracking (viewed product activity, browsing tied to email when
consented)
• A behavioral analytics provider (heatmaps, session recordings, and interaction
tracking)
This information is aggregated and used to improve site design, content, and usability.
5.2.3. Advertising & Marketing Cookies
These cookies track behavior across pages and sessions to help us:
• Measure ad performance
• Attribute conversions
• Understand which ads lead to purchases
• Improve the relevance of ads you see on platforms like Meta
• Optimize retargeting and audience creation
These tools may collect:
• Viewed products
• Event actions (add to cart, checkout)
• Device and browser signals
• Hashed or anonymized identifiers
Advertising-related tracking on our site includes:
• Meta Pixel
• Meta Conversions API
• Klaviyo marketing tracking
We do not use TikTok Pixel or Pinterest Tag.
5.2.4. Functional Cookies
These cookies allow the website to remember:
• Preferences
• Recently viewed products
• Saved cart items
• Form inputs
• Language or region settings (if applicable)
These improve the browsing experience but are not strictly required.
5.3. Third-Party Tracking Technologies
Third-party tools may place or read cookies when you visit our site.
These include, but are not limited to:
• Meta (for advertising attribution and performance measurement)
• Klaviyo (for email engagement tracking and website behavior mapping)
• Shopify (for analytics, fraud prevention, and checkout)
• Behavioral analytics providers (session recordings, click tracking)
• Judge.me (for review request emails or review display)
These third parties collect and process data according to their own privacy policies, and some may combine this data with information collected from other websites or services you use.
5.4. Cookies and Consent
At this time, our website does not use a cookie consent banner.
Depending on your browser settings and region, cookies may be stored immediately upon visiting the site.
Users in regions with specific privacy laws (e.g., EU, UK) may implement their own browser- level blocking tools or contact us with data requests as described in Section 10.
We may implement a cookie banner in the future if our tools or legal requirements change, and the policy will be updated accordingly.
5.5. How to Manage Cookies
You can manage or disable cookies through your browser settings. Most browsers allow you to:
• View cookies stored on your device
• Block or delete specific cookies
• Block all cookies from certain websites
• Set your browser to reject cookies entirely
Blocking certain cookies may affect website functionality, including the ability to checkout or maintain items in your cart.
You can also manage third-party cookies through:
• Meta Ad Preferences
• Your device settings (for mobile app tracking)
• Browser extensions designed to block trackers
5.6. Do Not Track Signals
Some browsers offer “Do Not Track” (DNT) features.
Consistent with many websites and online platforms, we do not currently respond to DNT signals, as there is no standardized industry framework for interpreting or responding to them.
6. Advertising & Marketing Technologies
We use a combination of advertising, marketing, and analytics technologies to understand how customers interact with our website, measure the effectiveness of our campaigns, and improve the relevance of the messages and ads you may see. These technologies help us optimize our business operations, reach interested audiences, and provide a more personalized experience.
This section explains how these technologies function, the types of data involved, and how your information may be used in connection with advertising and marketing activities.
6.1. Overview of Advertising and Marketing Tools We Use
We use several categories of marketing technologies, including:
• Advertising pixels and event tracking tools
• Server-side conversion measurement tools
• Email and SMS marketing platforms
• Behavioral and performance analytics tools
• Shopify’s native marketing features
These tools may collect information about your browsing behavior, device characteristics, purchase activity, and engagement with our website or communications.
6.2. Meta Advertising Technologies (Pixel and Conversions API)
We use technologies provided by Meta Platforms (such as the Meta Pixel and Conversions API)
to:
• Measure the performance of our ads
• Understand which products visitors are interested in
• Improve the relevance of ads you may see on Meta’s platforms
• Attribute purchases to advertising campaigns
• Analyze aggregated customer behavior
These tools may receive information about:
• Pages or products you view
• Actions you take on our website (e.g., add to cart, checkout)
• Device and browser details
• General location information
• Purchase events
• Hashed identifiers (securely encoded data used for matching)
This data helps us evaluate advertising effectiveness and provide more relevant messaging.
We do not sell personal information.
We also do not share information with advertising partners for purposes unrelated to legitimate marketing measurement, website performance, or business operations.
All data shared with Meta is handled according to Meta’s own privacy policies and regulatory frameworks.
6.3. Email Marketing and Engagement Tracking (Klaviyo)
We use Klaviyo to manage email marketing, promotional campaigns, and automated flows.
Klaviyo may collect:
• Email subscription status
• Whether emails are opened or clicked
• Which products or pages are viewed (if tracking is consented or enabled)
• Items added to cart
• Link interactions in emails
• General engagement metrics
This data is used to:
• Personalize recommendations
• Trigger automated flows
• Improve email performance
• Send abandoned cart reminders
• Tailor marketing messages to your interests
If SMS marketing is launched in the future, Klaviyo may also process:
• Phone number
• SMS delivery and engagement data
• SMS subscription preferences
You may opt out of marketing emails or SMS at any time.
6.4. Behavioral Analytics Technologies
We work with a behavioral analytics provider to better understand how visitors use our website.
These tools may record:
• Clicks and taps
• Scrolling behavior
• Navigation paths
• Time spent on pages
• General interaction patterns
This data is used to:
• Improve site functionality
• Identify usability issues
• Optimize product page layouts
• Refine customer experience
The information collected is typically anonymized or pseudonymized and is not used to
personally identify individuals.
6.5. Review and Rating Tools (Judge.me)
Our review provider may collect:
• Your name
• Email address
• Order details
• Review content and star rating
• Photos or media you submit
• Technical data such as IP address (to prevent fraudulent reviews)
The provider may also send automatic review requests following a purchase.
These tools support transparency, quality control, and customer experience.
6.6. Shopify Marketing and Analytics Features
Shopify provides built-in features that may collect:
• Browsing behavior
• Interaction patterns
• Products viewed
• Traffic sources
• Conversion and sales metrics
Shopify may also use cookies and scripts to assist with:
• Fraud prevention
• Checkout integrity
• Cart functionality
• Analytics reporting
• Aggregate marketing insights
All Shopify processing is governed by Shopify’s Privacy Policy.
6.7. How We Use Advertising and Marketing Data
The data collected through these tools is used to:
• Improve the accuracy of our advertising
• Measure how well ads are performing
• Understand what products customers are interested in
• Attribute purchases to specific campaigns
• Improve and personalize our marketing communications
• Evaluate traffic and conversion patterns
• Develop business insights for planning and forecasting
We do not share your personal information with advertisers in a way that directly identifies you. Some information—such as hashed identifiers or aggregated events—may be processed by advertising partners to support measurement and relevance.
6.8. Your Choices Regarding Advertising Technologies
You may manage or limit certain types of tracking through:
• Browser settings
• Platform-specific ad preferences (e.g., Meta Ad Preferences)
• Opting out of marketing emails or SMS
• Device-level settings for mobile tracking
• Cookie management tools and extensions
More information about managing cookies can be found in Section 5.5.
7. Sharing Your Information with Service Providers
We may share personal information with a limited number of service providers, partners, and organizations who assist us in operating our business, fulfilling orders, improving our website, and conducting marketing or analytics activities. These third parties only receive the information necessary to perform their specific services and are required to maintain confidentiality, safeguard the information, and use it solely for the purposes for which it was provided. We do not sell personal information. We do not share personal information for cross-context behavioral advertising beyond what is necessary for legitimate advertising attribution, measurement, and business operations. Below is an overview of the categories of third parties with whom we may share your information.
7.1. E-Commerce Platform (Shopify)
We use Shopify to power our online store. Shopify processes personal information related to:
• Orders
• Checkout details
• Payment and billing information
• Customer contact information
• Device and browsing data via Shopify’s embedded analytics
• Fraud detection and security functions
Shopify processes this information according to its own Privacy Policy. Shopify may also store your information on servers located in Canada, the United States, or other jurisdictions.
7.2. Payment Processors
When you complete a purchase, payment information is processed directly by third-party payment providers such as:
• Shopify Payments
• Shop Pay
• PayPal
• Apple Pay or Google Pay (if enabled)
These providers receive your payment information in order to process the transaction securely. We do not receive or store full credit card numbers or bank account information.
7.3. Shipping and Fulfillment Providers
To deliver your orders, we share necessary shipping information with carriers, which may include:
• USPS
• UPS
• FedEx
• Other regional or international carriers when applicable
These providers may receive your:
• Name
• Shipping address
• Package details
• Contact information (if required for delivery)
This information is used solely to deliver your order or resolve shipping-related issues.
7.4. Marketing and Communication Service Providers
We share certain information with service providers who help us manage and improve our marketing activities:
7.4.1. Email & SMS Marketing (Klaviyo)
Klaviyo processes:
• Names
• Email addresses
• Subscription preferences
• Engagement metrics (email opens, clicks)
• Website behavior (if tracking is enabled)
• SMS data (for future SMS functionality)
This allows us to send marketing campaigns, automated flows, and transactional messages.
7.5. Advertising and Attribution Partners
We may share limited information with advertising platforms to measure performance and improve advertising accuracy. This information may include:
• Hashed identifiers
• Event data (e.g., add to cart, purchase)
• Browsing behavior
• Device and session characteristics
• General geographic signals
Advertising partners include:
• Meta Platforms (via Meta Pixel and Conversions API)
This information is used for:
• Attribution
• Ad performance analysis
• Campaign optimization
• Relevant audience delivery
We do not share personal information that directly identifies you with advertising partners.
7.6. Review Platforms
We use a third-party review provider (e.g., Judge.me) to collect and display customer reviews. These providers may process:
• Name
• Email address
• Order details
• Review content
• Star ratings
• Photos or media you submit
• IP address (for fraud prevention)
They may also send follow-up emails requesting a review after your purchase.
7.7. Behavioral Analytics Providers
We use a behavioral analytics provider to understand how visitors interact with our website. This provider may collect:
• Clicks and scroll activity
• Time spent on pages
• Navigation paths
• Device and browser details
• Interaction patterns
The information is pseudonymized or anonymized and used solely to improve website design, layout, and usability.
7.8. Contractors and Business Support Providers
In certain cases, we may share information with contracted service providers who assist with:
• Marketing analysis
• Advertising management
• Technical support
• Data organization
• Business operations
These individuals or firms operate under confidentiality agreements and access only the data necessary to perform their services. They are not permitted to use your information for any purpose other than supporting Wallace Pottery.
7.9. Operational and Compliance-Related Third Parties
We may share information with:
• Tax authorities (for tax-exempt order verification or compliance)
• Accounting or bookkeeping services
• Legal advisors (if needed for compliance or dispute resolution)
• Fraud prevention or security providers
This information is shared only when required to meet legal, regulatory, or operational
obligations.
7.10. External Platforms for Business Analytics (Internal Use Only)
For internal planning and forecasting, we may transfer certain business performance data (including anonymized or pseudonymized customer insights) into systems or platforms controlled by Wallace Pottery.
This data is:
• Used internally
• Stored securely
• Not shared with external third parties
• Not used for external advertising purposes
• Not sold or disclosed outside Wallace Pottery or authorized service providers
7.11. When Required by Law
We may disclose information if required to:
• Comply with a lawful request from authorities
• Respond to subpoenas, court orders, or legal processes
• Protect our rights, property, or customers
• Prevent fraud or potential harm
We will only share what is legally necessary.
8. International Data Transfers
Because Wallace Pottery operates in the United States and uses globally distributed service providers, your personal information may be transferred to, stored in, or processed in countries outside of your place of residence. These countries may have different data protection laws than those in your region.
This section explains how and why these transfers occur, and the safeguards used to protect your information when such transfers take place.
8.1. How International Transfers Occur
We rely on several third-party service providers—including Shopify, Meta, Klaviyo, and
shipping carriers—that may process personal information on servers located in different
countries, including but not limited to:
• United States
• Canada
• European Union (EU)
• United Kingdom (UK)
• Other jurisdictions where service providers maintain infrastructure
Your information may be transferred internationally when:
• You place an order on our website
• We process your payment
• We fulfill and ship your order
• You subscribe to email or SMS communications
• You interact with our website or advertisements
• We conduct analytics or marketing activities
• You submit a review or contact customer support
These transfers are necessary to operate our business and fulfill contractual obligations.
8.2. Transfers Involving Shopify
Our store is hosted on Shopify, whose primary data centers are located in:
• Canada (primary)
• United States (backup and processing)
Shopify may also transfer data globally for:
• Content delivery
• Fraud detection
• Technical support
• Infrastructure optimization
Shopify uses industry-standard safeguards to protect cross-border transfers.
8.3. Transfers Involving Meta (Pixel & Conversions API)
When you interact with our website or ads on Meta platforms, some information may be processed by Meta’s systems, which are global in nature. Meta may store or process data in:
• The United States
• Ireland
• Other regional data centers
These transfers support advertising attribution, performance measurement, and analytics. All data processed by Meta is handled under Meta’s applicable privacy and data transfer frameworks.
8.4. Transfers Involving Klaviyo
Klaviyo may process email or SMS contact information, behavioral data, and marketing
engagement data on servers located primarily in:
• The United States
• Other jurisdictions as required for redundancy or delivery
Klaviyo implements safeguards and contractual protections for international transfers.
8.5. Transfers Involving Other Service Providers
Additional service providers—including behavioral analytics tools, review platforms, fraud-prevention services, and contractors—may process limited personal information in other countries, depending on their infrastructure.
All such providers are required to use only the minimum necessary data and must handle it according to their contractual, regulatory, and technical obligations.
8.6. Safeguards for International Transfers
When transferring personal information outside your region, we rely on the following safeguards where required by law:
For EU, EEA, and UK Residents (GDPR/UK GDPR)
Cross-border transfers may be supported by:
• Standard Contractual Clauses (SCCs) approved by the European Commission
• UK Addendum or International Data Transfer Agreement (IDTA) where applicable
• Adequacy decisions (for transfers to countries deemed to have adequate protections)
These mechanisms are designed to ensure that your information is afforded a level of protection essentially equivalent to that in your home jurisdiction.
For Canadian Residents (PIPEDA)
Your information may be transferred to the United States or other countries for processing.
In all cases, we ensure that:
• Access is limited to authorized personnel
• Data is used only for necessary business purposes
• Protections are in place to prevent unauthorized access
Your information remains subject to the laws of the foreign jurisdiction where it is processed.
8.7. Your Rights Regarding International Transfers
Depending on your location, you may have the right to:
• Request information about international transfers involving your data
• Obtain a copy of the safeguards (e.g., SCCs) used for the transfer
• Object to certain types of processing
• Submit a data deletion or correction request
These rights are detailed in Section 10: Your Rights.
8.8. Essential Transfers
Some transfers are necessary for:
• Completing your purchase
• Providing customer support
• Processing payments
• Delivering your products
• Complying with legal obligations
If you do not want your data transferred internationally, you may choose not to use our website or services. However, we are unable to fulfill orders or provide certain services without performing these essential transfers.
9. Data Retention
We retain personal information for as long as necessary to fulfill the purposes for which it was collected, to operate our business, and to comply with our legal, accounting, and regulatory obligations. The length of time we keep your information depends on the type of data, the nature of your interactions with Wallace Pottery, and applicable laws governing data retention. This section explains how long we keep your information, why retention is necessary, and your options for requesting deletion.
9.1. General Retention Practices
In most cases, we retain personal information until you request its deletion, unless a longer retention period is required or permitted by law.
This applies to:
• Account and contact details
• Order history
• Communication records
• Marketing preferences
• Shipping and fulfillment information
• Behavior and analytics data
Retaining this information allows us to:
• Fulfill future orders
• Provide accurate customer service
• Address returns or warranty matters
• Maintain accurate financial and tax records
• Detect or prevent fraudulent activity
• Improve our products and website
• Understand long-term customer behavior
You may request deletion of your data at any time, subject to the exceptions listed below.
9.2. Retention of Order and Transaction Records
We retain order information—including name, contact information, purchased items, payment confirmations, and delivery records—for a minimum period required by applicable tax, accounting, and business laws. This period is typically 7 years, but may vary depending on jurisdiction.
We are legally required to retain certain transactional information even after a deletion request is submitted.
9.3. Retention of Payment Information
We do not store full payment card numbers or banking details.
These are processed directly by our payment processors and retained according to their own policies.
We may retain:
• Partial card identifiers (e.g., last four digits)
• Payment confirmation data
• Refund and chargeback records
This information is maintained for financial reconciliation and fraud prevention.
9.4. Retention of Marketing Data
Marketing-related data—such as email engagement, browsing behavior associated with marketing flows, subscription status, and SMS consent (if applicable)—is retained for as long as you remain subscribed or until you request deletion or unsubscribe.
If you unsubscribe from marketing communications, we may retain minimal information to honor your opt-out preferences and prevent future marketing messages.
9.5. Retention of Behavioral and Analytics Data
Behavioral analytics, session recordings, click mapping, and aggregated analytics may be retained for:
• Internal analysis
• Website optimization
• Performance measurement
• Security and debugging
Where possible, this data is stored in an anonymized or pseudonymized form and may be retained longer than identifiable data because it cannot be linked back to a specific individual.
9.6. Retention of Business or Institutional Profiles
For schools, tax-exempt institutions, and business customers for whom we manually create profiles, we retain:
• Organization and contact information
• Tax-exemption certificates
• Invoice history
• Order and communication records
These records are retained as long as the relationship is active or required for compliance.
9.7. Retention of Customer Support Records
Emails, support requests, and related documents may be retained to:
• Provide context for future inquiries
• Resolve disputes
• Improve customer service
• Maintain accurate business documentation
These records are kept unless you request deletion, subject to legal exceptions.
9.8. Retention Required by Law
We may retain certain personal information—including transaction records, tax documentation, fraud signals, and security logs—even after a deletion request if retention is required for:
• Legal compliance
• Tax audits
• Financial reporting
• Security and fraud prevention
• Resolving disputes
• Enforcing our agreements
These obligations override user deletion requests where applicable.
9.9. Your Right to Request Deletion
You may request deletion of your personal information at any time.
If you submit a deletion request:
1. We will remove or anonymize the personal information we are permitted to delete.
2. We will retain only the information required for legal, security, and transactional
purposes.
3. We will confirm the outcome of your request once completed.
Deletion rights vary by jurisdiction, and additional details are provided in Section 10: Your Rights.
10. Your Rights
Depending on your location and the privacy laws that apply to you, you may have certain rights regarding your personal information. These rights are designed to give you transparency and control over how your data is collected, used, and shared.
This section explains the rights available to all customers, followed by specific rights for residents of California, the European Union (EU), the United Kingdom (UK), and Canada. You may exercise your rights at any time by contacting us at:
info@wallacepottery.com We may need to verify your identity before processing certain requests to protect your information from unauthorized access.
10.1. Rights Available to All Users
Regardless of where you live, you have the following rights:
10.1.1. Right to Access Your Information
You may request a copy of the personal information we hold about you, including categories of data, how it was collected, why it is used, and with whom it may be shared.
10.1.2. Right to Request Correction
If any of your personal information is inaccurate or incomplete, you may request that we correct or update it.
10.1.3. Right to Request Deletion
You may request that we delete your personal information.
We will delete or anonymize the information we are permitted to remove, except for data that must be retained to comply with:
• Tax and accounting laws
• Order history and transactional records
• Fraud prevention
• Legal obligations or defense
10.1.4. Right to Opt Out of Marketing Communications
You may opt out of:
• Promotional emails
• Automated marketing flows
• SMS marketing (when available)
You can unsubscribe using links in our emails or by contacting us directly.
Transactional messages such as order confirmations and shipping updates will still be sent.
10.1.5. Right to Restrict or Limit Certain Processing
You may request that we limit how your personal information is processed, particularly in cases where:
• You contest the accuracy of your data
• Processing is no longer necessary
• You object to certain uses of your information
10.1.6. Right to Object to Certain Processing
You may object to processing related to:
• Direct marketing
• Profiling related to marketing
• Automated decision-making (we do not engage in automated decision systems that
produce legal or significant effects)
10.1.7. Right to Withdraw Consent
Where processing relies on your consent (such as email/SMS marketing), you may withdraw that consent at any time.
10.2. Additional Rights for California Residents (CCPA/CPRA)
If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). These include:
10.2.1. Right to Know
You may request:
• The categories of personal information collected
• The specific pieces of personal information collected
• The categories of sources used to collect the information
• The business or commercial purposes for collecting it
• The categories of third parties with whom we share or disclose it
10.2.2. Right to Delete
You may request that we delete your personal information, subject to the legal exceptions listed earlier.
10.2.3. Right to Correct
You may request correction of inaccurate personal information.
10.2.4. Right to Opt Out of “Sharing” for Cross-Context Behavioral Advertising
We do not sell personal information. We do not share personal information with third parties for cross-context behavioral advertising outside the scope of essential marketing attribution and performance measurement. Because our advertising integrations fall under permissible business purposes (e.g., attribution,
performance analytics), a dedicated “Do Not Sell or Share My Personal Information” link is not required.
10.2.5. Right to Limit Use of Sensitive Personal Information
We do not collect or use “sensitive personal information” for purposes that require this right under CPRA.
10.2.6. Right to Non-Discrimination
We will not discriminate against you for exercising your rights.
10.3. Additional Rights for EU and EEA Residents (GDPR)
Residents of the European Union have expanded rights under the General Data Protection Regulation (GDPR), including:
10.3.1. Right to Data Portability
You may request a copy of your personal information in a structured, commonly used, machine-readable format.
10.3.2. Right to Erasure (“Right to Be Forgotten”)
You may request deletion of your information in specific circumstances, such as:
• When processing is no longer necessary
• When consent is withdrawn
• When there is no legitimate interest to continue processing
10.3.3. Right to Restrict Processing
You may request that your data be restricted from further processing while accuracy or legality is
under review.
10.3.4. Right to Object to Processing
You may object to:
• Processing based on legitimate interests
• Direct marketing
• Profiling used for marketing purposes
We will respect your objection unless we have compelling legitimate grounds to continue processing.
10.3.5. Right Not to Be Subject to Automated Decision-Making
We do not conduct automated decision-making that produces significant legal or personal effects.
10.3.6. Right to Lodge a Complaint
You may lodge a complaint with your local data protection authority if you believe your data is processed unlawfully.
10.4. Additional Rights for UK Residents (UK GDPR)
UK residents have the same rights as EU residents under UK GDPR, enforced by the
Information Commissioner’s Office (ICO).
These include:
• Right of access
• Right of rectification
• Right to erasure
• Right to restriction
• Right to portability
• Right to object
• Right to lodge a complaint with the ICO
10.5. Additional Rights for Canadian Residents (PIPEDA)
Residents of Canada have additional rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), including:
10.5.1. Right to Access
You may request a copy of your personal information and information about how it has been used or shared.
10.5.2. Right to Correction
You may request corrections to inaccurate or incomplete information.
10.5.3. Right to Withdraw Consent
You may withdraw consent to processing at any time, unless processing is required by law.
10.5.4. Right to Know How Your Information Is Handled
You may ask:
• How your data is stored
• Who has access to it
• How long it is retained
• What safeguards are in place
10.6. How to Submit a Request
You may exercise any of the rights described above by contacting us at:
info@wallacepottery.com
Please include:
• Your name
• Your contact information
• The nature of your request
• Any details needed to confirm your identity or locate your information
We will respond within the time frames required by applicable law.
11. Data Security
We take data security seriously and use a combination of administrative, technical, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, or misuse. While no method of transmission over the internet or method of electronic storage is entirely risk-free, we are committed to maintaining a robust and responsible security posture appropriate for the nature of our business. This section outlines the security measures in place through our service providers and internal practices.
11.1. Shopify’s Security Measures
Our online store and checkout process are hosted on Shopify, a platform that maintains industry-leading security standards. Shopify provides:
• PCI DSS–compliant payment processing
• Encryption of sensitive information during transmission
• Secure hosting environments with continuous monitoring
• Fraud analysis systems built into checkout
• Access controls for administrative interfaces
• Regular security audits and compliance certifications
Because Shopify handles payment processing, we do not receive or store full credit card numbers or sensitive payment data.
11.2. Encryption and Secure Transmission
Whenever you enter information into our website—such as during checkout or account
communication—data is transmitted using HTTPS (Transport Layer Security). This encrypts information in transit to protect it from interception.
Many of our third-party service providers also use encryption to safeguard data stored on their systems.
11.3. Access Controls and Internal Protections
Access to personal information within Wallace Pottery is limited to personnel and contractors who require it to perform their duties.
We implement:
• Role-based access controls
• Unique logins for administrative accounts
• Secure password management practices
• Least-privilege access principles
Contractors who assist with marketing, analytics, or business operations are contractually
required to maintain confidentiality and may only use data for purposes directly related to Wallace Pottery.
11.4. Monitoring, Fraud Prevention, and Platform Protections
We rely on tools provided by Shopify and payment processors to help detect:
• Fraudulent transactions
• Unauthorized access attempts
• Abnormal behavior or inconsistencies
• Potential security threats
These automated systems are supplemented by periodic internal review.
11.5. Physical and Operational Security
While most data is stored digitally by our cloud-based service providers, any local storage used for internal analysis or operational support is protected through:
• Restricted access
• Device-level security controls
• Secure data management practices
• Internal confidentiality obligations
These measures help ensure that data remains protected across all environments where it is processed.
11.6. Third-Party Security
We only work with service providers who maintain reasonable security standards appropriate to the nature of the information they process on our behalf. These providers are responsible for implementing their own safeguards to protect personal information and are contractually restricted from using data for purposes beyond providing services to Wallace Pottery.
11.7. No Absolute Guarantee
While we take appropriate measures to safeguard your information, no website or system can guarantee complete security.
You can help protect your information by:
• Using strong, unique passwords for online services
• Keeping your devices secure
• Avoiding suspicious links or messages
If you believe your information may have been compromised, please contact us immediately at info@wallacepottery.com.
12. Children’s Privacy
Our website and products are not directed to children under the age of 13, and we do not knowingly collect, use, or store personal information from children under 13 years old. If you are under 13, please do not provide any personal information on our website or make purchases without the involvement of a parent or guardian.
If we become aware that we have inadvertently collected personal information from a child under 13, we will take prompt steps to delete that information from our systems, unless retention is required by law.
Parents or legal guardians who believe that their child has provided personal information to us may contact us at info@wallacepottery.com to request deletion or seek additional information.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, operational requirements, legal obligations, or enhancements to our website and services. When we make updates, we will revise the “Last Updated” date at the top of the policy. In cases where the changes are material—such as updates that affect how personal information is collected, used, or shared—we may also notify you by:
• Sending an email to the address associated with your account or order
• Posting a notice on our website
• Updating the policy within the footer of our online store
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting and handling your personal information.
Your continued use of our website or services after a policy update constitutes your acceptance of the revised Privacy Policy.
14. Contact Information
If you have any questions about this Privacy Policy, our privacy practices, or how your personal information is handled, you may contact us at:
Wallace Pottery
Email: info@wallacepottery.com
You may also reach out to us using the contact information included in your order confirmation emails or other communications sent by Wallace Pottery.
If you are exercising privacy rights under applicable laws (such as GDPR, UK GDPR,
CCPA/CPRA, or PIPEDA), please include:
• Your name
• The nature of your request
• Any information needed to help us verify your identity or locate your record
We will respond within the timeframes required by the laws of your region.