Last updated: September 30, 2026
This Privacy Policy explains how Winterose (“we”, “us”), a sole proprietorship owned by Abida Abdelaziz at 1206 Laurel St, Nashville, TN 37203, USA, collects, uses and shares personal information when you visit winterose.us or buy from us. It also describes your privacy rights, including rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA”).
1. Information we collect
Information you give us
- Order information: name, billing and shipping address, email address, phone number and order details.
- Account information: if you create an account, your login details and order history.
- Messages: information you send through our contact form or by email or phone.
- Newsletter: your email address and consent record if you subscribe.
Payment information
Card payments are processed by Stripe, Inc. Your card number and security code are entered directly into Stripe’s secure fields and are never stored on our servers. We receive only limited details from Stripe, such as the card brand, the last four digits, and the payment status. Stripe’s use of your information is governed by the Stripe Privacy Policy.
Information collected automatically
- Device and usage data: IP address, browser type, pages viewed, referring pages and approximate location derived from IP address.
- Cookies: see section 5 below.
2. How we use your information
- To process, ship and deliver your orders, and to send order confirmations and shipping updates
- To handle returns, refunds, cancellations and warranty assistance
- To respond to your questions and provide customer support
- To prevent fraud and protect the security of our store and customers
- To send our newsletter, only if you subscribed (you can unsubscribe at any time)
- To understand how our website is used and improve it
- To comply with legal obligations, such as tax and accounting requirements
3. How we share your information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only with service providers who help us run the store, including:
- Stripe — payment processing and fraud prevention
- Shipping carriers — to deliver your order
- Our web hosting provider — to host the website and store data securely
- Google Analytics (Google LLC) — website usage statistics, only if you accept analytics cookies
- Email service providers — to send transactional emails and, if you subscribed, our newsletter
We may also disclose information when required by law, to protect our rights, or in connection with a sale or transfer of the business.
4. Google Analytics
With your consent, we use Google Analytics to understand how visitors use our site (for example, which pages are viewed and how long visits last). Google Analytics uses cookies and collects data such as your IP address and device information. You can learn more at How Google uses information from sites that use its services and opt out with the Google Analytics Opt-out Browser Add-on.
5. Cookies
Cookies are small text files stored on your device. We use:
- Essential cookies — required for the cart, checkout, account login and security (for example, WooCommerce session and cart cookies, and Stripe fraud-prevention cookies at checkout). These cannot be turned off.
- Preference cookies — remember your cookie choice and whether you closed the announcement bar.
- Analytics cookies — Google Analytics, used only if you click “Accept” in our cookie notice.
You can change your cookie choice at any time by clearing cookies for our site in your browser, which will show the cookie notice again. You can also block cookies in your browser settings, but the cart and checkout may not work without essential cookies.
6. Data retention
We keep order records for as long as needed to fulfill orders and meet legal, tax and accounting obligations (generally up to 7 years). Newsletter data is kept until you unsubscribe. Contact messages are kept for as long as needed to resolve your request.
7. Data security
Our website uses HTTPS encryption. Access to personal information is limited to what is needed to run the store. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.
8. Your privacy rights
Depending on your state of residence, you may have the right to:
- Know and access the personal information we have collected about you
- Correct inaccurate personal information
- Delete your personal information, subject to legal exceptions (for example, records we must keep for tax purposes)
- Opt out of the sale or sharing of personal information (we do not sell or share it)
- Limit the use of sensitive personal information (we do not collect sensitive personal information for that purpose)
- Not be discriminated against for exercising your rights
9. California residents (CCPA/CPRA)
In the past 12 months we have collected the following categories of personal information: identifiers (name, email, address, phone, IP address); customer records and commercial information (orders and purchase history); internet or network activity (site usage); and approximate geolocation. We collect this information from you directly and automatically from your device, for the business purposes described in section 2, and disclose it only to the service providers listed in section 3.
We do not sell or share personal information as those terms are defined under the CCPA, and we do not knowingly sell or share the personal information of consumers under 16. We honor Global Privacy Control (GPC) browser signals as a request to opt out.
To exercise your rights, email support@winterose.us or call +1 615-635-9032. We will verify your request by matching information you provide with our records (for example, your email address and a recent order number) and respond within 45 days. You may use an authorized agent to submit a request on your behalf, with written permission signed by you.
10. Children’s privacy
Our site is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
11. Do Not Track
Our site does not respond differently to browser “Do Not Track” signals, but analytics cookies are only used if you accept them in our cookie notice.
12. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when it was last changed.
Contact Us
Winterose
Abida Abdelaziz, sole proprietor
1206 Laurel St
Nashville, TN 37203, USA
Phone: +1 615-635-9032
Email: support@winterose.us
Support hours: Monday–Friday, 9:00 AM – 5:00 PM Central Time