Privacy policy

Effective date: October 22, 2026 · Last updated: October 24, 2026

Who we are

This website, wlostore.com, is run by WLO Corp, 109 E 11th Ave, Lexington, North Carolina 27292, United States ("WLO", "we", "us"). WLO is the controller of the personal information described here. For any privacy question or request, email support@wlostore.com with the subject "Privacy", or write to us at the address above. Our person in charge of privacy is our Privacy Officer, reachable at the same email address.

This policy covers our website, our customer accounts, orders you place with us, our emails and our customer support. When you buy from our Etsy shop, Etsy's own privacy policy also applies to what Etsy collects.

What we collect

• Contact and order details: name, email, phone number, shipping and billing address, the products you order, personalization text (for example a name for a name plate), order notes and order history.
• Payment details: payments are handled by Stripe. We do not see or store your full card number. We receive the payment status, the card brand, the last four digits and the country of the card.
• Account details: if you create an account, your email address, your saved addresses and your email preferences. There is no password: you sign in with a one time code sent to your email.
• Messages: what you write to us by email or through our contact form, and our replies.
• Reviews: your rating, review text, the name you choose to show and any photos you add.
• Device and usage information: IP address, browser and device type, the country and state or region we detect from your connection, pages you view and what you add to your cart, and the ad or link that brought you to our site (campaign tags and ad click identifiers). Some of this is collected with cookies and similar technologies (see "Cookies and advertising").

We do not ask for and do not want sensitive information such as health data or government ID numbers. Please do not send it to us.

How we use it

• To sell and deliver your order: take payment, make your product, ship it, send order and shipping emails, handle returns, replacements and warranty claims. (Legal basis where it applies: performance of our contract with you.)
• To run your account: sign you in and show your orders, addresses and preferences. (Contract.)
• To answer you: customer support and replies to your messages. Software tools help us sort, translate and draft replies to messages; a person on our team is responsible for what we send. (Contract and our legitimate interest in good service.)
• To ask for and show reviews: after delivery we may email you once to ask for a review. You can ignore it or tell us to stop. Google may also ask you for a rating if you accept its survey on our thank-you page. (Legitimate interest; you can object at any time.)
• To send our newsletter: only if you sign up. Every newsletter has an unsubscribe link. (Consent.)
• To measure and advertise: understand how the site is used and show our ads, subject to your choices below. (Consent where the law requires it, otherwise our legitimate interest.)
• To keep the site safe: prevent fraud and abuse, and protect our customers and our business. (Legitimate interest and legal obligation.)
• To meet legal duties: tax, accounting and other legal requirements. (Legal obligation.)

We do not sell your personal information for money. When advertising tags from Google, Meta, Pinterest and TikTok run on our site, California and some other states treat this as selling or sharing personal information for targeted advertising. You can opt out with the "Do not sell or share my personal information" link at the bottom of every page, or with a Global Privacy Control signal.

To run and measure our ads, we send advertising platforms (Meta, Google, Pinterest and TikTok) limited data about a purchase, unless you have opted out and, where the law requires it, only after you accept advertising cookies. This data is: your email address, phone number, first and last name, city, state, ZIP code and country, each in hashed form; your IP address and browser details; the advertising cookie or click identifier that links the purchase to an ad; and the order number, the products and the order value. Hashing turns your details into a code before they leave us. The platforms use the data to match the purchase to an ad and to measure results. Some of it is sent from our server, not from your browser. The opt-out above stops this sharing. To apply it to your customer record as well, use the form on our privacy choices page.

Who we share it with

We share personal information only with companies that help us run our business, and only what they need:

• Payments: Stripe (card processing, fraud screening, Apple Pay, Google Pay and Link). If you choose a pay later option, that provider receives your details under its own terms.
• Website and data hosting: the providers that deliver and protect our website and host our database and sign-in.
• Shipping: our shipping label provider and the carriers that deliver your order (such as FedEx, UPS and USPS) receive your name, address, phone number and the package contents.
• Email: our email providers, for our support mailbox, order emails and the newsletter.
• Message tools: software service providers that help us sort, translate and draft replies to your messages, read photos you send us, and find similar past cases. They act as our service providers for these tasks.
• Analytics and advertising partners: Google (Analytics and Ads), Meta, Pinterest and TikTok, through tags on our site, only as described in "Cookies and advertising".
• Google Customer Reviews: after you order, our thank-you page may offer Google's optional customer survey. If you accept, Google receives your email address, order number, expected delivery date, country and the products you bought, and emails you a short survey under Google's own privacy policy. If you decline, nothing is sent. Our pages also show Google's customer-review badge, which loads from Google.
• Marketplaces: when you buy on Etsy, we receive your order details from Etsy. We use them to make and ship your order, to support you, to ask for a review, and for our own marketing and advertising audiences as described above.
• Professional advisers and authorities: our accountants, lawyers and insurers when needed, and government authorities when the law requires it (for example tax authorities or a valid court order).
• A future owner: if our business or its assets are sold or merged, personal information may transfer to the new owner under this policy.

Cookies and advertising

We use a few cookies that the site needs to work, for example to remember your cart, your country and region, and your sign in. These are always on.

Advertising cookies let Google, Meta, Pinterest and TikTok measure which ads led to a visit or a purchase, including purchase details we send them from our server, and show you our ads on other sites and apps.

With your permission, or where the law allows it without permission, we also use analytics and advertising tags from Google, Meta, Pinterest and TikTok. They help us count visits and show our ads to people who may like our products, on our site and on other sites and apps.

• California, Canada, the United Kingdom, Switzerland and the European Economic Area: these tags stay off until you accept them in our cookie banner. You can change your choice at any time with the "Cookie settings" link at the bottom of every page.
• Other US states: you can turn off advertising tags at any time with the "Do not sell or share my personal information" link (it opens our Cookie settings) at the bottom of every page. We treat a Global Privacy Control signal from your browser as the same opt out. We do not respond to other "Do Not Track" signals.

How long we keep it

• Orders, invoices and payment records: 7 years, because tax and accounting law requires it.
• Customer support messages: 3 years after the last message, unless a claim or warranty case needs them longer.
• Your account: until you ask us to delete it. Order records stay for the 7 years above.
• Newsletter: until you unsubscribe. We keep a record of your consent and your unsubscribe.
• Reviews: while they are published, or until you ask us to remove them.
• Analytics and ad-attribution data (including campaign tags and click identifiers saved with an order): up to 14 months.

Your rights and choices

Depending on where you live, you may have the right to:

• know what personal information we hold about you and get a copy;
• correct it;
• delete it, unless we must keep it (for example for tax records);
• opt out of the sale or sharing of personal information for targeted advertising, and withdraw consent you gave us;
• object to or limit some uses;
• get your data in a portable format.

To use any of these rights, email support@wlostore.com with the subject "Privacy". To protect you, we will confirm the request comes from the email address on your order or account. We answer within 30 days, and we will not treat you differently for using your rights. If you are not satisfied with our answer, you can contact your local privacy regulator; in Canada, the Office of the Privacy Commissioner of Canada, or in Quebec, the Commission d'accès à l'information.

To stop marketing emails, use the unsubscribe link in any newsletter or change your preferences in your account. Order and shipping emails are part of your purchase and will still be sent.

Where your information is processed

We are based in the United States, and our service providers process information in the United States and in other countries where they operate. If you live outside the United States, your information will be transferred to and processed in the United States. We use providers that protect it with contracts and security measures.

Security

We protect personal information with encryption in transit, access controls and providers with strong security. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

Children

Our site is not meant for children under 16, and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.

Customers of our previous store

Before October 20, 2026 our online store ran on Shopify. If you bought from us there, we have moved your order history and contact details to our own system so you can see your past orders and get support. Shopify's own privacy policy covers what Shopify collected while you used it.

Changes to this policy

We may update this policy. The date at the top shows the latest version. If a change is significant, we will show a notice on the site or email you.