California Notice at Collection

Last updated: September 3, 2026

This Notice at Collection explains the categories of personal information Willow Bath & Vanity ("Willow," "we," "us," or "our") may collect when you visit willowbathandvanity.com, shop with us, visit a showroom, contact us, use showroom Wi-Fi or a location-enabled service, request delivery or curbside pickup, submit a form or review, or otherwise interact with Willow. It should be read with our Privacy Policy and Cookie Policy.

The entries below identify whether information in each category may be sold or shared, as those terms are defined by California law, when relevant advertising or partner technologies are enabled. This does not mean that every item in a category, or information about every visitor, is sold or shared. Disclosures to providers that process information for a business purpose are described separately in our Privacy Policy. Because information within one category may support different functions, Willow does not apply one fixed retention period to every item; each entry instead states the criteria used to determine retention. This notice provides transparency using California categories and does not state that the CCPA necessarily applies to Willow or to every interaction or request.

Personal Information We May Collect

Identifiers and contact information

Examples: name, postal address, email address, telephone number, IP address, account identifier, cookie identifier, and advertising identifier.
Purposes: orders, delivery and pickup, accounts, support, reviews, security, fraud prevention, communications, personalization, analytics, and advertising.
Sold or shared status: this category may be sold or shared under California law. Limited cookie, device, advertising, IP, or hashed contact identifiers may be disclosed to advertising and analytics partners for measurement or cross-context behavioral advertising. Use Your Privacy Choices to opt out where applicable.
Retention criteria: the customer or business relationship; account, transaction, warranty, service, security, tax, accounting, consent, opt-out, dispute, and legal needs; and provider or Cookie expiration settings.

Customer records, transaction, and commercial information

Examples: billing and shipping details, products viewed, saved, purchased, returned, or reviewed, order and reference numbers, purchase amount, discounts, delivery and fulfillment information, payment or financing status, and customer-service history. Complete payment-card details are generally collected by Shopify and the selected payment or financing provider.
Purposes: checkout, payment, financing, delivery, pickup, returns, refunds, warranties, fraud prevention, support, personalization, analytics, and marketing.
Sold or shared status: this category may be sold or shared under California law. Limited product-view, cart, purchase, conversion, or related identifiers may be disclosed to advertising and analytics partners for measurement or cross-context behavioral advertising. Complete payment-card data is not used by Willow for advertising.
Retention criteria: completion of the transaction and the periods needed for delivery, returns, warranties, accounting, tax, fraud prevention, security, disputes, and legal requirements.

Internet, device, and interaction activity

Examples: browser and device type, operating system, referring URL, campaign data, pages viewed, searches, clicks, taps, scrolling, form engagement, cart and checkout activity, technical errors, and session interactions.
Purposes: Site operation, security, fraud prevention, analytics, troubleshooting, personalization, advertising, and service improvement.
Sold or shared status: this category may be sold or shared under California law. It may be disclosed to advertising, analytics, and social-media partners for measurement or cross-context behavioral advertising, and some providers may receive it as an interaction occurs.
Retention criteria: consent and privacy settings, Cookie or pixel duration, security and troubleshooting needs, the customer relationship, and provider retention settings.

Geolocation information

Examples: approximate city, state, or region derived from IP address and, if you enable a location-based showroom, Wi-Fi, or curbside-pickup feature, more precise device location or arrival information.
Purposes: localization, security, analytics, delivery estimation, showroom services, and pickup coordination.
Sold or shared status: approximate location may be sold or shared under California law when disclosed with device or advertising data for measurement or cross-context behavioral advertising. Precise location may be disclosed to providers supporting a feature you enable; this service-provider disclosure is distinct from use for cross-context behavioral advertising. Applicable choices are available through the device or browser permission and Your Privacy Choices.
Retention criteria: permission and privacy settings, provision of the requested service, security and analytics needs, and provider retention settings.

Communications, audio, visual, reviews, and user content

Examples: emails, chats, form submissions, customer-service call recordings where recording is used and permitted, CCTV footage in monitored areas, ratings, review text, photographs, videos, and other content you choose to submit.
Purposes: support, quality assurance, training, security, loss prevention, incident investigation, reviews, dispute resolution, and service improvement.
Sold or shared status: Willow does not sell or share call recordings or CCTV footage for cross-context behavioral advertising. Public review or user-submitted content may be displayed or distributed as described when submitted. Any separate Site-interaction data is addressed under Internet, device, and interaction activity above.
Retention criteria: support and quality needs, security-system settings, incident or dispute needs, platform rules, the time content remains active, removal requests, and legal obligations.

Professional, trade, and employment-related information

Examples: company, job title, business contact information, resale or trade-account details, business relationship history, résumé, work history, qualifications, and application information.
Purposes: trade and business relationships, account administration, business marketing, recruiting, hiring, security, and legal compliance.
Sold or shared status: business identifiers or trade-account activity may be sold or shared under California law if disclosed through advertising technologies for cross-context behavioral advertising. Willow does not use résumé or employment-application content for advertising.
Retention criteria: the business, recruiting, or employment relationship and related accounting, tax, security, dispute, recordkeeping, and legal needs.

Inferences and preferences

Examples: likely product interests or preferences inferred from purchases, Site activity, wishlists, and marketing engagement.
Purposes: personalization, product recommendations, analytics, and marketing.
Sold or shared status: this category may be sold or shared under California law when disclosed to advertising partners for cross-context behavioral advertising. Use Your Privacy Choices to opt out where applicable.
Retention criteria: the customer relationship, consent and privacy settings, marketing need, and provider retention settings.

Sensitive personal information

Examples: account credentials, payment information handled by Shopify or payment and financing providers, and precise geolocation if you enable a feature that requires it.
Purposes: authentication, transactions, fraud prevention, security, and requested location-enabled services.
Sold or shared status: Willow does not sell or share account passwords or complete payment-card data for cross-context behavioral advertising. Precise location may be disclosed to providers supporting a feature you enable. If applicable law gives you a right to limit a use or disclosure, exercise it through our Privacy Request form.
Retention criteria: the account, transaction, or requested service; security and fraud-prevention needs; permission settings; and financial, tax, dispute, and legal requirements.

Your Choices

Where applicable, use Your Privacy Choices to opt out of sale, sharing, or targeted advertising. You may also enable a recognized opt-out preference signal such as Global Privacy Control in a supporting browser; the signal is transmitted by the browser rather than submitted through the linked page. Use Privacy Request to request access, correction, deletion, portability, limitation of an applicable sensitive-information use, or another available privacy right. You may also call 877-788-8444 or email info@willowbathandvanity.com.

We may update this notice if the categories, purposes, retention criteria, or sale or sharing practices change. Review the full Privacy Policy for sources, recipients, review-platform practices, children’s privacy, security, international transfers, and more information about your rights.