Privacy Policy

Willow & Wax Goods LLC (“Willow & Wax,” “we,” “us”) is a small, family-run, veteran-owned shop based in Ohio. We only collect the information we need to process your order, contact you about it, and run our website securely. We don't sell your data. We don't send marketing emails unless you ask us to.

This Privacy Policy applies to www.willowandwax.com and any related services operated by Willow & Wax Goods LLC, an Ohio limited liability company.

If you have questions, email us at hello@willowandwax.com.

We collect only what we need to do business with you:

• Account info — your name, email address, and password (stored as a one-way hash; we never see it in plain text).
• Order info — items ordered, shipping address, billing address, and order history.
• Payment info — handled by Stripe. We never see your full card number; Stripe returns us a token tied to your order.
• Communications — emails you send us, including custom-order requests.
• Technical info — your IP address, browser type, and a session cookie that lets you stay logged in. Standard web logs.

• To process and ship your orders.
• To contact you about your order (confirmations, shipping updates, problems).
• To handle returns, refunds, and warranty issues.
• To keep the site secure (rate limiting, fraud detection).
• To comply with tax, accounting, and legal obligations.

We don't use your data for targeted advertising. We don't sell it. We don't share it with anyone except the service providers listed below, and only as far as needed to do their job.

To run the site we use a small set of trusted service providers:

• Stripe — payment processing. Subject to Stripe's Privacy Policy.
• Cloudflare — website hosting, content delivery, and edge security. Subject to Cloudflare's Privacy Policy.
• Email service provider — for order confirmations and shipping notifications.
• Shipping carriers — to deliver your order.

We will also disclose information when required by law, valid legal process, or to protect the safety of our customers or business.

We use a small number of strictly-necessary cookies:

• A session cookie so you stay logged in.
• A cart cookie so your cart survives a page refresh.
• Cloudflare's security cookies (used to block bots and abuse).

We do not use third-party advertising cookies or cross-site tracking pixels.

We keep order records as long as required by tax and accounting law (currently 7 years in the United States). Account information is kept as long as your account is active; you can delete your account at any time by emailing us. Anonymized analytics may be kept indefinitely.

Regardless of where you live, you can ask us to:

• Confirm what data we have about you.
• Correct information that's wrong.
• Delete your account and personal data, subject to our legal retention duties.
• Export your account and order data in a portable format.

California residents have additional rights under the CCPA, including the right to know what personal information is collected, the right to delete personal information, and the right not to be discriminated against for exercising those rights. We do not “sell” personal information as that term is defined by the CCPA.

To exercise any right above, email hello@willowandwax.com.

Our site is intended for customers age 18 and over. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us information, email us and we'll delete it.

We use industry-standard security practices: HTTPS everywhere, salted and hashed passwords, encrypted-at-rest storage, and Stripe for all payment handling. No system is perfectly secure, but we take this seriously.

We'll post any material changes to this page and update the “Last updated” date at the top. If changes are significant, we'll also notify customers by email.

Willow & Wax Goods LLC
Ohio, USA
hello@willowandwax.com