Privacy Notice

WILLEY QUICK TOOLS PRIVACY NOTICE


Effective date: May 14, 2025. Last Updated: May 14, 2025

Who we are


Willey Quick Tools is a company registered in the United States, with its headquarters in 1478 W Tufts Ave, Englewood, Colorado, USA. We design, manufacture, and sell high-quality tools to customers around the world.


We act as the data controller when we collect and use personal data. This means we determine the purposes and means of processing your personal information. Our commitment is to handle your data responsibly and in compliance with applicable privacy laws.

 

What personal data we collect


We collect personal data that you voluntarily provide when you use our website including when you complete the Contact Form or place an order. This includes:

  • Full name
  • Email address
  • Phone number
  • Billing and shipping address
  • Payment information
  • Purchase history
  • Your message or enquiry
  • Account information (if you create an account)

We may also automatically collect some information when you visit our website such as:

  • Your IP address
  • Device information (type of device, operating system)
  • Browser type and version
  • Pages visited and time spent on the site
  • Referring website address
  • Geographic location (country/region level)
  • Click patterns and interaction with our site elements

We collect this data to respond to your enquiries, process orders, provide customer support, and improve our website functionality. We do not collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data) through the Website.


Legal bases for processing


For US customers we process your personal data under the following legal bases:

  • Fulfilling our contractual obligations to you
  • Your consent
  • Our legitimate business interests
  • Compliance with relevant US federal and state laws

For UK & EU GDPR: 

  • To fulfill our obligations under a sales or service contract
  • When you subscribe to marketing communications
  • For fraud prevention, improving our services, and securing our website
  • Where necessary to comply with applicable laws

We will always process your data in accordance with the applicable laws in your jurisdiction.


How we use your information

We use your personal data to:

  • Process and ship your orders
  • Manage your account and respond to enquiries
  • Communicate with you about your order or service
  • Send marketing communications (if you’ve opted in)
  • Process payments and prevent fraudulent transactions
  • Maintain and improve our website and product offerings
  • Analyze usage patterns to enhance user experience
  • Resolve disputes and troubleshoot problems
  • Conduct market research and analytics (in anonymized form)
  • Comply with legal and regulatory requirements
  • Enforce our terms and conditions
  • Protect the security and integrity of our business and systems

Usage of Personal Data

  1. Process and ship your orders
  2. Manage your account and respond to enquiries
  3. Communicate with you about your order or service
  4. Send marketing communications (if you’ve opted in)
  5. Process payments and prevent fraudulent transactions
  6. Maintain and improve our website and product offerings
  7. Analyze usage patterns to enhance user experience
  8. Resolve disputes and troubleshoot problems
  9. Conduct market research and analytics (in anonymized form)
  10. Comply with legal and regulatory requirements
  11. Enforce our terms and conditions
  12. Protect the security and integrity of our business and systems

How we share your information

We may share your data with:

  1. Payment processors (e.g., Stripe, PayPal) to handle secure transactions
  2. Delivery partners (e.g., UPS, FedEx)to ship your orders
  3. IT and hosting providers to support our website functionality 
  4. Marketing service providers, only if you consent to receive communications
  5. Customer service platforms to help resolve your inquiries
  6. Analytics providers help us improve our services
  7. Professional advisors (attorneys, accountants) as necessary
  8. Regulatory authorities or law enforcement, where required by law
  9. Business partners for joint offerings, only with your consent
  10. Potential buyers in the event of a business sale or merger, with appropriate protections

We do not sell your personal data as defined under applicable privacy laws, including the California Consumer Privacy Act (CCPA) and other state privacy laws.

All third parties with whom we share data are contractually required to maintain the confidentiality and security of your information and to process it in accordance with our instructions.

International transfers

As a US-based company, your personal data may be transferred to and stored in the United States. If you are located in the UK or EU, we ensure appropriate safeguards are in place: - Transfers are based on adequacy decisions, Standard Contractual Clauses (SCCs), or other lawful mechanisms. - We take additional security measures, including data minimization and encryption. - We conduct transfer impact assessments as required by applicable laws.

For international customers outside the UK and EU, we apply similar protections to ensure your data is handled securely regardless of its location.

Retention of your information

We retain your personal data only as long as necessary: - For the purposes set out in this Privacy Notice. - To comply with legal obligations (e.g., tax, accounting). - To resolve disputes and enforce our agreements.

Typically, customer data is retained for 6 years following your last transaction unless a longer retention period is required by law or for legitimate business purposes. We regularly review our retention periods to ensure we don’t keep data longer than necessary.


Your privacy rights


If you are based in the United States:

Your rights may vary depending on your state. We honor valid requests in accordance with applicable state privacy laws, including:

California residents’ rights under the CCPA/CPRA:

  • Right to know what personal information we collect
  • Right to access your personal information
  • Right to request deletion of your personal information
  • Right to opt-out of sales or sharing of personal information
  • Right to limit use of sensitive personal information
  • Right to non-discrimination for exercising your rights
  • Right to correct inaccurate personal information

Virginia residents’ rights under the VCDPA:

  • Right to confirm whether we are processing your personal data 
  • Right to access your personal data
  • Right to correct inaccuracies in your personal data
  • Right to delete personal data provided by or obtained about you
  • Right to obtain a copy of your personal data
  • Right to opt out of profiling, targeted advertising, and sales

Similar rights exist for residents of Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Indiana, Tennessee, and Florida under their respective state privacy laws.


Response Timing

We will respond to your request within 45 days (or as required by your state’s law). If we need more time, we’ll inform you and may extend our response time by up to 45 additional days.

Verification

To protect your privacy, we may need to verify your identity before fulfilling your request.

Appeal Process

If we deny your request, you have the right to appeal our decision. Please email appeals@willeyquicktools.com with “Privacy Rights Appeal” in the subject line.

If you are based in the UK or EU, you have the following rights:

  • Access – Request a copy of your data
  • Rectification – Correct inaccurate or incomplete data
  • Erasure – Ask us to delete your data (“right to be forgotten”)
  • Restriction – Ask us to limit processing in certain cases
  • Portability – Request transfer of your data to another provider
  • Object – Object to certain processing, including direct marketing
  • Withdraw Consent – Withdraw your marketing consent at any time

To exercise these rights, contact: info@willeyquicktools.com

 

Cookies and tracking technologies


Our website uses cookies and similar technologies to: - Enable core site functions (essential cookies) - Track user interactions and performance (e.g., Google Analytics) - Personalize content and ads - Remember your preferences - Provide secure browsing sessions.

Types of cookies we use: - Strictly Necessary: Required for the website to function - Performance/Analytics: Help us understand how visitors interact with our site - Functionality: Remember your preferences - Targeting/Advertising: Deliver relevant ads and track marketing effectiveness.

You can manage cookie preferences through: - Your browser settings - Our cookie consent banner - Industry opt-out tools like the Digital Advertising Alliance.

For full details on the cookies we use, their purposes, and how to manage them, see our Cookie Policy.


Data security

We implement appropriate technical and organizational security measures including: - SSL encryption for all data transmissions - Access controls and strong authentication - Regular security reviews and monitoring - Employee training on data protection - Secure data storage with encryption at rest - Incident response procedures - Regular security assessments and penetration testing.

While no system is 100% secure, we are committed to keeping your information safe and continuously improving our security measures.

 

Children’s privacy

Our website is not intended for children under 13 (or 16 in the UK/EU). We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us at privacy@willeyquicktools.com and we will promptly delete it.
We do not engage in marketing directed at children and take reasonable measures to verify appropriate age when processing personal information.

 

Third-party links

Our website may contain links to third-party websites or services. We are not responsible for their privacy practices, and you should read their privacy notices before submitting any personal data.

These third-party websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with embedded content. We encourage you to be aware when you leave our website and to review the privacy policies of each website you visit.

 

Changes to this Privacy Notice

We may update this Privacy Notice from time to time. When we do, we will post the revised version and update the “Last Updated” date. Significant changes will be notified to you through: - Email notification (if we have your contact details) - Prominent notice on our website - Other appropriate communication channels.

We encourage you to periodically review this page to stay informed about our information practices.

 

Contact us

If you have questions or concerns about this Privacy Notice or how we handle your personal data, you can contact us at:

Email: info@willeyquicktools.com
Postal Address: 5600 Highpoint Parkway, Burleson, TX 76028

Our Data Protection Officer can be reached at: info@willeyquicktools.com


EU representative (Article 27 GDPR)

In accordance with Article 27 of the EU General Data Protection Regulation (GDPR), Willey Quick Tools has appointed a representative within the European Union to act on our behalf regarding data protection matters. Our EU Representative is:

Simon Hinks
PMA Ltd
Email: simon@p-m-a.co.uk
Data subjects located in the EU may contact our representative with any queries, concerns, or requests related to the processing of their personal data.

 

U.S. State-specific privacy disclosures

California


Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), we provide the following disclosures: - Categories of personal information collected in the last 12 months: identifiers (name, email, address), commercial information (purchase history), internet activity (browsing history), geolocation data - Business purposes for collection: As described in Section 4 - Categories of third parties with whom we share personal information: As described in Section 5 - We do not “sell” or “share” personal information as defined by California law - California residents can designate an authorized agent to make requests on their behalf by providing written authorization.

“Shine the Light” Law: California residents may request information about our disclosure of personal information to third parties for direct marketing purposes. We do not disclose personal information to third parties for their direct marketing without your consent.

Nevada

Nevada residents have the right to opt out of the sale of their personal information. We do not sell personal information as defined under Nevada law (NRS 603A).

Virginia, Colorado, Connecticut, Utah, and Texas

Residents of these states have specific rights regarding their personal information as outlined in Section 8. Additionally: - We do not process sensitive data without explicit consent - We conduct and document data protection assessments when required - We honor universal opt-out mechanisms where applicable.

For any state-specific privacy questions, please contact info@willeyquicktools.com.

Data Subject Access Requests

To submit a Data Subject Access Request (DSAR) or exercise any of your privacy rights:

  1. Email us at privacy@willeyquicktools.com
  2. Complete our online form at www.willeyquicktools.com/privacy-request

Please include: Your full name, Email address associated with your account, The specific right you wish to exercise, Any additional information to help us identify your data.


Automated decision making and profiling

We may use automated decision-making or profiling in limited circumstances: 

  • For fraud prevention and security purposes
  • To provide personalized product recommendations based on your browsing history
  • For marketing purposes (if you’ve consented)

You have the right to:

  • Request human intervention in any automated decision that significantly affects you
  • Express your point of view regarding automated decisions
  • Contest automated decisions if you believe they are inaccurate

We do not make automated decisions using sensitive personal data without explicit consent.