Privacy Policy

Weiders Paint & Hardware ("we," "us," "our") operates a physical location in New York State at 166 West Main St, Honeoye Falls, NY (see our Locations page for all three stores — Brighton, Honeoye Falls, and Fairport/Perinton) and the website at weiders.com (the "Site"). Our Services include e-commerce purchases, service reservations, mail-in service submissions, custom laser engraving and artwork services (through our Engraving Design Studio), account features, job applications, donation/sponsorship requests, and contact forms. This Privacy Policy explains what personal information we collect, how we use and share it, and the choices available to you. We primarily do business with customers in New York and occasionally elsewhere in the United States. Our Services are directed at people located in the United States; we do not knowingly direct our Services to, or collect information from, individuals located outside the United States.

We do not sell your personal information.

1. Information We Collect

1.1 Information you provide directly:

• Account registration: name, email, phone number, password, and records tied to your account, including your past and current in-store, mail-in, and field service job history.
• Account authentication (Weiders Connect): when you create an account or log in, Weiders Connect — our in-house customer identity and authentication platform, built on Amazon Cognito (AWS) — collects and stores your login credentials, the email address or phone number you use to verify your identity, and any one-time passcode (OTP) data generated to confirm a login or account action. This information is stored on Amazon Web Services (AWS) infrastructure in the US-East (N. Virginia) region, rather than on servers we operate on-premises. See Sections 6 and 8 for more on how this data is stored and secured.
• E-commerce orders: billing/shipping name and address, order contents, and payment details (processed by our payment processor and sub-processor — see Section 4).
• Reservations/bookings: contact details, appointment preferences, and any service-specific information you provide.
• Mail-in services: your contact and shipping information, and details about the item/service submitted.
• Custom laser engraving / Design Studio submissions: artwork, design files, images, text, logos, or other material you submit or approve for engraving, and related order details, via our Engraving Design Studio. This material may include photographs, names, or other personal information about you or third parties (for example, a photo or name of a family member you are having engraved). We use this material solely to fulfill your requested engraving order, consistent with the limited license you grant us for that purpose — see Section 9 for how long we retain it.
• Job applications: name, contact information, resume/work history, and any other information you choose to submit through our Careers pages (e.g., voluntary EEO demographic information, if requested separately).
• Donation and sponsorship requests: when you use our Donation Request form, we collect your name, email, phone number, organization name and address, mission statement, event/request details, and, if you choose to provide one, your organization's 501(c)(3) determination letter.
• Contact form submissions: name, email, and the content of your message.

1.2 Information collected automatically:

When you use the Site, we and our analytics/advertising partners automatically collect information such as IP address, browser and device type, pages viewed, referring pages, and interactions on the Site, via cookies and similar tracking technologies described in Section 3.

1.3 Information from third parties:

We may receive information from our payment processor, shipping carriers, our customer-service texting platform (Heymarket), and, if applicable, background-check providers for employment purposes, consistent with law.

2. How We Use Information

We use personal information to:

• Create and manage your account and display your in-store, mail-in, and field service job history (as these features launch);
• Authenticate your identity and secure your account when you log in, including through Weiders Connect;
• Process orders, bookings, mail-in service requests, and custom laser engraving orders (using the artwork or design files you submit, solely to complete that order), and communicate about them (including service/appointment texts — see Section 5);
• Evaluate job applications and communicate with applicants;
• Evaluate donation and sponsorship requests and communicate with the requesting organization;
• Respond to contact form inquiries;
• Operate, secure, and improve the Site;
• Measure and improve our advertising and marketing (via the analytics/advertising tools in Section 3);
• Comply with legal obligations and enforce our Terms of Service.

3. Cookies, Pixels, and Similar Technologies

Cookies are small text files placed on your device when you visit the Site. We also use similar technologies such as pixels and tags, collectively referred to as "cookies" below. On your first visit, a banner lets you Allow all cookies or open More Options to choose which categories to allow — your choice is remembered so the banner doesn't reappear, and nothing beyond Strictly Necessary cookies loads before you decide. You can change your choice at any time using the Cookie Settings link in the Site footer.

Strictly Necessary — always on

Required for core Site functions: our "nearest store" signal (so the header can show the right store's phone number), remembering your cookie choice, and — as they launch — account login (via Weiders Connect), shopping cart, checkout, and booking flow. These cannot be disabled and don't require consent.

Analytics — your choice

Helps us understand how visitors use the Site (pages viewed, traffic sources) so we can improve it.

Tools: Google Analytics.

Advertising — your choice

Used to measure and inform our ad campaigns and understand which ads led to a visit, booking, or purchase.

Tools: Google Ads Conversion Tracking, Meta (Facebook) Pixel, LinkedIn Insight Tag.

Embedded Video

If we embed a YouTube video on this Site, it's served from YouTube's privacy-enhanced youtube-nocookie.com domain, which does not set cookies until you actually press play.

Cookie Table

Your Choices

• Use the Cookie Settings link in our footer at any time to change your preferences.
• Use your browser settings to block or delete cookies generally (this may affect Site functionality).
• Opt out of Google Analytics using Google's browser add-on.
• Opt out of interest-based advertising broadly through the Digital Advertising Alliance (optout.aboutads.info) or Network Advertising Initiative (optout.networkadvertising.org).
• See Section 7 for additional state-law-based opt-out rights that may apply to you.

4. Payment Processing

Online payments are handled by a third-party payment processor and sub-processor, Stripe, which receives your payment information directly and processes it under its own privacy policy and security standards. We do not store full payment card numbers.

5. Text Messaging (SMS)

If you opt in by providing your mobile number, we send service- and appointment-related texts only (booking confirmations, reminders, order or job status updates, and one-time passcodes for account verification) — never marketing messages through this program. These messages are sent using Weiders Connect, our in-house account authentication platform (for OTP and account-verification texts), and Heymarket, which powers the customer-service text inbox for our stores and divisions so our staff can view and reply to your messages. Standard message and data rates may apply. Reply STOP to opt out or HELP for assistance. We do not share your mobile number with third parties for their own marketing purposes, and Heymarket may not use your phone number or message content for its own marketing purposes. We retain text message content and the associated phone number for 3 years from the date of the last message, to maintain a record of service communications and resolve disputes, consistent with Section 9.

6. How We Share Information

We share personal information with:

• Service providers who help us operate the Site and business — for example, cloud hosting infrastructure (Amazon Web Services (AWS), which hosts Weiders Connect, our in-house account authentication platform, and other Site infrastructure); payment processing (Stripe); customer-service texting (Heymarket); shipping carriers; IT support; and email/SMS delivery — bound by confidentiality and data protection obligations;
• Analytics and advertising partners listed in Section 3, for the purposes described there;
• Legal and safety purposes: to comply with law, respond to legal process, or protect the rights, property, or safety of the Company, our customers, or others;
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.

We do not sell personal information for money. As noted in Section 3, certain automated advertising tools may constitute a "share" under some state definitions; you can opt out as described in Section 7.

7. Your Privacy Choices and Rights

7.1 All users:

• Manage cookie/tracking preferences via the Cookie Settings link in the Site footer.
• Opt out of Google Analytics using Google's browser add-on.
• Opt out of interest-based advertising generally via the Digital Advertising Alliance's tool at optout.aboutads.info, or the Network Advertising Initiative at optout.networkadvertising.org.
• Update or delete your account information by logging in (once accounts launch) or contacting us at privacy@weiders.com.
• Unsubscribe from marketing email using the link in any marketing email, and opt out of texts as described in Section 5.

7.2 State-specific disclosures.

Depending on where you live, you may have additional rights under state privacy laws (e.g., California's CCPA/CPRA, Colorado, Connecticut, Virginia, and Utah's privacy acts, and similar laws). Where applicable, these may include the right to: know what personal information we collect and how we use it (this Policy); request access to or a copy of your information; request correction or deletion of your information, subject to exceptions (e.g., records we must keep for tax, warranty, or legal purposes); and opt out of "sale" or "sharing" of personal information for cross-context behavioral advertising, which for us means opting out of the analytics/advertising tools described in Section 3. To exercise any of these rights, contact us at privacy@weiders.com; we will verify your request using information reasonably available to us and respond within the time required by applicable law. We do not discriminate against you for exercising these rights.

7.3 New York.

New York does not currently have a comprehensive consumer privacy statute comparable to California's, but we maintain safeguards consistent with the New York SHIELD Act (see Section 8) and applicable New York breach notification law.

8. Data Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information, consistent with the New York SHIELD Act. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The login credentials, authentication contact information, and OTP verification data described in Section 1.1 are collected and stored by Weiders Connect, our in-house authentication platform built on Amazon Cognito, hosted on Amazon Web Services (AWS) infrastructure in the US-East (N. Virginia) region — rather than on servers we operate on-premises. We rely on AWS's security safeguards and shared-responsibility model for the underlying cloud infrastructure, in addition to our own safeguards for the platform itself.

9. Data Retention

We retain personal information for as long as needed to provide the Services, maintain your account and job/service history, comply with legal, tax, and accounting obligations, and resolve disputes. Job application data is retained for 35 months after a hiring decision unless you request earlier deletion where permitted. Donation and sponsorship request data is retained long enough to evaluate the request and for our own recordkeeping of community giving, and deleted or archived thereafter consistent with our general retention practices. Custom laser engraving artwork and design files are retained for 3 years after your order is completed, to support reorders and resolve disputes, after which they are deleted, consistent with the limited-purpose license you grant us to use this material solely to fulfill your requested Engraving Services. Text message content and the phone numbers used to send or receive service/appointment texts (including through Weiders Connect and Heymarket) are retained for 3 years, after which they are deleted or de-identified. Account authentication data (login credentials and OTP verification records maintained via Weiders Connect) is retained for up to 1 year.

10. Children's Privacy and Minimum Ages

General Site content, including browsing the Engraving Design Studio's templates, is available to visitors 13 years of age and older without creating an account. Creating an account, making a purchase, booking a service, submitting a mail-in service request, or submitting/approving/authorizing a custom laser engraving order requires you to be at least 18 (or to have a parent or legal guardian complete these actions on your behalf). Job applications, contact form submissions, and donation/sponsorship requests may be submitted by individuals 13 years of age or older without creating an account, subject to any higher minimum age required for a specific job position under applicable law.

Our Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are under 13, please do not create an account, submit a job application, submit a donation request, use the contact form, or otherwise provide personal information through the Site. If we learn we have collected personal information from a child under 13, we will delete it.

11. Job Applicant Information

Information submitted through a job application is used for recruiting and hiring purposes, retained per Section 9, and shared only with personnel involved in the hiring process and, where applicable, background-check or reference providers, consistent with New York and federal employment law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "Effective Date" and, for material changes, provide additional notice where required by law.

13. Contact Us

To exercise privacy rights or ask questions about this Policy:

Weiders Paint & Hardware
166 West Main St, Honeoye Falls, NY (our address for legal and privacy correspondence — see our Locations page for all three retail locations)
(585) 563-2369
privacy@weiders.com

For questions specifically about custom laser engraving or artwork submissions: engraving@weiders.com

See also our Terms of Service and Accessibility Statement.