Privacy Policy

1. Scope of This Privacy Policy

This Privacy Policy explains how WHEATDEN, LLC collects, uses, stores, protects, and shares personal information when customers visit wheatden.com, create an account, place an order, contact customer service, request a return, or otherwise interact with our website and services.

By using our website, you acknowledge that personal information may be processed as described in this Privacy Policy and in accordance with applicable privacy and data protection laws.

2. Information We Collect

We may collect information that customers provide directly to us, including name, billing address, shipping address, email address, telephone number, account information, order details, customer service messages, return requests, and other information necessary to process a transaction or respond to an inquiry.

We may also collect limited technical information automatically when the website is used, such as IP address, browser type, device information, operating system, referring pages, access time, and website activity.

3. How We Use Personal Information

Personal information may be used to process orders, arrange fulfillment, provide order updates, respond to customer requests, manage returns and refunds, prevent fraud, maintain transaction records, improve website functionality, and meet legal or regulatory obligations.

We do not use personal information for purposes that are materially incompatible with the reason for which it was collected unless permitted by applicable law.

4. Order and Fulfillment Information

Information such as a customer's name, delivery address, contact details, order number, and shipment status may be processed to complete and support an order.

Where necessary, relevant information may be shared with fulfillment providers, shipping carriers, and service providers solely to perform services connected with the transaction. Information about our global delivery arrangements is available in our Shipping Policy.

5. Payment Information

Payments made through wheatden.com may be processed through Stripe and PayPal.

Payment details required to authorize a transaction are transmitted to the applicable payment provider through secure payment infrastructure. WHEATDEN, LLC does not intentionally store full payment card numbers, card security codes such as CVV or CVC, or complete authentication credentials on its website servers.

We may retain limited transaction information such as the order number, payment status, transaction reference, refund status, amount, and payment provider used in order to administer purchases and respond to payment-related questions.

6. Payment Security

Stripe and PayPal maintain their own payment processing environments and security controls. Payment information handled directly by these providers is subject to their respective privacy, security, fraud prevention, and payment processing practices.

Our website is designed so that sensitive card credentials are handled through the payment provider rather than being stored as ordinary customer account data by WHEATDEN, LLC. Transaction identifiers and payment status information may be retained when needed to verify a payment, refund, chargeback, or other transaction event.

7. HTTPS and SSL/TLS Protection

wheatden.com uses HTTPS with SSL/TLS encryption to help protect information transmitted between a customer's browser and the website.

Encryption helps reduce the risk of personal information being intercepted or altered while it is transmitted over the internet, particularly when customers submit account information, contact forms, checkout details, or other data through the website.

Customers should verify that their browser displays a secure HTTPS connection when submitting sensitive information.

8. Website and Data Security Measures

We use administrative, technical, and organizational safeguards intended to protect personal information against unauthorized access, disclosure, alteration, loss, or misuse.

These measures may include restricted administrative access, password-protected accounts, secure login controls, software and security updates, encrypted website connections, access logging, security monitoring, backups, and limiting access to personal information to individuals or service providers who require it for legitimate business purposes.

9. Access Control and Internal Protection

Access to customer and transaction information is limited according to operational need. Personnel or authorized service providers with access to personal data are expected to use that information only for the purpose for which access was provided.

Administrative access may be reviewed or removed when it is no longer required, helping reduce unnecessary exposure of customer information.

10. Fraud Prevention and Transaction Verification

We may process limited personal and transactional information to identify suspicious activity, prevent unauthorized payments, verify orders, investigate suspected fraud, or respond to payment disputes.

This may include reviewing order information, IP address, transaction references, billing or shipping consistency, communication records, delivery information, refund records, and information made available by Stripe, PayPal, or another relevant service provider.

Such records may also be used to provide evidence relating to a legitimate transaction when responding to a payment processor, card issuer, or customer dispute.

11. Returns, Refunds and Customer Service Records

When customers request assistance, a return, or a refund, we may retain communications and relevant order records necessary to review and complete the request.

These records may include the order number, correspondence, photographs provided by the customer, shipment information, return authorization, return tracking, inspection results, refund amount, and refund transaction reference.

For information about return eligibility and refund procedures, please review our Return & Refund Policy.

12. Cookies and Similar Technologies

Our website may use cookies and similar technologies to maintain shopping sessions, remember customer preferences, support account login, improve website performance, analyze basic website usage, and help prevent fraudulent or abusive activity.

Some cookies are necessary for website or checkout functionality, while others may depend on customer preferences or applicable consent requirements.

13. Service Providers and Data Sharing

We may share limited personal information with trusted service providers when necessary to operate our website, process payments, fulfill orders, provide hosting or technical services, send transactional communications, prevent fraud, or comply with legal requirements.

Examples may include payment processors such as Stripe and PayPal, hosting providers, website infrastructure providers, fulfillment partners, and delivery providers.

We do not sell personal information to third parties in exchange for monetary payment.

14. Data Retention

Personal information is retained only for as long as reasonably necessary for the purposes described in this Privacy Policy, subject to legal, accounting, fraud prevention, transaction verification, and dispute-resolution requirements.

As a general policy, customer personal data retained by WHEATDEN, LLC is kept for no longer than 1 year after it is no longer actively required for the relevant business purpose, unless a longer retention period is required by applicable law, a regulatory obligation, an active payment dispute, fraud investigation, or legal claim.

When information is no longer required, we may delete, anonymize, or otherwise securely dispose of it where reasonably practicable.

15. GDPR and European Privacy Rights

Where the General Data Protection Regulation (GDPR) or similar European privacy laws apply, personal information may be processed on the basis of contractual necessity, legal obligations, legitimate interests, or consent where consent is required.

Eligible individuals may have rights to request access to personal information, correction of inaccurate information, deletion, restriction of processing, objection to certain processing, or portability of applicable personal data.

Where processing is based on consent, consent may generally be withdrawn without affecting the lawfulness of processing that occurred before withdrawal.

16. Privacy Requests

Customers who wish to exercise an applicable privacy right or ask how their personal information is handled may contact us at help@wheatden.com.

We may request reasonable information to verify the identity of the person submitting the request before providing access to, correcting, or deleting personal information. This verification is intended to prevent unauthorized individuals from obtaining or changing another customer's data.

Certain information may need to be retained when deletion is restricted by applicable law or when records remain necessary for an unresolved transaction, refund, payment dispute, fraud investigation, or legal obligation.

17. Data Security Incidents

Although no online system can guarantee absolute security, we maintain safeguards intended to reduce the likelihood and impact of unauthorized access to personal information.

If we become aware of a data security incident affecting personal information, we may investigate the event, take reasonable measures to contain and remediate the issue, preserve relevant security records, and provide notifications to affected individuals or authorities where required by applicable law.

18. Policy Changes and Contact

We may update this Privacy Policy from time to time to reflect changes in our services, technology, security practices, payment providers, legal obligations, or data processing activities.

The current version published on wheatden.com will apply from its stated effective date. Customers are encouraged to review this page periodically for material changes.

Questions regarding this Privacy Policy, personal information, security practices, or privacy rights may be sent to help@wheatden.com.