Privacy policy

Privacy Policy

Last updated: September 28, 2026

1. Introduction

This Privacy Policy describes how Warmstead ("Warmstead," "we," "us," or "our") collects, uses, and discloses your personal information when you visit or use warmsteadco.com (the "Site"), make a purchase from us, or otherwise communicate with us about the Site (together, the "Services").

In this Privacy Policy, "you" and "your" mean you as a user of the Services, whether you are a customer, a website visitor, or another individual whose information we have collected under this Privacy Policy.

Please read this Privacy Policy carefully. By using or accessing any of the Services, you agree to the collection, use, and disclosure of your information as described here. If you do not agree, please do not use or access the Services.

2. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect changes to our practices or for other operational, legal, or regulatory reasons. When we do, we will post the revised policy on the Site, update the "Last updated" date, and take any other steps required by applicable law.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

3. Information We Collect

3.1 Information you provide directly to us

The information you submit to us through the Services may include:

• Contact details: your name, address, phone number, and email address.
• Order information: your name, billing address, shipping address, payment confirmation, email address, and phone number.
• Account information: your username, password, security questions, and other information used for account security.
• Customer support information: anything you choose to include when you contact us, for example in a message sent through the Services.
• Payment information: bank account details, credit or debit card information, and billing address. This information is collected by our payment processors.

Some features of the Services require you to provide certain information about yourself. You can choose not to provide it, but you may then be unable to use or access those features.

3.2 Information we collect automatically

We may automatically collect information about how you interact with the Services ("Usage Data"). To do this, we use cookies, pixels, tracking tags, and similar technologies ("Tracking Technologies"). Usage Data may include:

• How you access and use the Site and your account
• Device information, such as device type, operating system, unique device identifiers, and advertising identifiers
• Browser information, such as browser type and language preferences
• Network connection information
• Your IP address and general geographic location
• Pages you visit, links you click, products you view, and other actions you take on the Site
• Referral URLs, meaning the site you visited before ours
• Date and time stamps of your activity
• Conversion events, such as purchases, add-to-cart actions, page views, and form submissions

3.3 Information we obtain from third parties

We may receive information about you from third parties, including:

• Service providers: companies that support the Site and Services, such as Shopify, analytics providers, and marketing platforms.
• Payment processors: they collect your payment information to process payments and fulfill orders.
• Advertising and marketing partners: third parties we work with may collect information when you visit the Site, open or click our emails, or interact with our Services or ads. These partners include Meta (Facebook and Instagram), Google, TikTok, Taboola, Outbrain, and other advertising platforms and native advertising networks.
• Social media platforms: if you interact with us through social media or use a social login feature, we may receive information from that platform.

4. How We Use Your Personal Information

Beyond the specific uses listed below, we may use the information we collect to communicate with you, provide or improve the Services, meet our legal obligations, enforce our terms of service, and protect the Services, our rights, and the rights of our users and others.

4.1 Providing products and services

We use your personal information to perform our contract with you by providing the Services, including to:

• Process your payments and fulfill your orders, including international shipping and customs documentation
• Send you notifications about your account, purchases, returns, exchanges, and other transactions
• Create, maintain, and manage your account
• Arrange shipping and handle returns and exchanges
• Provide customer support and respond to your inquiries

4.2 Marketing and advertising

We may use your personal information for marketing and promotional purposes, including to:

• Send you marketing, advertising, and promotional messages by email, text message (SMS/MMS), or post, where you have given any consent that applicable law requires
• Show you ads for our products and services on our Site and on third-party websites, apps, and platforms, including Meta (Facebook and Instagram), Google, TikTok, Taboola, Outbrain, and other advertising networks, among them native and content-recommendation networks
• Create custom and lookalike audiences on advertising platforms using hashed or anonymized data
• Tailor the Services and our advertising to your interests and preferences
• Measure how well our marketing campaigns work and attribute conversions to them
• Conduct market research and analyze customer trends
• Show you ads after you visit our Site or interact with our content (retargeting)

If you opt in to receive text messages from us, message and data rates may apply and message frequency varies. You can opt out at any time by replying STOP. You do not have to agree to marketing text messages to make a purchase.

4.3 Security and fraud prevention

We use your personal information to:

• Detect, investigate, and take action against possible fraudulent, illegal, or malicious activity
• Protect the security and integrity of the Services
• Verify identities and prevent unauthorized access to accounts
• Meet our legal obligations and enforce our Terms of Service

4.4 Communicating with you and improving our services

We use your personal information to:

• Provide customer support and respond to your questions and feedback
• Improve the Services and develop new features
• Run analytics and research to understand how people use the Services
• Maintain our business relationship with you

4.5 Legal bases for processing (EEA, UK, and similar jurisdictions)

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction that requires a legal basis for processing personal information, we rely on the following:

• Performance of a contract: to process and fulfill your orders and provide the Services.
• Legitimate interests: to improve the Services, prevent fraud, keep the Services secure, and carry out non-intrusive marketing and analytics.
• Consent: for non-essential cookies, marketing communications, and targeted advertising where the law requires it. You can withdraw your consent at any time.
• Legal obligation: where we need to process information to comply with applicable laws, such as tax, accounting, and customs requirements.

5. Tracking Technologies, Pixels & Cookies

We use cookies, tracking pixels, and similar technologies from third-party advertising and analytics platforms. This section explains what these technologies are, which ones we use, and how you can manage your preferences.

5.1 What tracking technologies are

We use several types of tracking technologies on the Site:

• Cookies: small text files stored on your device when you visit the Site. They remember your actions and preferences over time.
• Tracking pixels (also called web beacons or pixel tags): tiny, transparent images embedded in web pages and emails. They let us and our advertising partners track page views, conversions, email opens, and other interactions.
• JavaScript tags: code snippets on the Site that collect information about your browsing behavior, device, and interactions with our content.
• Server-side tracking: we may send certain conversion and event data directly from our servers to advertising platforms' servers to improve measurement accuracy. Examples include Meta's Conversions API and Google's server-side tagging.

5.2 Specific tracking technologies we use

We currently use, or may in the future use, the following third-party tracking technologies:

We may add, remove, or change the tracking technologies we use at any time, including tags and pixels from advertising networks we work with in the future. This list reflects our current and expected use as of the "Last updated" date.

5.3 How pixel and conversion data is used

When you interact with the Site, tracking pixels and conversion APIs may send the following events to our advertising partners:

• PageView: when you visit any page on the Site
• ViewContent: when you view a specific product page
• AddToCart: when you add a product to your cart
• InitiateCheckout: when you start checking out
• Purchase: when you complete a purchase, including the order value and product identifiers
• Lead: when you submit a form or sign up for communications

We use this data to measure how well our advertising works, show you more relevant ads on third-party platforms, build audience segments for ad targeting, and optimize our ad spend. Some of this data may be sent in hashed or anonymized form. Some may be sent with identifiers such as your IP address, email address, or device advertising identifier.

5.4 Advanced matching and data enhancement

We may turn on "advanced matching" or "enhanced conversions" features offered by Meta, Google, TikTok, Taboola, Outbrain, and other platforms. These features send hashed (one-way encrypted) versions of customer information, such as email addresses, phone numbers, names, and addresses, to advertising platforms to improve ad targeting and conversion measurement. Because the data is hashed, the advertising platform cannot reverse it into its original form.

5.5 Types of cookies we use

• Essential cookies: needed for the Site to work properly. These cannot be turned off.
• Analytics cookies: help us understand how visitors interact with the Site by collecting and reporting information.
• Marketing cookies: track visitors across websites so relevant ads can be shown. These include cookies set by Meta, Google, TikTok, Taboola, Outbrain, and other advertising platforms.
• Preference cookies: let the Site remember choices that change how it behaves or looks.

Where required by law, including in the EEA and the UK, we will ask for your consent before placing non-essential cookies on your device.

5.6 Managing cookies and tracking preferences

You have several ways to manage your tracking preferences:

• Browser settings: most browsers let you remove or reject cookies. Removing or blocking cookies can make the Site harder to use.
• Opt-out tools: you can opt out of interest-based advertising through the Digital Advertising Alliance (optout.aboutads.info), the Network Advertising Initiative (optout.networkadvertising.org), or Your Online Choices (youronlinechoices.eu, for users in Europe).
• Platform controls: you can adjust your ad preferences directly on each platform: Meta (facebook.com/adpreferences), Google (adssettings.google.com), TikTok (your TikTok account settings), Taboola (the "Ad Choices" opt-out page on taboola.com), and Outbrain (the "Interest-Based Ads" opt-out on outbrain.com).
• Mobile device settings: you can limit ad tracking in your device settings, for example "Limit Ad Tracking" on iOS or "Opt out of Ads Personalization" on Android.
• Global Privacy Control (GPC): our Site recognizes the GPC signal. If you turn on GPC in your browser, we treat it as a valid request to opt out of sharing and targeted advertising for that browser or device.

Opting out of tracking does not stop you from seeing ads. It means the ads you see may be less relevant to you. Blocking cookies also may not fully prevent us from sharing information with advertising partners, especially where we use server-side tracking.

5.7 Do Not Track and Global Privacy Control

Our Site recognizes the Global Privacy Control (GPC) signal. If we can link the device sending the signal to an account, we will apply the opt-out request to that account as well. We do not respond to other "Do Not Track" signals your browser or device may send.

6. How We Share Your Personal Information

6.1 Third-party service providers

We share your information with vendors and service providers that perform services on our behalf, including:

• IT management and hosting providers
• Payment processors
• Data analytics providers
• Customer support partners
• Cloud storage providers
• Fulfillment, shipping, and international logistics companies, including customs brokers
• Email and SMS providers, such as Klaviyo
• Advertising and marketing platforms, such as Meta, Google, TikTok, Taboola, and Outbrain

6.2 Advertising partners

We share certain information with advertising partners to deliver targeted ads, measure ad performance, and build audience segments. This includes hashed customer data, conversion events, browsing behavior, and device identifiers. Our partners include Meta Platforms (Facebook and Instagram), Google Ads, TikTok Ads, Taboola, Outbrain, other native and content-recommendation networks, and any advertising partners we work with in the future.

6.3 With your consent

We share information when you direct, request, or otherwise consent to it. Examples include sharing your details to ship your products, when you use social media widgets or login integrations, and when you authorize third-party applications or services.

6.4 Business transfers

We may share information with our affiliates or within our corporate group, in our legitimate interest in running our business. We may also share it in connection with a business transaction such as a merger, acquisition, bankruptcy, or sale of assets.

6.5 Legal obligations

We may disclose your information to:

• Comply with applicable laws, including customs and tax requirements for international shipments
• Enforce our Terms of Service
• Protect the Services, our rights, and the rights of our users and others
• Prevent fraud, illegal activity, and security threats

6.6 Categories of information disclosed

In the past 12 months, we have disclosed the following categories of personal information:

We do not use or disclose sensitive personal information without your consent, and we do not use it to infer characteristics about you.

6.7 Sale and sharing of personal information

Under some privacy laws, such as the California Consumer Privacy Act, sharing personal information with advertising partners for targeted advertising may count as a "sale" or "sharing" of personal information. Over the past 12 months, we have "sold" and "shared" personal information for advertising and marketing purposes, as follows:

7. Data Security & Retention

7.1 Security measures

We use appropriate technical and organizational measures to protect your personal information. These include encrypting data in transit and at rest, regular security assessments and updates, access controls and authentication requirements, and data protection training for staff.

No security measure is perfect or impenetrable, so we cannot guarantee complete security. Any information you send us may not be secure while in transit.

7.2 Data retention

How long we keep your personal information depends on several factors, including whether we need it to maintain your account, provide the Services, meet legal obligations, resolve disputes, or enforce contracts. When we no longer need your personal information, we securely delete or anonymize it in line with applicable law.

8. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights over your personal information. These rights are not absolute and may apply only in certain circumstances.

• Right to access / know: you can ask for access to the personal information we hold about you, including the categories we collect, where we got it, why we use it, and the specific pieces of information.
• Right to delete: you can ask us to delete the personal information we hold about you, subject to certain exceptions.
• Right to correct: you can ask us to correct inaccurate personal information we hold about you.
• Right to portability: you can ask for a copy of your personal information in a portable format.
• Right to opt out of sale or sharing: you can tell us not to "sell" or "share" your personal information for targeted advertising. You can do this with the Global Privacy Control signal in your browser, by contacting us directly, or through the platform opt-out tools listed in Section 5.6.
• Right to restrict or object to processing: you can ask us to stop or limit how we process your personal information in certain circumstances, including processing based on our legitimate interests.
• Right to withdraw consent: where we rely on your consent, you can withdraw it at any time.
• Right to appeal: if we decline to act on your request, you can appeal by replying directly to our decision.
• Right to lodge a complaint: if you are in the EEA, the UK, or another jurisdiction with a data protection authority, you can file a complaint with your local supervisory authority.

Managing communication preferences

We may send you promotional emails and text messages. You can opt out at any time by using the unsubscribe link in our emails, replying STOP to any text message, or contacting us. Even after you opt out, we may still send you non-promotional messages, such as updates about your account or orders.

How to exercise your rights

You can exercise any of these rights by contacting us using the details in Section 10. We may need to verify your identity before we process your request. We will respond within the timeframe required by applicable law.

9. Special Provisions

9.1 Children's privacy

The Services are not intended for children under 18, and we do not knowingly collect personal information from children. If you are the parent or guardian of a child who has given us their personal information, you can contact us to ask for it to be deleted. As of the effective date of this Privacy Policy, we have no actual knowledge that we "share" or "sell" the personal information of anyone under 18.

9.2 Third-party websites and links

The Site may link to websites or other online platforms run by third parties. If you follow a link to a site we do not own or control, review that site's privacy and security policies and its other terms. We are not responsible for, and do not guarantee, the privacy or security of those sites.

9.3 International data transfers

We serve customers internationally. As a result, we may transfer, store, and process your personal information in countries other than the one where you live, including the United States. Our staff and our third-party service providers and partners may also process your personal information in those countries.

If you are in the EEA or the UK and we transfer your personal information outside those regions, we rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses or the UK International Data Transfer Addendum. We do not rely on these mechanisms where the destination country has been recognized as providing an adequate level of protection.

10. Contact Us

If you have any questions, concerns, or requests about this Privacy Policy or how we handle your data, please contact us:

Warmstead
Email: help@warmsteadco.com
Phone: 888-492-0691
Hours: Monday – Friday, 9:00 AM – 5:00 PM EST

By using the Services, you acknowledge that you have read and understood this Privacy Policy and agree to be bound by it.