Privacy Policy

Winfield's Chocolate Bar: Privacy Policy
Effective Date: September 1, 2026

This Privacy Policy describes how Winfield’s Chocolate Bar (“Winfield’s,” “we,” “us”) collects, uses, and protects your information.

It applies to our website, winfieldschocolate.com — referred to throughout as “our site” — and to any order you place, form you submit, account you create, or message you send us through it.

Information We Collect

Information you give us: name, company name, shipping and billing address, email, phone number, payment information (processed securely by our payment provider; we do not store full card numbers), order details, any custom branding assets you provide for corporate orders, and the content of any message you send us through a contact or corporate order request form.
Account information: if you create an account on our shop, the username, password, and any security questions used to keep that account secure.
Information collected automatically: IP address, browser type, device information, information about your network connection, pages visited, time spent on the site, and other browsing behavior, typically via cookies, pixels, and similar technologies.
Information from third parties: our e-commerce platform (Shopify), payment processors confirming transactions, shipping carriers confirming delivery, and advertising platforms reporting on campaign performance.

How We Use Information

We use the information we collect to:

Process and fulfill your orders, arrange shipping, and handle returns or replacements
Create and manage your account, where you have one
Communicate with you about your order, account, or inquiries, and provide customer support
Improve our website and product offerings
Send marketing communications, where you’ve opted in (you can opt out anytime)
Detect, investigate, and prevent fraud or other unlawful activity, and protect our rights and the rights of our customers
Comply with legal obligations

Sharing Your Information

We do not sell your personal information. We share information only with:

Service providers who help us operate, including our e-commerce platform (Shopify), payment processing, shipping and fulfillment, email platforms, data analytics, cloud storage, and customer support, under agreements that limit their use of your data
Advertising platforms, such as LinkedIn and Meta, to measure the performance of our advertising and improve our campaigns
Our affiliates and companies within our corporate group, in order to run the business
A successor entity in connection with a business transaction such as a merger, acquisition, or bankruptcy
Third parties you direct or consent to, such as a carrier shipping a gift on your behalf
Legal authorities, when required by law, including in response to a subpoena, warrant, or similar request

Cookies and Tracking Technologies

Our site uses cookies, pixels, and similar technologies to remember your cart and your preferences, understand site usage, improve your experience, and measure the effectiveness of our advertising. These may include tracking technologies from advertising platforms such as LinkedIn and Meta. For details on the cookies used to power our store on Shopify, see shopify.com/legal/cookies.

Most browsers accept cookies by default, and you can set your browser to remove or reject them. Blocking cookies may cause some features of the site to work incorrectly or become unavailable.

Our shop also recognizes the Global Privacy Control (GPC) signal. If you tell us your preference through GPC, we treat it as a valid request to opt out of targeted advertising for that browser or device, and we apply it to your account where we can match the two. Other than GPC, we do not respond to Do Not Track signals.

Your Choices and Rights

You may opt out of marketing emails at any time using the unsubscribe link. If you opt out, we may still send you non-promotional messages about your account or an order you have placed.

Depending on where you live, you may have some or all of the following rights. These rights are not absolute, may apply only in certain circumstances, and in some cases we may decline a request as permitted by law.

Access or know: request access to the personal information we hold about you, including how we use and share it
Delete: request that we delete personal information we hold about you
Correct: request that we correct inaccurate personal information
Portability: receive a copy of your personal information, or ask us to transfer it to a third party
Restrict processing: ask us to stop or limit how we process your personal information
Withdraw consent: where we rely on your consent, withdraw it at any time
Appeal: if we decline a request, appeal that decision by replying to our response

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we respond, and if you use an authorized agent we will ask for proof that you authorized them. We respond within the timeframe applicable law requires.

To exercise any of these rights, contact us using the details at the end of this policy.

Complaints

If you have a complaint about how we handle your personal information, contact us using the details below. If our response does not resolve it, depending on where you live you may have the right to appeal to us directly or to raise the matter with your local data protection authority.

Data Retention

We retain personal information as long as needed to fulfill the purposes described in this policy, to maintain your account, to resolve disputes, or as required by law.

Data Security

We use reasonable administrative, technical, and physical safeguards to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. We recommend that you do not use insecure channels to send us sensitive or confidential information.

Third-Party Links

Our site may link to third-party websites, and some pages include content or tools provided by third parties, such as payment processors, shipping carriers, and advertising platforms. We do not control those sites and are not responsible for their privacy practices. We encourage you to review the privacy policy of any site you visit from ours.

International Users

We ship within the United States only, but visitors from other countries are welcome on our site. Your information may be transferred to, stored in, and processed in the United States by us and by our service providers.

Children’s Privacy

Our site is not directed to children under 13, and we do not knowingly collect personal information from children. If you are the parent or guardian of a child who has given us personal information, contact us using the details below and we will delete it. We do not have actual knowledge that we sell or share the personal information of anyone under 16.

Changes to This Policy

We may update this Privacy Policy from time to time, including to reflect changes in our practices or for legal or regulatory reasons. We will post the revised policy on our site and update the “Effective Date” above.