Privacy Policy

Last Updated: September 25, 2026

Weston & Ellis (operated by FF COMMERCE LTD, "we," "us," or "our") operates this store and website, including all related information, content, features, tools, products, and services, to provide you with a curated men's fashion e-commerce experience (the "Services"). Our storefront is powered by Shopify, which enables us to deliver secure online commerce to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase from westonellis.com or otherwise communicate with us. It is designed to comply with applicable U.S. federal and state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and comprehensive state privacy laws in states such as Virginia, Colorado, Connecticut, Utah, Texas, and Oregon.

This policy also serves as our Notice at Collection for California residents. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

1. Personal Information We Collect or Process

When we refer to "personal information," we mean information that identifies, relates to, describes, or can reasonably be linked to you or your household. Personal information does not include publicly available, anonymous, or de-identified data. In the past 12 months, we have collected the following categories of personal information:

Sensitive Personal Information: The only sensitive personal information we collect is your account login credentials, which we use solely to provide secure account access. We do not use or disclose sensitive personal information to infer characteristics about you.

Sources of Personal Information: We collect information directly from you (when creating an account, subscribing, or placing an order), automatically through cookies and device technologies, from our technology service providers, and from business or marketing partners.

2. How We Use Your Personal Information

• Provide, Tailor, and Improve Services: Processing payments, fulfilling orders, managing account credentials, arranging shipping across the United States, processing returns and exchanges, enabling product reviews, and personalizing product and style recommendations.
• Marketing and Advertising: Sending promotional emails in compliance with the CAN-SPAM Act, sending SMS/text messages only with your prior express written consent as required by the Telephone Consumer Protection Act (TCPA), and displaying tailored online advertisements based on your shopping activity.
• Security and Fraud Prevention: Authenticating user accounts, securing checkout sessions, detecting and investigating fraudulent or illegal activity, and protecting the safety of our customers and systems.
• Customer Communication: Delivering responsive support, providing order status updates, and maintaining our business relationship with you.
• Legal Compliance: Complying with applicable laws, responding to subpoenas or lawful government requests, participating in litigation, and enforcing our site policies.

SMS Messaging: Consent to receive marketing text messages is not a condition of purchase. Message and data rates may apply. You can opt out at any time by replying STOP to any message, or reply HELP for assistance.

3. Disclosure of Personal Information & Shopify Relationship

We disclose personal information to third parties for legitimate business purposes, including service providers and contractors (IT management, payment processors, analytics, customer support, and shipping partners), business marketing partners, affiliated corporate entities, or in connection with corporate transactions such as mergers or asset sales. Our service providers are contractually required to use personal information only to perform services on our behalf.

"Sale" and "Sharing" Disclosure: We do not sell personal information for money. However, our use of advertising cookies and pixels to deliver targeted ads may be considered a "sale" or "sharing" of identifiers and internet activity under certain state laws, including California. You may opt out at any time as described in Section 4. We do not knowingly sell or share the personal information of consumers under 16 years of age.

Relationship with Shopify: Our store is hosted on Shopify Inc. Shopify collects and processes personal information regarding your access to and use of the Services to support our storefront and provide enhanced e-commerce features. Shopify may process information obtained across multiple merchants to improve its services. For details on how Shopify manages data, review the Shopify Consumer Privacy Policy.

4. Your Privacy Rights & Choices

Depending on your state of residence (including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and other states with comprehensive privacy laws), you may have the following rights regarding your personal information:

• Right to Know / Access: Request confirmation of whether we process your personal information and access to the specific pieces and categories of information we hold about you.
• Right to Delete: Request the deletion of personal information we have collected from you, subject to certain legal exceptions.
• Right to Correct: Request correction of inaccurate or incomplete personal information.
• Right to Data Portability: Request a copy of your personal information in a structured, portable format.
• Right to Opt Out of Sale, Sharing & Targeted Advertising: Direct us not to "sell" or "share" your personal information or process it for targeted (cross-context behavioral) advertising.
• Right to Limit Use of Sensitive Personal Information: Where applicable, limit our use of sensitive personal information to purposes permitted by law.
• Right to Appeal: If we decline your request, you may appeal our decision by replying to our response. If your appeal is denied, you may contact your state Attorney General.
• Communication Opt-Out: Unsubscribe from marketing emails anytime via the link at the bottom of our emails, or reply STOP to any text message.

How to Submit a Request: To exercise any privacy right, including to opt out of the sale or sharing of your personal information, email us at info@westonellis.com with the subject line "Privacy Request." We will verify your identity before fulfilling your request and respond within 45 days, as required by law. You may designate an authorized agent to submit a request on your behalf with written permission.

Global Privacy Control (GPC): If you visit our site with a Global Privacy Control (GPC) opt-out preference signal enabled, we will treat it as a valid request to opt out of the sale or sharing of your personal information and targeted advertising for that browser or device.

Non-Discrimination: We will not deny you goods or services, charge different prices, or provide a different level of quality because you exercised your privacy rights.

California "Shine the Light": Under California Civil Code Section 1798.83, California residents may request information about disclosures of personal information to third parties for their direct marketing purposes. To make such a request, email us at the address above.

5. Security, Retention & International Data Transfers

Security & Retention: We employ reasonable, industry-standard administrative, technical, and physical safeguards to protect your personal information. However, no transmission over the internet can be guaranteed as completely secure. We retain each category of personal information only for as long as reasonably necessary to maintain your account, fulfill orders, satisfy contractual obligations, and meet legal, tax, and accounting requirements, after which it is securely deleted or de-identified.

Data Breach Notification: In the event of a security breach affecting your personal information, we will notify you and the appropriate authorities as required by applicable state data breach notification laws.

Children's Privacy: Our Services are intended for adults and are not directed to children. In accordance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13 years of age. If you believe a child has provided us with personal information, please contact us so we can promptly delete it.

International Transfers: As our operating company is based in the United Kingdom, your personal information may be transferred to, stored, and processed outside the United States. Where this occurs, we use contractual and organizational safeguards to protect your information in accordance with this Privacy Policy and applicable law.

6. Changes to This Privacy Policy

We review this Privacy Policy at least once every 12 months and may update it from time to time to reflect changes in our practices or applicable law. Updates will be posted on this page with a revised "Last Updated" date.

Data Controller Profile & Contacts