Legal

Privacy Policy

Your privacy matters to us. This policy explains what data we collect, why, and how we protect it.

Last Updated: April 28, 2025  ·  Compliant with CCPA, NY SHIELD Act & Federal Law
Section 01

Who We Are

This Privacy Policy applies to BK Brother Group LLC, operating the Wellaur retail brand at www.wellaur.com. We are the "data controller" responsible for your personal information. Our registered business address is 241 6th Street, Lindenhurst, NY 11757.

Section 02

Information We Collect

We collect the following categories of personal information:

  • Identity Data: First name, last name, username, date of birth.
  • Contact Data: Email address, phone number, billing and shipping addresses.
  • Financial Data: Payment card details (processed securely via PCI-DSS compliant processors — we do not store full card numbers).
  • Transaction Data: Order history, products purchased, prices, returns.
  • Technical Data: IP address, browser type, device identifiers, time zone, cookies and similar tracking technologies.
  • Usage Data: Pages visited, search queries on our site, clickstream data.
  • Communications Data: Emails, chat logs, and support ticket content when you contact us.
  • Marketing Data: Preferences for receiving marketing from us.

We do not collect sensitive personal information such as Social Security numbers, driver's licence numbers, or biometric data.

Section 03

How We Use Your Information

We use your information for the following lawful purposes:

  • To process and fulfil your orders, including shipping and payment processing.
  • To manage your account and provide customer support.
  • To communicate order confirmations, shipping updates, and service notifications.
  • To send marketing communications where you have opted in (you may opt out at any time).
  • To improve our website, products, and services through analytics.
  • To detect and prevent fraud and ensure the security of our platform.
  • To comply with legal obligations under federal and state law.
Section 04

How We Share Your Information

We do not sell, rent, or trade your personal information. We may share it with:

  • Payment Processors: To securely process transactions.
  • Shipping Carriers: UPS, FedEx, USPS and similar — for order delivery only.
  • Technology Providers: Our website hosting, email, and analytics providers, under strict data processing agreements.
  • Legal Authorities: Where required by law, court order, or government authority.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, subject to standard protections.
We will never sell your personal data to third-party advertisers or data brokers.
Section 05

Cookies & Tracking

We use cookies and similar technologies to enhance your experience and analyse site usage. Types of cookies we use:

  • Essential Cookies: Required for the site and shopping cart to function.
  • Analytics Cookies: Help us understand how visitors interact with our site.
  • Marketing Cookies: Used to deliver relevant advertising (only with your consent).

You can manage cookies through your browser settings. Disabling certain cookies may affect site functionality. For California residents, see Section 8 for your additional rights regarding cookies used for targeted advertising.

Section 06

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Order records are retained for a minimum of 7 years to comply with US tax and accounting requirements. Marketing data is retained until you opt out.

Section 07

Data Security

We implement industry-standard security measures including 256-bit SSL/TLS encryption, PCI-DSS compliance for payment data, secure server infrastructure, access controls, and regular security audits to protect your personal information against unauthorised access, disclosure, or loss.

In the event of a data breach affecting your personal information, we will notify affected individuals as required by New York SHIELD Act, California law, and applicable federal regulations.

Section 08

California Residents (CCPA / CPRA)

Your California Privacy Rights

Under the California Consumer Privacy Act (CCPA) as amended by CPRA, California residents have the following rights:

  • Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
  • Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
  • Right to Correct: You may request correction of inaccurate personal information.
  • Right to Opt-Out: You may opt out of the sale or sharing of your personal information. We do not sell personal information.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
  • Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined by CPRA.

To exercise your rights, contact us at +1 (682) 353-6284 or via our contact form. We will respond within 45 days as required by law.

Section 09

New York Residents (SHIELD Act)

Under the New York Stop Hacks and Improve Electronic Data Security (SHIELD) Act, we maintain a comprehensive data security programme that includes administrative, technical, and physical safeguards appropriate to our size and the nature of the information we hold.

New York residents may exercise their privacy rights by contacting us directly. We commit to responding to all verified requests within 30 days.

Section 10

Children's Privacy

Our Site is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately and we will delete it promptly in compliance with the Children's Online Privacy Protection Act (COPPA).

Section 11

Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies. This Privacy Policy applies only to information collected by wellaur.com.

Section 12

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last Updated" date. Your continued use of the Site after changes are posted constitutes acceptance of the updated policy.

Section 13

Contact Us

For any privacy-related enquiries, data subject requests, or to report a concern:

Privacy Officer — BK Brother Group LLC
241 6th Street, Lindenhurst, NY 11757
Phone: +1 (682) 353-6284
Contact Form: wellaur.com/contact