1. Introduction

Winged Flow (“Winged Flow,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit, use, or purchase from our online store at store.wingedflow.com (the “Store”).

The Store is owned and operated by:

Winged Flow
7726 Gunston Plaza
P.O. Box 603
Lorton, VA 22199
United States

Customer service and privacy email:
flow-store@rogueraven.co

The Store is developed, hosted, maintained, and technically administered on our behalf by:

Rogue Raven Software Ltd
Technical contact: Adam (“Addzeey”)
Email: adam@rogueraven.co

Rogue Raven Software Ltd provides technical and hosting services. It is not the seller of products purchased through the Store.

2. Scope of this policy

This Privacy Policy applies to personal information that we collect through the Store, including when you:

• Browse products or Store pages.
• Add products to your cart.
• Create or use a customer account.
• Submit an order.
• Make a payment.
• Use a coupon or giveaway claim code.
• Contact customer service.
• Submit a product review or other content.
• Participate in a promotion or giveaway.

This Privacy Policy does not control the independent privacy practices of third parties such as PayPal, Printful, postal services, couriers, or external websites.

3. Personal information we collect

The information we collect depends on how you interact with the Store.

3.1 Contact and identity information

We may collect:

• Your name.
• Email address.
• Telephone number.
• Billing address.
• Shipping address.
• Country, state, province, city, and postal code.
• Customer account username.

3.2 Order and transaction information

We may collect:

• Products ordered.
• Product sizes, colours, designs, or variations.
• Quantities and prices.
• Currency.
• Shipping method.
• Order status.
• Order number.
• Coupon, promotional, or giveaway claim codes.
• Customer notes and delivery instructions.
• Refund, cancellation, replacement, or return information.
• Payment method and payment status.
• Transaction identifiers supplied by PayPal or another authorised payment provider.

We generally do not directly receive or store your complete payment-card number. Payment credentials are handled by the payment provider used during checkout.

3.3 Account information

If you create an account, we may collect:

• Your login name.
• An encrypted or hashed version of your password.
• Saved addresses.
• Order history.
• Account preferences.
• Account creation and login information.

You are responsible for maintaining the confidentiality of your account credentials.

3.4 Communications

We may collect information contained in communications you send to us, including:

• Customer-service requests.
• Questions about products or orders.
• Complaints.
• Return or replacement requests.
• Photographs showing defective or damaged products.
• Reviews, comments, or feedback.
• Giveaway or prize-claim communications.

3.5 Technical and usage information

The Store and its hosting systems may automatically collect technical information such as:

• Internet Protocol address.
• Browser type and version.
• Device type.
• Operating system.
• Referring page.
• Requested pages.
• Date and time of access.
• Login attempts.
• Error logs.
• Security and fraud-prevention information.
• Cookie and session identifiers.

We do not currently use third-party analytics or behavioural advertising services. We may still process basic server logs and technical information needed to operate, troubleshoot, and secure the Store.

4. How we collect personal information

We collect personal information:

• Directly from you when you provide it through checkout, account registration, support messages, reviews, promotions, or giveaways.
• Automatically through cookies, server logs, and Store functionality.
• From PayPal when it confirms or reports a payment, refund, dispute, or transaction.
• From Printful when it provides production, fulfilment, or delivery updates.
• From postal services and couriers when they provide tracking or delivery information.
• From Rogue Raven Software Ltd when technical support or security activity generates operational records.
• From another person who places an order or sends a gift to you.

When someone places an order for delivery to another person, the purchaser is responsible for having an appropriate reason or permission to provide that recipient’s information.

5. How we use personal information

We may use personal information to:

5.1 Process and fulfil orders

This includes:

• Confirming your order.
• Processing payment.
• Sending order confirmations.
• Manufacturing products.
• Packing products.
• Creating shipping labels.
• Delivering products.
• Providing tracking information.
• Processing refunds, replacements, and cancellations.

5.2 Operate customer accounts

We may use information to create, maintain, authenticate, and secure customer accounts and display order history.

5.3 Provide customer service

We use personal information to respond to questions, investigate issues, resolve complaints, and communicate about products, payments, shipping, returns, or replacements.

5.4 Administer giveaways and promotions

We may use personal information to:

• Identify giveaway winners.
• Create and validate claim codes.
• Prevent duplicate or unauthorised claims.
• Record which prize was awarded.
• Collect delivery information.
• Track redemption and stock.
• Fulfil and deliver prizes.

5.5 Maintain and secure the Store

We may use information to:

• Diagnose technical problems.
• Protect the Store against fraud, spam, malicious activity, and unauthorised access.
• Investigate suspicious transactions.
• Enforce usage and coupon restrictions.
• Maintain backups.
• Install updates.
• Monitor system performance and availability.

5.6 Meet legal and business obligations

We may process information to:

• Maintain tax, accounting, and transaction records.
• Respond to lawful government or court requests.
• Protect our legal rights.
• Resolve disputes.
• Enforce our Terms of Service.
• Prevent or investigate fraud.
• Meet consumer-protection and product-safety obligations.

6. Legal grounds for processing

Where laws such as the United Kingdom General Data Protection Regulation or European Union General Data Protection Regulation apply, we generally process personal information under one or more of the following legal grounds:

Contract

Processing is necessary to accept, manufacture, fulfil, deliver, and support your order.

Legitimate interests

Processing may be necessary for our legitimate interests in operating and securing the Store, preventing fraud, providing customer service, maintaining records, and improving our services, where those interests are not overridden by your rights.

Legal obligation

Processing may be necessary to comply with tax, accounting, consumer-protection, product-safety, or other legal obligations.

Consent

We rely on consent where required, such as for optional marketing or non-essential cookies. You may withdraw consent at any time, although withdrawing consent does not affect processing that occurred before withdrawal.

7. WordPress and WooCommerce

The Store is built using WordPress and WooCommerce.

These systems may store customer accounts, addresses, orders, products, coupon usage, customer notes, payment status, shipping details, and other information necessary to operate the Store.

WooCommerce provides Store administrators with settings for account creation, privacy notices, data erasure, and personal-data retention.

8. Cookies

Cookies are small files or identifiers stored on or accessed through your device.

The Store uses cookies and similar technologies that are necessary to:

• Maintain your shopping cart.
• Detect changes to cart contents.
• Remember checkout and session information.
• Keep you signed in to your account.
• Provide security and fraud prevention.
• Remember limited preferences.
• Maintain the technical operation of the Store.

WooCommerce uses session and cart cookies, including cookies that help determine when cart contents change and retain cart information during a shopping session.

We do not currently use third-party analytics or targeted-advertising cookies.

PayPal or other third-party services may place or access their own cookies when you interact with their services. Those cookies are controlled by the relevant third party and are subject to its privacy notices.

You can configure your browser to reject or delete cookies. Blocking necessary cookies may prevent the cart, account, or checkout from working correctly.

9. Rogue Raven Software Ltd

Rogue Raven Software Ltd provides development, hosting, maintenance, security, backup, and technical administration services for the Store.

Authorised Rogue Raven personnel may access personal information where reasonably necessary to:

• Maintain and update the Store.
• Investigate errors or outages.
• Protect systems against malware, fraud, or unauthorised access.
• Restore backups.
• Support order, checkout, payment, or email functionality.
• Assist with privacy and security requests.
• Diagnose technical problems.

Rogue Raven Software Ltd is expected to use personal information only as necessary to provide services to Winged Flow or comply with applicable law.

10. Printful

Some products are manufactured, printed, packed, or shipped on our behalf by Printful.

When an order includes a Printful-fulfilled product, we may provide Printful with information needed to manufacture and deliver that product, including:

• Recipient name.
• Shipping address.
• Email address.
• Telephone number, if required for delivery.
• Product, design, size, colour, and quantity.
• Personalisation information, if applicable.
• Delivery instructions.
• Order and transaction reference information.

Printful may use production facilities, affiliates, subcontractors, and delivery providers in different countries. Printful’s current privacy policy explains how it processes information in connection with its services.

Your purchase contract is with Winged Flow, not Printful. Customer-service requests about a Printful product should be sent to Winged Flow.

11. Products fulfilled directly by Winged Flow

Some products are stocked, packed, and shipped directly by Winged Flow or by authorised persons working on its behalf.

We use recipient and order information to:

• Locate and prepare stock.
• Pack orders.
• Create postage and shipping labels.
• Communicate with postal services and couriers.
• Send tracking information.
• Resolve lost, delayed, damaged, or returned shipments.

12. PayPal

Checkout is operated through WooCommerce, and payments are processed through PayPal.

When you select PayPal, we may provide or receive information such as:

• Your name.
• Email address.
• Billing and shipping information.
• Order total.
• Currency.
• Order number.
• Transaction identifier.
• Payment, refund, dispute, or fraud-review status.

PayPal processes information under its own privacy statement and may use information for payment processing, fraud prevention, risk management, legal compliance, and other purposes described in that statement.

Using a WooCommerce payment gateway sends required information to the selected payment provider; it does not, solely because WooCommerce is used, mean that payment data is being shared with WooCommerce.com.

13. Shipping and delivery providers

We may provide delivery providers with information needed to deliver an order, including:

• Recipient name.
• Delivery address.
• Email address.
• Telephone number, where required.
• Package and delivery information.
• Customs information for international shipments.

Shipping providers may independently process information under their own privacy policies and legal obligations.

14. Other disclosures of information

We may also disclose personal information:

• To professional advisers, accountants, insurers, or legal advisers.
• To fraud-prevention and security providers.
• To email or communications providers used to send transactional messages.
• To government bodies, regulators, courts, or law-enforcement agencies when legally required.
• To protect the rights, safety, property, or security of Winged Flow, customers, or others.
• In connection with a merger, acquisition, financing, reorganisation, asset sale, or transfer of the Store, subject to applicable law.

We disclose only the information reasonably necessary for the relevant purpose.

15. Sale and targeted advertising

Winged Flow does not sell personal information for money.

We do not currently share personal information for cross-context behavioural advertising or use personal information to deliver targeted advertising based on activity across unrelated websites.

If these practices change, we will update this Privacy Policy and provide any choices required by applicable law.

16. International processing

Rogue Raven Software Ltd, Printful, PayPal, couriers, and other service providers may process information outside Virginia or outside the United States.

The privacy and data-protection laws of those locations may differ from the laws where you live. Where applicable law requires transfer safeguards, we will use or rely on appropriate contractual, organisational, or legal protections.

17. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

The appropriate retention period depends on factors such as:

• Whether an account remains active.
• Whether an order remains open.
• Tax and accounting requirements.
• Warranty, chargeback, and dispute periods.
• Fraud-prevention and security needs.
• Legal limitation periods.
• Pending claims or investigations.
• Backup and disaster-recovery cycles.

Completed order and transaction records may be retained after fulfilment to satisfy accounting, tax, fraud-prevention, consumer-protection, and legal obligations.

Information may be anonymised or aggregated when it is no longer necessary to associate it with an identifiable person.

WooCommerce allows administrators to configure personal-data retention for inactive accounts and pending, failed, cancelled, and completed orders.

18. Security

We use reasonable administrative, organisational, and technical measures intended to protect personal information.

Measures may include:

• Secure connections.
• Access restrictions.
• Account authentication.
• Software updates.
• Security monitoring.
• Backups.
• Limited administrative permissions.
• Fraud-prevention controls.
• Password hashing and encryption where supported.

No method of storage or transmission is completely secure. We cannot guarantee that personal information will never be accessed, disclosed, altered, or destroyed without authorisation.

Please contact us promptly if you believe your Store account or personal information has been compromised.

19. Your privacy rights

Depending on where you live and which laws apply, you may have the right to:

• Request confirmation that we process your personal information.
• Request access to personal information.
• Request correction of inaccurate information.
• Request deletion of certain information.
• Request a portable copy of information you provided.
• Object to or restrict certain processing.
• Withdraw consent.
• Opt out of certain sales, sharing, targeted advertising, or profiling.
• Appeal a decision concerning a privacy request.
• Submit a complaint to a privacy or data-protection authority.

These rights may be subject to exceptions. For example, we may need to retain transaction information for tax, fraud-prevention, dispute, or legal purposes.

The Virginia Consumer Data Protection Act applies only to businesses meeting its statutory processing or revenue thresholds. We will honour rights provided by any privacy law that applies to Winged Flow and the relevant request.

20. How to make a privacy request

Send privacy requests to:

flow-store@rogueraven.co

You may also write to:

Winged Flow
7726 Gunston Plaza
P.O. Box 603
Lorton, VA 22199
United States

Please describe the request and identify the email address or account associated with the Store.

We may request reasonable information to verify your identity and authority to make the request. An authorised agent may be required to provide proof of authority.

Where applicable law provides a right to appeal a decision, send an email with the subject “Privacy Appeal” and explain why you believe the decision should be reconsidered.

We will not unlawfully discriminate against you for exercising an applicable privacy right.

21. Marketing communications

We do not currently send promotional marketing communications unless a customer has separately requested or consented to receive them.

Order confirmations, payment notices, shipping updates, security messages, and customer-service communications are transactional and are not marketing communications.

If we introduce a newsletter or other marketing service, we will update this Privacy Policy and provide an unsubscribe method.

22. Children’s privacy

The Store is not directed to children under 13, and we do not knowingly collect personal information directly from children under 13.

A person who is not legally able to enter into a purchase contract should use the Store only with the involvement and permission of a parent or legal guardian.

If you believe a child has provided personal information without appropriate permission, contact us at flow-store@rogueraven.co. We will review the request and delete information where legally required.

23. Third-party websites

The Store may link to external websites, platforms, or social-media services.

We are not responsible for the privacy, security, availability, or content of third-party services. Review the third party’s privacy notice before providing personal information.

24. Changes to this Privacy Policy

We may update this Privacy Policy when our services, providers, Store functionality, or legal obligations change.

The revised policy will be published on the Store with an updated “Last updated” date. Where legally required, we will provide additional notice or request consent.

25. Contact us

Questions, concerns, complaints, and privacy requests may be sent to:

Winged Flow
7726 Gunston Plaza
P.O. Box 603
Lorton, VA 22199
United States

Email: flow-store@rogueraven.co

For technical hosting matters only:

Rogue Raven Software Ltd
Adam (“Addzeey”)
adam@rogueraven.co