Privacy Policy

Last updated: March 10th, 2026

This Privacy Policy explains how Home of Wool LTD (“Home of Wool”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects personal data when you visit our website, place an order, contact us, subscribe to marketing, or otherwise interact with us.

It also explains your rights under applicable privacy laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended (CCPA/CPRA), and other applicable U.S. state privacy laws.

1. Who We Are

Home of Wool LTD
Major Thompson 57, Floor 1, Apt. 26
Sofia 1407, Bulgaria
VAT: BG203654879
Email: hello@homeofwool.com

For the purposes of applicable data protection law, Home of Wool LTD is the data controller for the personal data described in this Privacy Policy, unless stated otherwise.

2. Scope of This Policy

This Privacy Policy applies to personal data collected through:

• our website and online store;
• checkout and order processing;
• email, contact forms, and customer support;
• newsletter sign-ups and marketing communications;
• cookies, pixels, analytics, and similar tracking technologies.

3. Personal Data We Collect

3.1 Information You Provide Directly

We may collect personal data that you provide to us, including:

• name;
• email address;
• phone number;
• billing address;
• shipping address;
• order details, including products purchased and customisation details;
• payment-related transaction details (processed through third-party payment providers);
• communications you send to us, including support requests, emails, and messages.

3.2 Information Collected Automatically

When you visit or use our website, we may automatically collect certain technical and usage data, including:

• IP address;
• browser type and version;
• device type and operating system;
• pages viewed and navigation behaviour;
• date and time of visits;
• referring website or source;
• cookie identifiers and similar online identifiers;
• interaction data for analytics and advertising measurement.

3.3 Information from Third Parties

We may receive information from third parties such as payment processors, delivery partners, analytics providers, advertising partners, and email marketing providers where this is necessary to operate our business, complete transactions, or measure and improve our services.

4. How We Use Personal Data

We may use personal data for the following purposes:

• to provide, process, confirm, and fulfil orders;
• to create, manufacture, customise, and deliver products;
• to communicate with you about orders, deliveries, returns, and customer support;
• to process payments and detect fraud or abuse;
• to maintain order records, invoices, and business records;
• to improve our website, products, services, and customer experience;
• to analyse website traffic and campaign performance;
• to send newsletters, promotional emails, and marketing communications where permitted by law;
• to comply with legal, tax, accounting, audit, fraud prevention, sanctions, anti-money-laundering screening where applicable, and other regulatory obligations;
• to establish, exercise, or defend legal claims.

5. Legal Bases for Processing

• Contract: where processing is necessary to take steps at your request or perform a contract with you, such as processing an order.
• Legal obligation: where processing is necessary to comply with legal or regulatory duties.
• Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights.
• Consent: where required by law, including for certain marketing and non-essential cookies or tracking technologies.

6. Cookies, Analytics, Pixels, and Similar Technologies

We use cookies, pixels, tags, scripts, and similar technologies to operate the website, understand user behaviour, improve performance, support marketing, and measure advertising effectiveness.

6.1 Technologies We Use

• Google Analytics for website analytics and performance insights;
• Facebook (Meta) Pixel for ad measurement, audience creation, and remarketing;
• Klaviyo tracking technologies, including cookies, scripts, and/or pixels, for email marketing attribution, audience segmentation, and marketing performance measurement.

6.2 How These Technologies Are Used

These technologies may collect or infer information such as your IP address, browser information, device information, visited pages, purchase activity, referral source, and interactions with the website or marketing communications.

6.3 Consent and Cookie Controls

Where required by law, we ask for consent before placing or activating non-essential cookies and tracking technologies.

You can also control cookies through your browser settings and, where available, through our website’s cookie or consent settings.

Please note that disabling certain cookies may affect website functionality.

7. Marketing Communications

If you subscribe to our newsletter or otherwise consent to receive marketing, we may send you promotional emails, updates, offers, and similar communications.

You may opt out of marketing at any time by:

• clicking the unsubscribe link in the email; or
• contacting us at hello@homeofwool.com.

If you request deletion of your marketing data, we will honour that request to the extent permitted by law. In some cases, we may retain limited suppression information, such as your email address on a do-not-contact list, solely to make sure we respect your opt-out request in future.

8. Orders and Record Retention

When you place an order, we create and retain transaction records needed to run our business and comply with legal obligations.

We may retain core order records, including:

• order number;
• name of the purchaser;
• products purchased;
• invoice and transaction records;
• billing and shipping details;
• payment status and related order metadata.

These core order records may be kept for up to 10 years from the end of the relevant transaction or accounting period, or longer where required by applicable law, dispute resolution needs, chargeback handling, fraud prevention, audit requirements, anti-money-laundering checks where applicable, tax compliance, accounting rules, or legal claims.

Because of these legal and compliance obligations, some order-related data cannot be deleted immediately even if you request deletion.

9. Accounts and Deletion Requests

Purchases may be made without creating an account. If you use an account feature, or if an account feature is offered in the future, you may request deletion of your account-related personal data.

We will honour verified deletion requests for account-related data to the extent permitted by law. However, we may retain any data that must be kept to comply with legal, regulatory, tax, accounting, fraud prevention, dispute resolution, or contractual obligations.

If complete deletion is not possible for legal reasons, we may instead restrict processing and retain only the data that is required for those purposes.

10. How We Share Personal Data

We may share personal data only where reasonably necessary with trusted third parties, including:

• payment processors;
• shipping and logistics providers;
• website hosting and infrastructure providers;
• analytics providers;
• advertising and remarketing providers;
• email and CRM providers;
• professional advisers, auditors, insurers, and legal counsel;
• courts, regulators, tax authorities, law enforcement, or other authorities where required by law.

We do not sell personal data for money. However, some third-party analytics or advertising activities may be treated as “sharing”, “sale”, or “targeted advertising” under certain U.S. state privacy laws.

11. International Transfers

Because we operate internationally and accept orders from multiple countries, your personal data may be transferred to, stored in, or processed in countries other than your own.

Where required by law, we take reasonable steps to use lawful transfer mechanisms and appropriate safeguards for international transfers.

12. Data Security

We use reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access.

However, no method of online transmission or storage is completely secure, and we cannot promise absolute security.

13. Your Privacy Rights

13.1 GDPR and Similar Rights

Subject to applicable law, you may have the right to:

• be informed about how your personal data is processed;
• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of your personal data;
• request restriction of processing;
• object to certain processing, including direct marketing;
• request data portability;
• withdraw consent where processing is based on consent;
• lodge a complaint with a competent data protection authority.

13.2 California and Other U.S. State Privacy Rights

If you are a California resident, or a resident of another U.S. state with applicable privacy rights, and to the extent the law applies to us and your data, you may have the right to:

• know what categories of personal data we collect, use, disclose, sell, or share;
• request access to specific pieces of personal data we hold about you;
• request deletion of personal data, subject to legal exceptions;
• request correction of inaccurate personal data;
• opt out of certain sale, sharing, or targeted advertising activities;
• receive non-discriminatory treatment for exercising your privacy rights;
• where applicable, request limits on certain uses or disclosures of sensitive personal information.

13.3 Important Limits on Deletion

Deletion rights are not absolute. We may deny or limit deletion requests where we are legally required or otherwise lawfully permitted to retain personal data, including for order records, tax and accounting records, fraud prevention, security, legal claims, and regulatory compliance.

14. How to Exercise Your Rights

To exercise a privacy right, request access, request correction, request deletion, object to processing, opt out of marketing, or request marketing data deletion, contact us at:

hello@homeofwool.com

Please include enough information for us to identify your request and verify your identity where required. We may ask for additional information solely for verification and request-handling purposes.

If permitted by law, an authorised agent may also submit requests on your behalf, subject to verification requirements.

15. Response Timing

We will respond to verified privacy requests within the time required by applicable law. In some cases, we may need additional time where the law allows, for example if a request is complex or multiple requests are made.

16. Children’s Privacy

Our website is not directed to children under 13, and we do not knowingly collect personal data from children under 13 through the website. If you believe a child has provided personal data to us, please contact us and we will review the matter and remove the information where appropriate.

17. Third-Party Websites and Services

Our website may contain links to third-party websites, platforms, or services. We do not control third-party privacy practices and are not responsible for their content, security, or policies. We encourage you to review the privacy policies of those third parties before interacting with them.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised version on this page.

The updated version will apply from the date it is published, unless a different effective date is stated.

19. Contact Us

If you have questions about this Privacy Policy, our data practices, your marketing preferences, or your privacy rights, please contact:

Home of Wool LTD

Major Thompson 57, Floor 1, Apt. 26

Sofia 1407, Bulgaria

Email: hello@homeofwool.com