Privacy policy

Winni & Co. Privacy Policy

Last Updated: October 9, 2026

Winni & Co. (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, disclose, and protect your information when you visit winniandco.com, make a purchase, sign up for marketing communications, participate in an event, or otherwise interact with us.

By using our website, you acknowledge that your information may be handled as described in this Privacy Policy, subject to any consent required by applicable law.

1. Information We Collect

We may collect the following categories of personal information, depending on how you interact with our website and business.

Personal and contact information

Name, email address, phone number, billing address, and shipping address.
Information you provide through contact forms, customer service inquiries, event registrations, and other communications.

Purchase and transaction information

Products purchased, order details, transaction history, delivery information, and payment-related details.
Payment information is processed by our payment service providers. We do not necessarily receive or store full payment card numbers.

SMS and marketing subscription information

Mobile phone numbers and email addresses submitted when you subscribe to our marketing communications.
Your consent status, subscription date, opt-in method, opt-out requests, and communication preferences.
Records of marketing messages sent, delivered, or interacted with, where available.

Website activity and browsing information

Pages and products you view, products you add to your cart, searches you perform, links you click, and other interactions with our website.
Your IP address, browser type, device information, approximate location derived from your IP address, referring website, and website usage information.
Cookie identifiers and similar tracking technologies that may help us understand browsing behavior and improve your shopping experience.

Event and customer engagement information

If you register for one of our events, contact us about an event, or participate in a promotion, we may collect the information you provide in connection with that activity.

2. How We Use Your Information

We use personal information for legitimate business purposes, including to:

Process, fulfill, and manage orders, payments, deliveries, returns, and customer service requests.
Communicate with you about purchases, events, products, services, and inquiries.
Send promotional emails and SMS messages when you have provided the required consent.
Share updates about new products, special offers, store events, seasonal promotions, and other business news.
Personalize website content, product recommendations, and marketing where permitted.
Understand website traffic, browsing behavior, customer engagement, and purchasing trends.
Measure the effectiveness of our advertising, email campaigns, and SMS campaigns.
Maintain website security, prevent fraud, troubleshoot issues, and comply with applicable legal obligations.

3. SMS Text Message Marketing and Consent

When you voluntarily provide your mobile phone number and consent to receive SMS marketing from Winni & Co., we may use your phone number to send promotional text messages about products, offers, events, and other updates.

SMS consent and your phone number

Providing your phone number for an order or customer service request does not, by itself, mean you have consented to receive marketing text messages. We send SMS marketing only to individuals who have provided the required consent.

Message frequency and charges

Message frequency may vary depending on your interactions with us and our promotional schedule. Message and data rates may apply according to your mobile carrier plan.

How to opt out

You can opt out of SMS marketing at any time by replying STOP to a marketing text message. After opting out, you will no longer receive promotional SMS messages unless you choose to subscribe again. You may still receive non-marketing communications that are necessary to fulfill a transaction or respond to a request, where permitted.

For assistance, reply HELP to a marketing text message or contact us using the information provided at the end of this policy.

How we store and use SMS subscriber data

We may retain your phone number, consent records, subscription preferences, and message interaction information to manage our subscriber list, deliver requested messages, honor opt-out requests, maintain compliance records, and evaluate campaign performance.

We use this information only for purposes described in this Privacy Policy and as otherwise permitted by applicable law.

SMS data sharing

We may share the personal information necessary to operate our SMS program with Shopify and our SMS marketing platform, messaging providers, telecommunications carriers, and other service providers that help us manage subscriptions, deliver messages, process opt-outs, and measure campaign performance.

Mobile phone numbers and SMS consent information will not be sold or shared with third parties or affiliates for their own independent marketing or promotional purposes. SMS consent and opt-in data will not be disclosed to third parties for their own marketing purposes.

Service providers may process information on our behalf to provide the services we request, subject to applicable contractual and legal obligations.

4. Cookies, Analytics, and Browsing History

Our website may use cookies, pixels, tags, and similar technologies to operate the website, remember preferences, maintain shopping carts, understand how visitors use our website, and improve marketing and advertising.

These technologies may collect information about pages viewed, products browsed, links clicked, purchases made, and interactions with our marketing communications.

We may use Shopify features and third-party analytics or marketing tools to understand customer activity and measure the performance of our website and campaigns. Depending on the tools enabled and your privacy choices, this information may be associated with a browser, device, or customer account.

We use browsing and engagement information to improve our website, understand customer interests, personalize experiences where permitted, and measure marketing effectiveness.

You can manage cookies through your browser settings and, where available, our website's cookie consent or privacy settings. Disabling certain cookies may affect website functionality.

5. How We Share Personal Information

We may disclose personal information to the following categories of recipients when necessary for the purposes described in this policy:

Shopify and website providers: To host and operate our online store, manage customer accounts, and process orders.
Payment and fulfillment providers: To process payments, deliver orders, and manage returns.
SMS and email marketing providers: To manage subscriptions, send communications, record consent and opt-outs, and measure campaign results.
Analytics and advertising providers: To understand website activity, evaluate marketing performance, and support advertising, subject to applicable privacy settings and consent requirements.
Customer service and operational providers: To help us respond to inquiries and manage business operations.
Legal and regulatory authorities: When required by law, legal process, or to protect our rights, customers, and business.

We do not sell personal information in exchange for money. Certain disclosures to advertising or analytics partners may be considered “selling” or “sharing” under specific privacy laws, even when no money changes hands. Where applicable, we provide the required disclosures and choices through our privacy settings.

We do not authorize SMS service providers to use SMS consent information for their own independent marketing purposes.

6. How We Store and Protect Your Information

Your personal information may be stored and processed through Shopify and other service providers we use to operate our business.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

Access to personal information is limited to individuals and service providers who need it for legitimate business purposes.

No website, electronic transmission, or storage system can be guaranteed to be completely secure. We therefore cannot guarantee absolute security.

7. How Long We Retain Information

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this policy, including to provide services, maintain transaction records, manage marketing subscriptions, resolve disputes, meet legal requirements, and enforce our agreements.

Retention periods vary depending on the type of information and the reason it was collected.

SMS subscription records may be retained as reasonably necessary to document consent, maintain suppression lists, honor opt-out requests, and demonstrate compliance with applicable requirements.

When information is no longer needed, we take reasonable steps to delete it, anonymize it, or securely dispose of it, subject to applicable legal obligations.

8. Your Privacy Rights and Choices

Depending on your location and applicable law, you may have the right to:

Request access to the personal information we hold about you.
Request a copy of your personal information.
Request correction of inaccurate or incomplete information.
Request deletion of personal information, subject to legal exceptions.
Withdraw consent for certain processing activities.
Opt out of certain targeted advertising or personal information sales or sharing, where applicable.
Opt out of promotional emails or SMS messages.
Appeal certain privacy decisions where required by law.

To exercise your rights, contact us using the contact information below. We may need to verify your identity before fulfilling a request.

You can unsubscribe from promotional emails using the unsubscribe link included in the email. You can opt out of SMS marketing by replying STOP.

Withdrawing marketing consent does not affect the lawfulness of processing that occurred before withdrawal or prevent us from retaining information where legally permitted or required.

9. Third-Party Websites and Services

Our website may contain links to third-party websites, platforms, or services. Those third parties maintain their own privacy policies and practices.

We are not responsible for the privacy, security, or content practices of websites and services that we do not control. We encourage you to review their privacy policies before providing personal information.

10. Children's Privacy

Our website and marketing services are not intended to knowingly collect personal information from children where doing so would violate applicable law.

If you believe a child has provided personal information to us inappropriately, please contact us so that we can review the situation and take appropriate action.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business practices, website features, service providers, or applicable laws.

Any updates will be posted on this page with a revised “Last Updated” date. Where required by law, we will provide additional notice or obtain consent for material changes.