Privacy Notice & Marketing Consent

Wud Inc. (also “we,” “us,” and “our”) operates a website at www.wud.com offering information about, and sales of, fragrances, home care, personal care, outdoor, accessory, and other lifestyle products (“Products”). We respect your right to privacy and handle your personal information accordingly. This Privacy Policy explains how we handle your personal information. If you would like to know what choices you can make about your Personal Information, jump to Your Choices.

1. Changes to This Privacy Policy

We may change this Privacy Policy from time to time as our business changes or legal requirements change. The date of the last revision appears at the top of this page.

2. Scope of This Policy

This Privacy Policy describes how we may collect, use, share, and otherwise process your personal information when you use or otherwise access our website (“Website”), use our Products or services, or otherwise interact with us, including via email or any other communication channel.

3. What is Personal Information?

“Personal information” means any information provided to or collected by us about an identifiable individual, or an individual whose identity may be reasonably inferred from the information. Aggregated information—data about multiple individuals where no single person can be identified—is not subject to this Privacy Policy, and we may use such aggregated data at our discretion. Likewise, this Privacy Policy does not extend to business contact information used for business purposes, or other information excluded by applicable privacy laws.

4. Basis for Processing

We collect, use, and share your personal information in accordance with applicable privacy laws, and our processing is based primarily on your consent, which may be express or implied depending on the sensitivity of the information and the circumstances of its collection.

In cases where your information was initially collected for one purpose but needs to be used for another, we will seek your consent before doing so, unless otherwise explicitly permitted by applicable law. There are also instances where we may collect, use, or disclose your personal information without your consent, as permitted or required by law.

5. What Personal Information We Collect

We may gather personal information in various contexts. The types of information we may collect include the following:

• Identifiers and contact information, such as: first name, last name, email address (where you provide it in connection with our contact form or newsletter sign-up), IP address, and other similar identifiers.
• Usage information, such as: pages visited on our Website, the frequency and duration of your use, button interactions, and other analytics data.
• Device information, such as: device type, operating system, browser type, and technical information about how you access our Website.
• Your communication preferences (e.g., marketing subscription or opt-out status).
• Any other personal information you choose to share with us.

6. How We Collect Personal Information

We collect your personal information in two ways, directly from you when you provide it to us or when you automatically generate it, or indirectly when we obtain it from third parties.

Directly: We collect your personal information when you provide it to us in the course of using our Website or services. For instance, you may provide your name and email address when signing up for our newsletter, or your name, email address, and message when submitting an inquiry through our contact form. Information you submit through our contact form is used to respond to your inquiry and is not added to our marketing lists.

We also collect certain personal information automatically when you access our Website. For example, we may collect information such as your IP address, device type, and how you interact with our Website. We use analytics tools to understand how users interact with our services, and we process your IP address for security purposes such as bot protection and rate limiting. See Section 7 below for more information about our use of analytics.

Indirectly: We may also collect personal information from third parties, such as:

• Analytics providers for product analytics and error and performance monitoring.

7. Information About Our Website and Services

Visiting our Website: In general, you can visit our Website without telling us who you are or submitting any personal information. However, we collect the Internet Protocol (IP) addresses of all visitors to our Website and other related information such as page requests, device identifier, screen size, browser type, operating system and average time spent on our Website. We use this information to help us understand Website activity and to monitor and improve our Website.

Cookies and Browser Storage: A cookie is a small element of data that a website sends to a user’s browser, which may then be stored on the user’s device so that the website can recognize the user’s computer or device when they return. Our own code does not set cookies on your device. We do use limited browser storage (such as session storage) to temporarily retain information you have begun entering in a form—for example, a partially completed newsletter sign-up—so that it is preserved while you navigate our Website. This information is stored only for your browser session, is cleared when you close the tab, and is not transmitted to us. Certain third-party security services we use to protect our Website, such as our bot-protection provider, may process technical signals and set their own cookies for security purposes. You may set your browser to notify you when you receive a cookie or to decline certain cookies; however, if you decline certain cookies, you may not be able to use all Website features.

Analytics: We use third-party product analytics tools, to help us gather and analyze information about use of the Website, such as pages visited, page interactions, time spent, device and browser information, and other engagement data, in order to evaluate and improve the user experience and the Website. Our analytics tools are configured to operate without cookies or other persistent identifiers.

Do Not Track

We do not respond to “Do Not Track” (“DNT”) signals sent from your web browser. DNT signals are an HTTP header field that specifies a user’s preference about data collection. There is no consensus on how to respond to DNT signals because there is no uniform technology standard for recognizing and implementing DNT signals, and a DNT standard has never been formally adopted. The World Wide Web Consortium (“W3C”) formally withdrew support of their recommendation for a standard in 2019, and while some browsers will transmit the DNT signal to our Website, other browsers (such as Safari and Firefox) no longer support DNT signals.

Third-Party Links: Our Website may contain links to other websites that we do not own or operate. We provide links to third-party websites as a convenience to users. These links are not intended as an endorsement of or referral to the linked websites. The linked websites have separate and independent privacy policies, notices and terms of use. We do not have control over such websites and therefore have no responsibility or liability for the manner in which the organizations that operate them may collect, use, disclose, secure or otherwise handle personal information. We encourage you to read the privacy policy of every website you visit.

8. How We Use Your Personal Information

We handle personal information in compliance with this Privacy Policy and under no circumstances will we sell any such data. We may use and share personal information for the following reasons:

• Service Delivery: To provide our Website, Products, and services, including responding to inquiries, providing information about our Products, and fulfilling orders.
• Service Improvement & Development: To analyze how users interact with our Website and Products, improve our services, personalize your experience on the Website, develop new features and Products, and understand usage patterns and trends.
• Internal Management: For record-keeping, analyzing our processes, improving efficiency, and maintaining our services.
• User Support: To respond to your inquiries and provide support for our services.
• Marketing & Communications: To send you our newsletter and information about our Products and services, updates, and promotional materials if you have opted in to receive such communications.
• Contractual Purposes. We may disclose your personal information to enforce or apply our terms of use and other agreements, including for billing and collection purposes.
• Security & Fraud Prevention: To protect our services, detect and prevent fraud, and ensure the security of our systems.
• Complying with the Law: To comply with our legal obligations, respond to legal process, or protect our rights and the rights of others.
• Other Purposes: For any other purpose that you consent to or that is permitted or required by law.

9. How We Share Your Personal Information

Transfer to Third Parties: We may share your personal information with trusted third parties to assist in delivering our Website, Products, and services. These third parties are contractually required to protect your personal information to the same or equivalent standards as set out in this Privacy Policy. These include:

• Analytics and Monitoring Providers: We use third-party analytics tools to understand how users interact with our Website, and error- and performance-monitoring tools to maintain the security, stability, and reliability of our Website. When an error occurs, our error-monitoring provider may receive an error report that includes your IP address and related request information. Our hosting provider also keeps standard server logs (such as IP address and browser/user-agent information) and aggregated performance metrics. We use this information for internal technical purposes, including diagnosing problems and improving the reliability of our Website.
• Email and Marketing Service Providers: We use email and marketing service providers to manage our newsletter communications and to deliver and respond to messages you send us, such as through our contact form.
• Cloud Infrastructure, Hosting, Content Delivery Providers, and Security Providers: We use cloud and hosting services to operate our Website and process data, content delivery networks (services that host and deliver Website media such as images and video) to deliver our Website content, and security services for website protection and anti-bot measures.

Disclosures to Third Parties: In some cases, we disclose your personal information to third parties. Where your personal information is sensitive, we will seek your consent to disclosure, unless it is not required by law. Where we obtain your consent to disclose your personal information to another business, your personal information will be governed by that business’ privacy policy after disclosure. Please read their privacy policy before you provide your consent.

There are also situations in which we do not need your consent to disclose to third parties:

• Transaction: In the event of a corporate transaction (like a merger or sale), your personal information may be shared—but only under agreements that restrict its use to purposes related to that transaction and preserve the privacy protections originally provided.
• Compliance with warrants, court orders, etc: In exceptional circumstances, we may share personal information with government agencies and other third parties if we believe it is reasonable and necessary to comply with law, regulation, legal process or governmental request. We may also share personal information with other parties as directed by you or subject to your consent.

10. Transfers Outside Your Region

We or our service providers may access, store and otherwise process your personal information outside Canada and, for residents of Quebec, outside Quebec, including in the United States. If we do transfer personal information outside of your region, it will be protected in the same way as if it was being used in your region. For residents of Quebec, we assess personal information that is being transferred outside of Quebec to ensure that the information receives adequate protection.

11. Limiting Collection, Use, and Disclosure of Personal Information

We collect personal information only through lawful means and exclusively for purposes that have been clearly disclosed in this Privacy Policy or otherwise communicated to you, or as permitted under applicable laws.

12. Retention Only as Needed

We retain your personal information for as long as it is required for our business purposes that have been disclosed to you or as required by law. Personal information that is no longer required to be retained is destroyed or deleted in a safe and secure manner in accordance with our policies, or anonymized.

13. Safeguards

We implement physical, procedural, and technical safeguards to protect your personal information.

In some cases, your personal information may be stored outside your region, especially if we work with third-party providers located elsewhere. In such scenarios, your information may be governed by the local laws of the jurisdiction where it is stored or accessed, including possible access by government or law enforcement agencies.

14. Children’s Personal Information

We do not market our Website or Products to, and do not knowingly collect or maintain personal information from, individuals under the age of 13. We do not intend the Website or Products for individuals under 13 years of age. We do not use personal information collected from children for marketing or promotional purposes, and we do not disclose such information to any third-party for any purpose whatsoever. No one under 13 years of age may provide any personal information to or on the Website.

If you are under 13 years of age, do not provide any information on the Website or on or through any of the features of the Website, or provide any information about yourself to us. If we learn that we have collected or received personal information from an individual under 13 years of age without verification of parental consent, we will delete that information.

If you believe we might have any information from or about an individual under 13 years of age, please contact us using the details provided below and we will use all reasonable efforts to delete that information.

15. Your Choices

Access and Correction

You have the right to request access to your personal information and ask for corrections if you believe it is inaccurate. You can make such requests by contacting our Privacy Officer using the contact details provided below.

In all cases, while we aim to respond promptly, we may require identity verification before granting access. Access may be denied in certain situation —such as when disclosure would compromise another person’s privacy, or if the information is protected by legal privilege. In these cases, we will inform you of the reason.

We strive to ensure your personal information is accurate, up to date, and sufficient for the purposes it serves. Please contact us if there are any changes or updates to your personal information.

Withdrawal of Consent

You may withdraw your consent to our collection, use, or disclosure of your personal information. We will accommodate your request to withdraw consent, subject to legal or contractual restrictions. You can do this by contacting our Privacy Officer using the contact details provided below. However, withdrawing consent may limit your ability to use certain features of our Website. If this occurs, we’ll explain how withdrawing consent may affect your use of our services.

All marketing emails from us include an option to unsubscribe or adjust your preferences. To stop receiving such communications, simply use the unsubscribe link in any marketing email or contact our Privacy Officer using the contact details provided below. Please note that you may continue to receive transactional or account-related communications from us.

Data Portability

In Quebec, you have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to transmit that information to another controller, where technically feasible.

16. Additional Information for Individuals in the European Economic Area, United Kingdom, and Switzerland

This section applies to individuals located in the European Economic Area (“EEA”), United Kingdom (“UK”), and Switzerland. For such individuals, the processing of personal information is governed by the General Data Protection Regulation (“GDPR”), the UK GDPR, and the Swiss Federal Act on Data Protection, as applicable.

Controller. Wud is the data controller responsible for your personal information. You can contact us using the details provided below. Legal Bases for Processing. We process your personal information only when we have a valid legal basis to do so. Depending on the circumstances, we rely on the following legal bases:

Consent: Where you have given us your consent to process your personal information for specific purposes, such as receiving marketing communications.

Contractual Necessity: Where processing is necessary to perform a contract with you or to take steps at your request prior to entering into a contract, such as fulfilling orders for Products.

Legal Obligation: Where processing is necessary to comply with our legal obligations.

Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and interests. Our legitimate interests include operating and improving our Website, Products, and services; understanding how users interact with our Website; ensuring the security of our services; and preventing fraud.

Your Rights. Under the GDPR and related laws, you have the following rights with respect to your personal information:

Right of Access: You have the right to request confirmation of whether we process your personal information and, if so, to request a copy of that information.

Right to Rectification: You have the right to request that we correct inaccurate personal information and complete incomplete personal information.

Right to Erasure: You have the right to request that we delete your personal information in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected.

Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal information in certain circumstances, such as when you contest the accuracy of your information.

Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to transmit that information to another controller, where technically feasible.

Right to Object: You have the right to object to processing of your personal information based on our legitimate interests. We will cease processing unless we have compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defence of legal claims. You also have the right to object to processing for direct marketing purposes at any time.

Right to Withdraw Consent: Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within the time period required by applicable law.

International Transfers. Your personal information may be transferred to, stored, and processed in countries outside the EEA, UK, or Switzerland, including Canada and the United States, where data protection laws may differ from those in your country. When we transfer your personal information outside the EEA, UK, or Switzerland, we implement appropriate safeguards to protect your information, such as entering into the European Commission’s Standard Contractual Clauses or relying on an adequacy decision, where applicable.

Right to Lodge a Complaint. If you are not satisfied with our handling of your personal information, you have the right to lodge a complaint with a supervisory authority. In the EEA, you may contact the supervisory authority in your country of residence. In the UK, you may contact the Information Commissioner’s Office (ICO). In Switzerland, you may contact the Federal Data Protection and Information Commissioner (FDPIC).

17. Questions? Concerns?

You can reach our Privacy Officer at:

• Privacy Officer
• Email: i@wud.com
• You may also contact us through our Website contact page.