Privacy Policy

Last updated: September 9, 2026

This Privacy Policy explains how Well&Whole (“we,” “us,” or “our”), the operator of wellwholeshop.com, handles personal information in connection with our online store, customer communications, and Well&Whole Scheduler, our internal Pinterest publishing tool.

1. Information Collected Through Our Store

When you visit our website, we collect information about your browser, IP address, time zone, referral source, pages viewed and interactions, using cookies, logs and similar technologies.

When you place an order, we process contact, billing, shipping and payment information. We use this information to fulfill orders, communicate with you, prevent fraud, improve the store and provide relevant marketing.

Shopify powers our store, and Google Analytics helps us understand website use. Information may be processed by these services and disclosed where legally required. Processing may occur outside your country, including in Canada and the United States.

Order records are retained for business purposes, subject to applicable deletion rights and legal requirements.

2. Cookies, Analytics and Marketing Choices

Cookies and similar technologies help our website function, remember preferences, understand visitor activity and support marketing.

You can manage cookies through your browser settings. Blocking some cookies may affect shopping features. Where consent is required, optional cookies should operate according to your recorded preferences.

You can learn more about our service providers and available controls here:

• Shopify Privacy Policy

• Google Privacy Policy

• Google Analytics Opt-out Browser Add-on

• Google advertising controls

• Digital Advertising Alliance choices

You may also visit our Your Privacy Choices page for available advertising-related choices. Eligibility and the effect of a choice may depend on your location, device and browser.

Marketing emails can be declined using the unsubscribe link in the message. Transactional communications, such as order confirmations and responses to support requests, may still be necessary.

A browser’s “Do Not Track” setting is different from legally recognized privacy preference signals. We handle applicable opt-out rights and recognized signals as required by law.

3. Well&Whole Scheduler and Pinterest

Purpose and availability

Well&Whole Scheduler is an internal tool being developed to manage content publishing to our own Pinterest business account, @wellwhole.

The tool is intended for authorized Well&Whole operators. It is not offered to external customers and does not require store visitors or shoppers to connect their Pinterest accounts.

The following provisions describe the data practices that apply when the integration is connected and used. Its functionality remains subject to the access granted by Pinterest.

Authorization and permissions

The account owner connects the tool through Pinterest’s official OAuth authorization process. We do not request or collect Pinterest passwords or session cookies.

The integration requests permissions necessary for its publishing workflow:

• user_accounts — to identify the connected account;

• boards — to retrieve available boards and select a destination;

• pins — to create approved Pins; and

• pins — to check publication results.

The integration accesses information only within the permissions granted by the account owner and the access permitted by Pinterest.

Information processed

The integration processes account, board and Pin information needed to perform the authorized workflow. It also processes OAuth access and refresh tokens needed to maintain the connection.

Our operators supply publishing materials, including images, titles, descriptions, destination links and scheduling instructions. These materials may link to relevant product pages or articles on wellwholeshop.com.

How publishing works

An authorized operator selects and approves each Pin, its destination board and its publication time before the scheduled action runs.

The tool submits approved content through the official Pinterest API and checks the result. Operators can cancel pending tasks before execution.

The tool does not automatically select unrelated content for publication or automate follows, comments or other engagement.

Limits on use

Pinterest API information is used only to provide the authorized publishing functionality. It is not sold, rented, used for unrelated profiling or used to target advertising outside Pinterest.

We do not use Pinterest API information to train artificial intelligence models or combine it with store customer records for advertising.

The store’s marketing provisions elsewhere in this policy do not extend to Pinterest API information.

4. Pinterest Data Storage and Security

We retain the OAuth credentials necessary to maintain an authorized connection and protect them from public disclosure. Access is restricted to authorized operators and the execution environment used to run the integration.

Credentials must not appear in public webpages, public repositories or routine application logs.

Account, board and Pin information obtained through the Pinterest API is requested when needed rather than stored as a separate archive. API response bodies containing this information are not retained in routine logs.

Operator-supplied content and scheduling instructions may be stored to prepare and execute publishing tasks. These materials are separate from information retrieved through the Pinterest API.

We use reasonable safeguards to protect information. No storage or transmission method can guarantee complete security.

5. Pinterest Data Sharing

Approved publishing content and the information necessary to submit it are transmitted to Pinterest.

We do not sell or disclose Pinterest API information to advertising networks, data brokers or unrelated third parties. Any service used to operate the integration must be configured and used consistently with Pinterest’s applicable terms and restrictions.

Pinterest handles information on its platform under its own Privacy Policy.

6. Disconnection, Retention and Deletion

The Pinterest account owner can revoke the tool’s authorization through Pinterest’s connected-app permissions settings.

Once the tool is disconnected or we become aware that authorization has been revoked, we stop pending API publishing and remove the stored OAuth credentials from the active credential store. Reconnection requires a new authorization.

Operator-supplied drafts and scheduling instructions are retained only as needed to manage publishing. Authorized operators may cancel pending tasks and request deletion of materials that are no longer required.

Disconnecting the tool or deleting a local draft does not remove Pins already published to Pinterest. Those Pins can be managed through Pinterest.

For help disconnecting the integration or requesting deletion of information associated with it, email support@wellwholeshop.com. We may verify your authority over the account before acting on a request.

7. Privacy Rights

Depending on your location and applicable law, you may have rights to access, correct, delete or obtain a copy of your personal information, object to or restrict certain processing, withdraw consent, or opt out of certain advertising-related uses.

To make a request, email support@wellwholeshop.com or use the relevant controls described in this policy. We may request information needed to verify your identity and process your request.

Some records may need to be retained to meet legal obligations, resolve disputes or protect against fraud. Where a request cannot be fully fulfilled, we will explain the applicable reason.

Where applicable, you may also raise a concern with your local data protection authority.

8. Children’s Privacy

Well&Whole Scheduler is restricted to authorized business operators and is not intended for children.

If you believe a child has provided personal information through our website or services in circumstances requiring parental authorization, please contact support@wellwholeshop.com so we can investigate and take appropriate action.

9. Changes to This Policy

We may update this policy when our services, data practices or applicable requirements change. The date at the top indicates the latest revision. Where required, we will provide additional notice or request consent for material changes.

10. Contact Us

For privacy questions, complaints or requests concerning our store or Well&Whole Scheduler, contact:

Well&Whole
Email: support@wellwholeshop.com
Website: https://www.wellwholeshop.com/

Mailing address:
UNIT 1022A BEVERLEY COMMERCIAL
CENTRE,87-105 CHATHAM ROAD
SOUTH,TSIM SHA TSUI
KL