Privacy Policy

Effective Date: August 25, 2026

Introduction

Wana Cabinets & Furniture ("we," "our," or "us") operates the website at wanafurniture.com (the "Site"). This Privacy Policy describes how we collect, use, and share information when you visit or interact with the Site.

We serve customers primarily in the United States. This policy is written to comply with U.S. privacy laws, including the California Consumer Privacy Act (CCPA) and similar state statutes (Colorado, Virginia, Utah, Connecticut). If you are visiting from outside the United States, please be aware that your information will be processed under U.S. law.

By using the Site, you agree to the collection and use of information in accordance with this policy.

Information We Collect

We collect information in the following ways:

• Information you provide to us directly. When you fill out a form on the Site (contact form, quote request, or similar), we collect the information you enter — typically your name, email address, phone number, message, and any additional fields specific to the form.
• Information collected automatically. When you visit the Site, we automatically collect certain technical information — IP address, browser type and version, operating system, referring website, pages viewed, time spent on pages, and approximate geographic region. This information is aggregated and anonymized; it is not used to identify individual visitors.
• Information collected by embedded third-party content. Some pages include embedded content from third-party services (such as YouTube videos or social media posts). These embeds may set their own cookies and collect information about your interaction with the embedded content directly. See the "Third-Party Services" section below.
• Cookies and similar technologies. The Site uses cookies and similar technologies for essential functionality, analytics, and (where enabled) marketing. See the "Cookies and Tracking" section below.

How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries. Form submissions are used to contact you back with information you have requested, provide quotes, schedule service, or answer questions.
• To improve the Site. Aggregated analytics data helps us understand which content is most useful and how to improve navigation and layout.
• To operate and secure the Site. Certain information (IP addresses, request patterns) is used to detect and block malicious activity, spam, and abuse.
• To comply with legal obligations. Where required by law, we may retain and disclose information to comply with regulations, court orders, or law-enforcement requests.
• For marketing (where you have opted in). If you have opted into marketing communications or if a marketing integration is enabled and you interact with it, we may use your information for advertising campaigns, remarketing, or customer relationship management.

We do not sell your personal information to third parties. We do not use information collected via the Site for automated decision-making that produces legal or similarly significant effects.

Third-Party Services

We use the following third-party services on this Site. Each service has its own privacy policy; we recommend reviewing those policies to understand how they handle your information.

Cookies and Tracking

The Site uses cookies (small text files stored on your device) for essential functionality, analytics, and (where enabled) marketing. Some cookies are set directly by our Site; others are set by third-party services we use.

Cookie categories:

• Strictly necessary: required for basic site operation (session cookies, security cookies). These are always set.
• Analytics: help us understand how visitors interact with the Site. These respect your browser opt-out and consent choices where applicable.
• Marketing: used for advertising and remarketing. These are set only when you have consented, or where required by our marketing partners.

Specific cookies currently set by third-party services on this Site include:

• Google Analytics 4: _ga, _ga_*
• Google reCAPTCHA: _GRECAPTCHA
• Meta (Facebook) Pixel: _fbp, fr
• Google Ads Conversion Tracking: _gcl_au, IDE
• YouTube Video Embeds: YSC, VISITOR_INFO1_LIVE (set by YouTube on play)
• Google Maps: NID

Most browsers allow you to block or delete cookies through their settings. Blocking cookies may cause some parts of the Site to not function correctly.

Advertising and Remarketing

We use the following advertising and remarketing services:

• Meta (Facebook) Pixel
• Google Ads Conversion Tracking
• Mailchimp

These services may show you advertisements for our products or services on other websites and social media platforms, based on your visits to our Site. You can opt out of behavioral advertising in several ways:

• Digital Advertising Alliance opt-out: optout.aboutads.info
• Google Ads settings: adssettings.google.com
• Meta (Facebook) ad settings: within your Facebook / Instagram account settings

Do Not Track

Some browsers include a "Do Not Track" (DNT) setting that signals to websites you do not wish to have your online activity tracked. Because there is no universally accepted standard for how websites should respond to DNT signals, our Site does not currently alter its behavior based on this signal.

However, most third-party analytics and advertising services we use respect DNT or offer their own opt-out mechanisms (see the "Third-Party Services" and "Advertising" sections above).

The Global Privacy Control (GPC) signal is treated as an opt-out of sale or sharing where applicable under CCPA and similar state laws.

Data Retention

We retain personal information for as long as necessary to provide the services you have requested, comply with our legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Form submissions: retained indefinitely unless you request deletion, as they may reference active or historical business relationships.
• Analytics data: retained per the analytics provider's defaults (typically 14-26 months for Google Analytics 4).
• Security logs: retained for approximately 30-90 days for defensive purposes, then automatically purged.

You may request deletion of your personal information at any time by contacting us using the details below.

Your Rights

Depending on your state of residence, you may have the following rights regarding your personal information:

• Right to know: what personal information we have collected about you.
• Right to correct: inaccurate personal information we hold about you.
• Right to delete: request deletion of personal information we have collected from you.
• Right to opt out of sale/sharing: we do not sell your personal information; you may confirm this opt-out is honored via the Global Privacy Control signal.
• Right to non-discrimination: we will not treat you differently for exercising any of these rights.

To exercise any of these rights, contact us using the details in the "Contact Us" section below. We will respond within the timeframe required by applicable law (typically 45 days).

Children's Privacy

The Site is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn we have collected personal information from a child under 13, we will delete that information promptly. If you believe your child has provided us personal information, please contact us so we can remove it.

Security

We take reasonable measures to protect the information we collect from unauthorized access, disclosure, alteration, and destruction. Security measures include:

• SSL/TLS encryption for data in transit between your browser and the Site
• Access controls and least-privilege principles for administrator accounts
• Solid Security (formerly iThemes Security) — failed login attempts, IP addresses associated with suspicious activity, security event logs (for defensive purposes)
• Regular software updates for the Site's underlying platform and installed extensions

No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

Data Breach Notification

In the event of a data breach affecting personal information we hold about you, we will notify affected individuals within 7 business days of discovery — or sooner where required by applicable state law. Notification will describe the nature of the breach, the categories of personal information involved, and the steps we are taking to address it.

Where required by law, we will also notify relevant state attorneys general and consumer protection agencies within the timelines those laws specify.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or third-party services we use. When we make material changes, we will update the "Effective Date" at the top of this policy and, where appropriate, provide a more prominent notice on the Site.

Your continued use of the Site after any changes to this policy constitutes your acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy, or would like to exercise any of the rights described above, please contact us:

Wana Cabinets & Furniture
7245 W 200 N, Shipshewana, IN 46565, USA
Phone: (260) 768-7850