Privacy Policy
Last updated: October 21, 2026
This policy explains what personal information Wesay collects when you visit wesaystore.com or buy from us, why, who we share it with and what you can do about it. It is written for customers everywhere, with specific sections for the European Union, the United Kingdom, the United States and Colombia.
1. Who is responsible for your data
Wesay is a store operated by Anthony Agudelo Oliveros, doing business as Makerson (Tax ID / NIT 1053818153-4), Cra 26 #29-42, Manizales, Caldas, Colombia (“we”, “us”). We are the controller of the personal data described here. For anything related to your privacy, write to support@wesaystore.com.
2. What we collect
- Order and contact details: name, email, phone, billing and shipping address, the items you buy and your order history.
- Payment: card payments are processed by Stripe. We never see or store your full card number; we receive only the payment status and the last digits of the card.
- Account details, if you create an account: email and password (stored encrypted).
- Messages you send us by email or through the contact form (name, email, order number and message).
- Newsletter: your email, and a record of when and from which IP address you asked to subscribe and confirmed your subscription.
- Device and usage data: IP address, browser and device type, pages viewed, how you arrived at the store (for example the ad or link you clicked) and approximate location derived from your IP. Part of this is collected with cookies — see our Cookie Policy.
- Your privacy choices: whether you accepted analytics and marketing cookies, and whether your browser sends a Global Privacy Control signal.
We do not collect sensitive data (health, religion, ethnicity and the like) and we do not knowingly collect data from anyone under 16.
3. Why we use it, and on what legal basis
- To take, produce, ship and support your order — necessary to perform our contract with you.
- To keep accounting and tax records — a legal obligation.
- To prevent fraud and keep the store secure — our legitimate interest in protecting customers and the business.
- To measure the store with Google Analytics and order attribution — your consent in the EU, EEA and UK; elsewhere, our legitimate interest in understanding what works, with an opt-out.
- To show you relevant ads on Instagram, Facebook and Pinterest and measure them (Meta Pixel, Meta Conversions API and Pinterest Tag) — your consent in the EU, EEA and UK; elsewhere, you can opt out at any time.
- To answer your messages — our legitimate interest in helping you, or the contract if it is about an order.
- To send our newsletter — your consent, which you give by subscribing and confirming through the link we email you (double opt-in), and can withdraw at any time with the unsubscribe link in every email or by writing to us.
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
4. Who we share it with
We share personal data only with the companies that help us run the store, and only what each one needs:
- Printful (print-on-demand production and fulfilment) and the carriers that deliver your parcel: name, shipping address, phone, email and order contents.
- Stripe (payments).
- Hostinger (website, email and server hosting), including the server where our order automation runs.
- Resend (sending our emails and managing the newsletter list): your email address and the messages we send you.
- Google (Google Analytics), when analytics is allowed.
- Meta Platforms (Meta Pixel and Conversions API), when marketing is allowed. When you buy, we send Meta the order value, the products and your email, phone, name and address in hashed (one-way encrypted) form so it can match the purchase to an ad. We never send it if you rejected marketing cookies, clicked “Do not sell or share” or your browser sends Global Privacy Control.
- Pinterest (Pinterest Tag), when marketing is allowed: the pages and products you view, what you add to the cart and, when you buy, the order value, the products and your email in hashed (one-way encrypted) form, so Pinterest can measure our ads. The tag does not load at all until marketing is allowed.
- Telegram, which we use for internal order-status notifications to our team.
- Authorities, courts or advisers when the law requires it, and a buyer of the business if it is ever sold.
We do not sell your personal information for money.
5. International transfers
We are based in Colombia and our providers operate in the United States, the European Union and other countries, so your data may be processed outside the country where you live. When data from the EU, EEA or UK is transferred to a country without an adequacy decision, we rely on the European Commission’s Standard Contractual Clauses (and the UK addendum) or the EU–US Data Privacy Framework offered by our providers, or on the transfer being necessary to perform your order.
6. How long we keep it
- Orders, invoices and related correspondence: for as long as tax and accounting law requires, up to 10 years.
- Customer accounts: until you delete the account or ask us to.
- Newsletter: until you unsubscribe; we keep the record of your consent for up to 3 years after that, to be able to prove it. Unconfirmed sign-ups are deleted after 30 days.
- Support messages: up to 3 years after your last contact.
- Analytics data: according to the retention period set in Google Analytics, never longer than 14 months.
- Your cookie choice: 180 days, after which we ask again.
7. Your rights
Wherever you live you can ask us for a copy of your data, to correct it or to delete it, and you can opt out of marketing at any time. Write to support@wesaystore.com from the email linked to your order; we may ask you to confirm your identity before acting. Cookie choices can be changed at any time from Your Privacy Choices at the bottom of every page.
European Union, EEA and United Kingdom
Under the GDPR and the UK GDPR you have the right to access, rectify and erase your data, to restrict or object to its processing (including any processing based on legitimate interests), to data portability, and to withdraw your consent at any time without affecting processing carried out before. We answer within one month. You also have the right to lodge a complaint with the data protection authority of the country where you live or work.
United States
Residents of California and of other states with consumer privacy laws (such as Colorado, Connecticut, Virginia, Texas and Oregon) have the right to know what personal information we collect, use and disclose; to access, correct and delete it; to obtain a portable copy; and to opt out of the “sale” or “sharing” of personal information and of targeted advertising. We extend these rights to every US customer, whether or not the law of their state requires it.
- Categories collected in the last 12 months: identifiers (name, email, IP address, cookie IDs); customer records (address, phone); commercial information (purchases); internet activity (pages viewed, ad interactions); approximate geolocation. We do not collect sensitive personal information.
- Sources: you, your browser and device, and our payment and production providers.
- “Selling” and “sharing”: we do not sell data for money, but using the Meta Pixel, Meta Conversions API and Pinterest Tag to show you ads on other platforms may count as “sharing” for cross-context behavioral advertising or as a “sale” under some state laws. Identifiers, internet activity and commercial information are disclosed to Meta and Pinterest for that purpose.
- How to opt out: click Your Privacy Choices and choose “Do not sell or share”, or switch off Marketing. We also honor the Global Privacy Control signal as a valid opt-out.
- How to exercise your other rights: email support@wesaystore.com. We confirm receipt within 10 days and answer within 45 days. An authorized agent may act for you with your signed permission. If we deny a request you can appeal by replying with the subject “Appeal”; we answer appeals within 60 days.
- We will never discriminate against you for exercising these rights.
Colombia
Under Law 1581 of 2012 and Decree 1074 of 2015 you have the right to know, update and rectify your data, to request proof of your authorization, to be informed of how your data is used, to revoke your authorization or request deletion when there is no legal or contractual duty to keep it, and to file complaints with the Superintendencia de Industria y Comercio (SIC). Inquiries are answered within 10 business days and claims within 15 business days, through support@wesaystore.com.
8. Security
The store runs over HTTPS, payments are handled by a PCI DSS-certified provider, and access to order data is limited to the people and services that need it. No system is perfectly secure; if a breach ever affects your data we will notify you and the authorities as the law requires.
9. Changes
We will update this page when our practices change and change the date at the top. Significant changes will be announced on the site or by email.
10. Contact
Anthony Agudelo Oliveros, doing business as Makerson (Tax ID / NIT 1053818153-4), Cra 26 #29-42, Manizales, Caldas, Colombia — support@wesaystore.com