Privacy Policy

2.1. Identifiers

We may collect personal identifiers such as:

• Full name
• Email address
• Billing address
• Shipping address
• Phone number
• Order number and associated transaction details

These identifiers are collected during checkout, when subscribing to marketing lists, or when contacting us for support.

2.2. Payment Information

We do not store or have direct access to full credit card numbers or bank account information. All payment details are processed securely through third-party payment processors such as:

• Stripe for credit, debit, and prepaid cards
• Apple Pay / Google Pay when enabled through Stripe
• Other Stripe-supported payment options (e.g., bank-based or buy-now-pay-later services)

These providers collect and process payment information under their own privacy and security standards.

2.3. Order and Transaction Data

When you place an order, we collect information such as:

• Products purchased and order value
• Discounts applied and payment confirmations
• Shipping method and delivery confirmations
• Return or refund history
• Notes or customizations you provide

This information is used for order fulfillment, customer service, analytics, and business operations.

2.4. Communication Information

When you contact us or respond to our emails, we may collect:

• Email correspondence and attachments
• Support requests and inquiry details
• Internal notes related to your communication

This includes direct emails and replies to order notifications.

2.5. Marketing and Engagement Data

When you engage with our marketing channels, we may collect:

• Email open rates, click behavior, and subscription status
• Items viewed, cart activity, and browsing behavior linked to your email (if consented)
• Behavioral triggers used for automated flows such as browse or cart abandonment
• Whether you interact with promotional or transactional emails
• SMS delivery status or click behavior if you opt into SMS

2.6. Device, Usage, and Technical Data

When you browse our website, we automatically collect technical data such as:

• IP address, device type, browser, and operating system
• Referring or exit pages and time spent on pages
• Clicks, scrolls, and on-site behavior
• Error logs and diagnostic information

Data is collected primarily through AWS, Meta Pixel, Meta Conversions API, and a behavioral analytics provider.

2.7. Cookies and Tracking Technologies

We use cookies, pixels, tags, and similar technologies to:

• Maintain website functionality and remember items in your cart
• Enable order processing
• Measure performance and provide analytics
• Improve advertising effectiveness and personalize content

More detail is provided in Section 5: Cookies and Tracking Technologies.

2.8. Business and Institutional Account Information

When we manually create a profile for schools, tax-exempt organizations, or business entities, we may collect:

• Organization name and point-of-contact details
• Email address and shipping/billing information
• Tax exemption documentation and purchase history

Profiles are used solely for order processing, invoicing, and maintaining institutional records.

2.9. Social Media and Advertising Data

When interacting with our ads or content on social media platforms such as Meta, we may receive:

• Engagement metrics and aggregated performance data
• General demographic insights and purchase attribution information
• Hashed identifiers or anonymized data used for ad targeting

Social platforms also collect data directly according to their own privacy policies.

2.10. Information from Third-Party Services

We may receive limited information from:

• Payment processors
• Shipping carriers
• Review platforms
• Contractors or service providers assisting with marketing, analytics, or operations

This information is only used to provide services or support business functions.

2.11. Optional or Voluntarily Provided Information

You may choose to provide additional information such as:

• Survey responses
• Contest or giveaway entries
• Product review content
• Notes added to your order
• Photos or media you submit

This information is used only for its intended purpose.

3.1. Information You Provide Directly

You may provide personal information voluntarily when you:

• Place an order or complete checkout
• Enter delivery or billing information
• Subscribe to marketing emails or SMS messages
• Enter your name and email into website pop-ups
• Leave a product review
• Participate in surveys, giveaways, or promotions
• Submit a customer service request or send photos/files to support a conversation

3.2. Information Collected Automatically

When you use our website, certain information is automatically collected by AWS and integrated technologies, including:

• IP address, browser, and device information
• Pages visited and items added to cart
• Actions taken on the site and interaction data (scrolling, clicking, navigation paths)
• Date/time of visits and referrer URLs

Automatic collection occurs through AWS, cookies, Meta Pixel, Meta Conversions API, and behavioral analytics tools.

3.3. Information Collected Through Purchases

When you make a purchase, our AWS-hosted commerce platform collects and stores:

• Contact information and shipping address
• Billing details and payment method data (processed externally)
• Items purchased, order notes, and shipping selections

This information enables us to fulfill orders, process returns or refunds, provide customer support, and comply with legal obligations.

3.4. Information Collected Through Marketing Activities

We collect information through marketing interactions such as:

• Signing up for email marketing or SMS opt-ins
• Responding to abandoned cart flows or promotional campaigns
• Interacting with Meta ads or clicking links in promotional/transactional emails

Information gathered may include email engagement, product interests, browsing behavior, purchase attribution details, device and session information, and marketing consent preferences.

3.5. Information Collected Through Product Reviews

When you leave a review through our third-party provider (e.g., Judge.me), the provider collects:

• Name and email
• Product purchased
• Review content, rating, and any media submitted
• IP address for fraud protection

Review providers may also send automated review-request emails after an order.

3.6. Information Collected Through Cookies & Tracking Technologies

Cookies, web beacons, pixels, tags, and similar technologies collect information to support:

• Site functionality, shopping cart persistence, and checkout
• Analytics and traffic measurement
• Marketing attribution and ad performance tracking

3.7. Information Collected Through Third-Party Services

We may receive limited information from:

• Payment processors (payment confirmations, fraud signals, transaction IDs)
• Shipping carriers (tracking information, delivery issues, address corrections)
• Marketing service providers (engagement metrics, attribution data)
• Contracted service providers (analytics insights, marketing performance reports)
• Review platforms (review submissions and related metadata)

3.8. Information Collected Through Customer Support Interactions

When you contact customer support, we collect:

• The information you provide in your message
• Attachments you submit
• Internal notes related to your case
• Contact metadata such as email address and timestamps

This information is used solely to resolve your inquiry and provide support.

3.9. Information Collected Through Institutional or Business Accounts

For schools, tax-exempt organizations, and business entities, we may manually create a customer profile containing:

• Organization name and representative contact details
• Shipping and billing addresses
• Tax-exemption documentation
• Purchase history and order preferences

These profiles are created only when necessary and are not customer-login accounts.

4.1. To Fulfill and Manage Orders

• Process payments and verify orders
• Prepare, pack, and ship orders
• Provide order status updates, digital receipts, and confirmations
• Handle returns, refunds, and replacements
• Communicate about delays, issues, or changes to your order

4.2. To Provide Customer Support

• Respond to inquiries and resolve issues or complaints
• Identify orders and verify identity
• Provide tailored support based on prior history
• Communicate about product questions or troubleshooting

4.3. To Communicate With You

We may send order confirmations, shipping updates, return or refund notifications, important service or policy updates, and responses to your messages.

4.4. To Send Marketing and Promotional Communications

With your consent, we may:

• Send promotional emails via Mailgun or AWS-powered messaging tools
• Deliver personalized product recommendations
• Send abandoned cart reminders
• Share new product launches, sales, and announcements
• Deliver automated email flows based on your behavior or interests
• Send SMS promotions or reminders if you opt in

You may opt out of marketing communications at any time.

4.5. To Personalize and Improve Your Experience

We use browsing behavior, analytics, and engagement metrics to understand how visitors use the site, recommend relevant products, enhance performance, analyze trends, and identify usability improvements.

4.6. For Analytics and Advertising Performance

We measure website and campaign performance, attribute purchases to marketing sources, improve advertising accuracy, manage Meta integrations, and build anonymized insights about traffic and conversions.

4.7. To Maintain Security and Prevent Fraud

We authenticate transactions, detect suspicious activity, protect against unauthorized access, fulfill legal obligations, and prevent fraudulent orders, returns, or chargebacks.

4.8. To Manage Business Operations

We may use information internally for accounting, tax compliance, business reporting, inventory management, demand forecasting, product development, supply chain planning, quality control, and evaluating service providers.

4.9. To Create Institutional or Business Profiles

We create internal profiles for schools, tax-exempt entities, or organizations to manage tax status, maintain institutional order records, streamline repeat purchases, and provide tailored support.

4.10. To Comply With Legal and Regulatory Obligations

We may use or disclose information to meet tax or reporting requirements, comply with privacy regulations, respond to lawful requests, enforce our terms, or protect our legal rights.

5.1. What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow the website to recognize your device, remember preferences, and maintain continuity between page loads. Related technologies include pixels, tags, web beacons, local storage, session recording scripts, SDKs, and device identifiers.

5.2. Types of Cookies and Technologies We Use

5.3. Third-Party Tracking Technologies

Third-party tools may place or read cookies when you visit our site, including Meta, AWS hosting services, Mailgun, behavioral analytics providers, and Judge.me. These third parties process data according to their own privacy policies.

5.4. Cookies and Consent

Our website does not currently use a cookie consent banner, and cookies may be stored immediately upon visiting the site. Users in certain regions may implement their own browser-level blocking tools or contact us with data requests as described in Section 10. We may introduce a cookie banner if legal requirements change.

5.5. How to Manage Cookies

You can manage or disable cookies via your browser settings, block specific cookies, or use extensions designed to block trackers. Blocking certain cookies may affect website functionality, including checkout.

5.6. Do Not Track Signals

Some browsers offer Do Not Track features. Consistent with many websites, we do not currently respond to DNT signals because there is no industry standard for interpreting them.

6.1. Overview of Tools

We rely on advertising pixels, server-side conversion tools, email and SMS marketing platforms, behavioral analytics tools, and AWS-native infrastructure for hosting and delivery.

6.2. Meta Advertising Technologies

Meta Pixel and Conversions API help us measure ad performance, understand product interest, attribute purchases, and improve ad relevance. Data may include pages viewed, actions taken, device details, location signals, purchase events, and hashed identifiers.

6.3. Email Marketing and Engagement Tracking (Mailgun)

Mailgun processes subscription status, email engagement (opens/clicks), and messages we send so we can deliver newsletters, transactional emails, and service updates. Mailgun may also capture metadata such as delivery success, spam complaints, and IP addresses to maintain deliverability.

Marketing links may include campaign identifiers so we can attribute site visits, promo-code use, and purchases to a particular email. Automated security scans and mailbox prefetch activity are filtered from person-level click metrics, and email opens are treated as aggregate signals rather than proof that a particular person read a message.

6.4. Behavioral Analytics Technologies

Behavioral analytics tools record clicks, taps, scrolling behavior, navigation paths, and session duration to help us improve site functionality and user experience. Data is typically anonymized or pseudonymized.

6.5. Review and Rating Tools (Judge.me)

Review providers may collect your name, email, order details, review content, rating, photos, and technical data such as IP address to prevent fraud and send review requests.

6.6. AWS Hosting and Analytics Features

AWS services collect diagnostic logs, performance metrics, and limited device data to maintain platform stability, provide fraud monitoring, support checkout functionality, and surface aggregate analytics.

6.7. How We Use Advertising and Marketing Data

Data collected through these tools is used to improve advertising accuracy, measure performance, understand customer interests, attribute purchases, optimize communications, and develop business insights.

6.8. Your Choices Regarding Advertising Technologies

You may limit certain tracking through browser settings, platform-specific ad preferences, opting out of marketing emails or SMS, device-level settings, and cookie management tools.

7.1. Cloud Infrastructure (Amazon Web Services)

Our application is hosted on Amazon Web Services (AWS), which processes order data, checkout details, limited device information, and fraud detection signals through AWS services.

7.2. Payment Processors

Stripe processes your payment information directly, including card numbers, wallet tokens, fraud scores, and payment confirmations. We do not receive or store full credit card numbers or bank account information.

7.3. Shipping and Fulfillment Providers

We share necessary shipping information (name, address, package details, and contact information if required) with carriers such as USPS, UPS, FedEx, or other regional carriers to deliver your orders.

7.4. Marketing and Communication Service Providers

Mailgun processes names, email addresses, subscription preferences, and engagement metrics (opens, clicks, delivery results) to send newsletters, on-boarding sequences, and transactional emails.

7.5. Advertising and Attribution Partners

We may share limited information with advertising platforms like Meta to measure performance and improve accuracy. Shared data may include hashed identifiers, event data, browsing behavior, device characteristics, and general geographic signals.

7.6. Review Platforms

Third-party review providers process names, emails, order details, review content, star ratings, media submissions, and IP addresses to collect and display reviews.

7.7. Behavioral Analytics Providers

Behavioral analytics partners collect pseudonymized interaction data such as clicks, scroll activity, and navigation paths to improve site usability.

7.8. Contractors and Business Support Providers

We may share information with contractors who assist with marketing analysis, advertising management, technical support, data organization, or business operations under confidentiality agreements.

7.9. Operational and Compliance-Related Third Parties

Information may be shared with tax authorities, accounting services, legal advisors, or fraud prevention providers when required to meet legal, regulatory, or operational obligations.

7.10. External Platforms for Business Analytics

We may transfer anonymized or pseudonymized business performance data into systems controlled by WallTec LLC for internal planning and forecasting.

7.11. When Required by Law

We may disclose information if required to comply with lawful requests, respond to legal processes, protect our rights or customers, or prevent fraud.

8.1. How International Transfers Occur

Information may be transferred when you place an order, process a payment, interact with our website, subscribe to communications, submit a review, or contact support. Transfers may involve the United States, Canada, EU, UK, or other jurisdictions.

8.2. Transfers Involving AWS

Our site is hosted on Amazon Web Services, whose primary data centers for our workload operate in the United States. AWS may transfer data globally for content delivery, redundancy, fraud detection, technical support, and infrastructure optimization.

8.3. Transfers Involving Meta

Meta may store or process data in the United States, Ireland, or other regional data centers for advertising attribution, performance measurement, and analytics.

8.4. Transfers Involving Mailgun

Mailgun may process contact information and engagement data on servers located in the United States or other jurisdictions for redundancy or delivery.

8.5. Transfers Involving Other Service Providers

Behavioral analytics tools, review platforms, fraud-prevention services, and contractors may process limited information in other countries, depending on their infrastructure.

8.6. Safeguards for International Transfers

Where required by law, we rely on safeguards such as Standard Contractual Clauses, the UK International Data Transfer Agreement, adequacy decisions, or contractual protections. Access is limited to authorized personnel and used only for necessary business purposes.

8.7. Your Rights Regarding International Transfers

Depending on your location, you may request information about transfers, obtain copies of safeguards, object to certain processing, or submit deletion/correction requests as outlined in Section 10.

8.8. Essential Transfers

Some transfers are necessary to complete purchases, deliver products, provide support, or comply with legal obligations. If you do not want your data transferred internationally, you may choose not to use our website or services, but we cannot fulfill orders without these transfers.

9.1. General Retention Practices

We typically retain information until you request deletion, unless longer retention is required. This includes account details, order history, communications, marketing preferences, and analytics data.

9.2. Retention of Order and Transaction Records

Order information is retained for the period required by tax, accounting, or business laws (typically seven years). Certain transactional data must remain even after a deletion request.

9.3. Retention of Payment Information

We retain partial card identifiers, payment confirmation data, and refund/chargeback records for financial reconciliation and fraud prevention. Full card numbers are not stored.

9.4. Retention of Marketing Data

Marketing data is retained while you remain subscribed or until you request deletion. If you unsubscribe, we may retain minimal information to honor your opt-out preferences.

9.5. Retention of Behavioral and Analytics Data

Behavioral analytics and aggregated data may be retained longer in anonymized or pseudonymized form for internal analysis and performance measurement.

9.6. Retention of Business or Institutional Profiles

Institutional profiles are retained as long as the relationship is active or required for compliance and include organization/contact information, tax certificates, invoices, and order records.

9.7. Retention of Customer Support Records

Support requests and related documentation may be retained to provide context for future inquiries, resolve disputes, and maintain accurate business records.

9.8. Retention Required by Law

We may retain personal information such as transaction records, tax documentation, fraud signals, and security logs even after a deletion request if required for compliance, audits, security, or dispute resolution.

9.9. Your Right to Request Deletion

You may request deletion of your personal information at any time. We will remove or anonymize data where permitted, retain only what is required by law, and confirm the outcome of your request.

10.1. Rights Available to All Users

• Right to access your information
• Right to request correction
• Right to request deletion (subject to legal exceptions)
• Right to opt out of marketing communications
• Right to restrict or limit certain processing
• Right to object to certain processing
• Right to withdraw consent when processing is based on consent

10.2. Additional Rights for California Residents (CCPA/CPRA)

California residents have additional rights such as the right to know, delete, correct, opt out of certain sharing, limit the use of sensitive information (not applicable because we do not collect it), and be free from discrimination for exercising these rights.

10.3. Additional Rights for EU and EEA Residents (GDPR)

EU residents may exercise rights to data portability, erasure, restriction, objection, avoidance of automated decision-making, and lodging a complaint with a data protection authority.

10.4. Additional Rights for UK Residents (UK GDPR)

UK residents have the same rights as EU residents under UK GDPR and may lodge complaints with the Information Commissioner's Office (ICO).

10.5. Additional Rights for Canadian Residents (PIPEDA)

Canadian residents may request access, correction, withdrawal of consent, and information about how their data is stored, who has access, retention periods, and safeguards.

10.6. How to Submit a Request

Contact us at support@walltecprints.com with your name, contact details, the nature of your request, and any information needed to verify your identity. We will respond within the timeframes required by applicable law.

11.1. AWS Security Measures

AWS provides hardened data centers, network segmentation, encryption at rest/in transit, and continuous monitoring that meets or exceeds industry compliance frameworks. Because payments are routed through Stripe, we do not store full credit card numbers within our AWS environment.

11.2. Encryption and Secure Transmission

Information you enter on our website is transmitted using HTTPS (Transport Layer Security). Many third-party providers also use encryption to safeguard stored data.

11.3. Access Controls and Internal Protections

Access to personal information is limited to personnel and contractors who require it. We implement role-based access, unique logins, secure password practices, and least-privilege principles.

11.4. Monitoring, Fraud Prevention, and Platform Protections

We rely on AWS threat-detection tooling, Stripe Radar, and other payment processor safeguards to detect fraudulent transactions, unauthorized access attempts, and other security threats.

11.5. Physical and Operational Security

Any local storage used for internal analysis is protected through restricted access, device-level security controls, and secure data management practices.

11.6. Third-Party Security

We work with service providers that maintain reasonable security standards and are contractually restricted from using data beyond providing services to WallTec LLC.

11.7. No Absolute Guarantee

While we take appropriate measures, no system can guarantee complete security. You can help protect your information by using strong passwords, keeping devices secure, and avoiding suspicious links. Contact us immediately if you believe your information is compromised.