Welcome to WellWell (“we,” “our,” or “us”). We operate a curated online marketplace for authenticated secondhand luxury goods at wellwellluxury.com (the “Site”). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit or make a purchase through the Site.
By using the Site, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Site.
When you create an account, browse, or place an order, we may collect:
- Full name and contact information (email address, phone number)
- Billing and shipping address
- Payment information (processed securely via third-party processors such as Stripe or PayPal — we do not store full card numbers)
- Account credentials (username and encrypted password)
- Communications you send us (customer support messages, inquiries)
- Identity verification documents, where required for high-value transactions
When you use the Site, we automatically collect:
- IP address and approximate geolocation
- Browser type, operating system, and device identifiers
- Pages visited, products viewed, search queries, and time spent on pages
- Referral URLs (how you arrived at our Site)
- Cookie and tracking technology data (see Section 5)
- Payment processors (transaction confirmation, fraud signals)
- Authentication providers (if you log in via Google or social accounts)
- Analytics partners (aggregated behavioral insights)
- To process and fulfill your orders, including shipping and returns
- To create and manage your account
- To communicate with you about orders, promotions, and updates
- To detect and prevent fraud, unauthorized transactions, and abuse
- To improve our Site, product listings, and customer experience
- To comply with applicable legal obligations
- To send marketing communications (with your consent, where required)
We do not sell your personal information to third parties for their own marketing purposes.
If you are located in the European Economic Area (EEA) or United Kingdom, our legal bases for processing your personal data are:
- Contract performance — to fulfill your orders and manage your account
- Legitimate interests — to prevent fraud, improve our services, and conduct analytics
- Legal obligation — to comply with applicable laws and regulations
- Consent — for marketing emails and non-essential cookies (you may withdraw consent at any time)
- Service providers: shipping carriers, payment processors, fraud prevention services, email platforms, and cloud hosting providers — bound by confidentiality obligations
- Legal compliance: when required by law, court order, or government authority
- Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction
- With your consent: for any other purpose you explicitly authorize
We do not sell, rent, or trade your personal information to unaffiliated third parties for marketing purposes.
We use cookies, pixels, and similar technologies to:
- Keep you signed in and remember your cart
- Analyze Site traffic and usage patterns (e.g., via Google Analytics)
- Serve relevant advertising (where applicable)
You can manage cookie preferences through your browser settings or our cookie consent tool. Disabling certain cookies may affect Site functionality. For EEA/UK users, non-essential cookies are only placed with your explicit consent in accordance with the ePrivacy Directive.
We retain your personal data for as long as necessary to:
- Maintain your account and transaction history
- Comply with legal, tax, and accounting obligations (typically 5–7 years)
- Resolve disputes and enforce our agreements
When data is no longer needed, we securely delete or anonymize it.
You have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — correct inaccurate or incomplete data
- Erasure — request deletion of your data (“right to be forgotten”), subject to legal obligations
- Restriction — limit how we process your data
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interests or for direct marketing
- Withdraw consent — at any time for consent-based processing
To exercise these rights, contact us at privacy@wellwellluxury.com. We will respond within 30 days.
You have the right to:
- Know — request disclosure of the categories and specific pieces of personal information we have collected, the sources, the business purposes, and the categories of third parties with whom we share it
- Delete — request deletion of personal information we have collected, subject to certain exceptions
- Opt-Out of Sale — we do not sell personal information as defined under the CCPA
- Non-Discrimination — we will not discriminate against you for exercising your CCPA rights
To submit a CCPA request, contact us at privacy@wellwellluxury.com.
We implement industry-standard technical and organizational measures to protect your personal information, including:
- SSL/TLS encryption for data in transit
- Encrypted storage for sensitive information
- Access controls limiting data access to authorized personnel
- Regular security assessments
No method of transmission over the internet is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security. Please notify us immediately if you suspect unauthorized access to your account.
Your information may be transferred to and processed in countries other than your own, including the United States. Where required by GDPR, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) to protect your data when transferred internationally.
Our Site is not directed at children under 16 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it promptly. Please contact us at privacy@wellwellluxury.com if you believe a child has submitted information to us.
Our Site may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new effective date, and where required, by sending an email notification. Your continued use of the Site after changes take effect constitutes acceptance of the updated policy.
For questions, requests, or concerns about this Privacy Policy, please contact:
WellWell
Privacy Team / Data Controller
Website: wellwellluxury.com
Email: privacy@wellwellluxury.com