Privacy Policy

MADISON & WOOD, LLC (“we,” “us,” or “our”) respects your privacy. This policy explains how we collect and use your information when you interact with our website and services. We do not sell your personal data to third parties.

1. INFORMATION WE COLLECT

We only collect information necessary to provide our services, maintain your account, and improve your overall experience.

Service and Account Information: This includes your name, shipping address, billing address, email, and any other details you provide when registering or requesting services.

Payment Data: We use secure third-party processors (e.g., Stripe/Shopify Payments). We do not store your full credit card numbers on our servers.

Technical Data: Your IP address and browser type are used to prevent fraud and ensure our site functions correctly on your device.

Table: Summary of Personal Information:

Category of Data

Purpose of Collection

Shared or Sold?

Retention Period

Identifiers (Name, Email, IP Address)

Service fulfillment, account security, and fraud prevention.

Shared for analytics and service delivery.

6 years after last interaction (Tax/Legal).

Commercial/Service Info (History)

Improving our offerings and providing customer support.

Shared for marketing attribution.

Permanent (Anonymized after 10  years).

Sensitive Info (Payment Data, Precise Location)

Secure payment processing and local tax/regulatory calculation.

Shared with payment processors.

Retained by our secure payment processor (Shopify/Stripe) in accordance with their PCI-compliant retention policies and applicable legal requirements for transaction record-keeping.

Internet Activity (Browsing habits, Click data)

Personalizing your experience and site performance.

Shared for Targeted Advertising (e.g., TikTok/Meta).

12 months (Standard Cookie Lifespan).

2. HOW WE USE YOUR INFORMATION

We use your data for the following "Business Purposes" which include fulfilling and managing your requests or registrations, sending service confirmations and relevant updates, communicating with you if you contact our support team, and preventing fraudulent transactions or unauthorized "bot" activity.

3. DATA SHARING & THIRD PARTIES

We do not sell your data. We only share information with "Service Providers" who help us operate our business. This includes logistics or delivery partners to fulfill physical requests, email service providers if you opt-in to our communications, and legal authorities if we are required to disclose information by a valid legal subpoena or to protect our legal rights.

4. COOKIES & TRACKING

We use "cookies" to maintain your session preferences and to analyze which parts of our website are most popular.

Analytics: We use Google Analytics and Shopify integrated applications to understand site traffic. This data is aggregated and does not identify you personally.

Opt-Out: You can disable cookies in your browser settings, though some parts of our website may stop functioning properly.

Use of Tracking Technologies for Advertising: We use "pixels," "tags," and "SDKs" provided by third-party advertising partners to understand our website traffic and measure the success of our marketing. These technologies track your interactions on our site (such as which services you viewed or interactions you initiated) and share this information with our advertising partners. Our partners may use this data to show you personalized advertisements on their platforms, create "Lookalike Audiences" to find new users with similar interests, and measure the conversion rate of specific advertisements.

5. DATA SECURITY & RETENTION

We implement reasonable security measures, [including SSL encryption] for all data in transit. We keep service-related information for [7 years] to comply with tax and accounting laws. Marketing data is deleted if you have not interacted with us for [24 months].

While we take all reasonable precautions to protect your data, no security system is foolproof. We cannot guarantee absolute security. Please note that any information you send us may be at risk while in transit, so we advise against sending sensitive or confidential information through unsecured channels.

6. REGIONAL DISCLOSURES & YOUR CHOICES

Depending on where you live, you have specific rights regarding your data.

General Rights: You have the Right to Know/Access, meaning you may request a copy of the personal information we have collected about you (as of 2026). You have the Right to Delete & Correct inaccuracies in your account. You also have the Right to Opt-Out of Profiling, which allows you to opt-out of "Automated Decision-Making" such as AI-driven dynamic pricing or significant behavioral profiling. You have the Right to Portability, meaning you have the right to receive your personal data in a structured, commonly used, and machine-readable format so that you can transfer it to another service. 

EU and UK Residents: MADISON & WOOD, LLC acts as the Data Controller. We process your personal data under the lawful bases of Performance of a Contract, Legitimate Interests for site security, and Consent for marketing and sensitive data processing. Residents of the EEA and UK have the right to access, rectify, erase, and export their data, as well as the right to restrict or object to certain processing. Your data is processed in the United States using Standard Contractual Clauses to ensure protection. You have the right to lodge a complaint with your local Data Protection Authority (e.g., the ICO in the UK). We will acknowledge formal privacy complaints within 30 days. Where we rely on consent (such as for cookies or marketing), you have the right to withdraw that consent at any time. Withdrawing consent is as easy as giving it via our Cookie Settings.

Texas Residents (TDPSA Compliance): We process your personal data for targeted advertising and you have the right to opt-out of this processing at any time. NOTICE: We may sell your sensitive personal data. While we do not sell your data for money, Texas law defines "selling" to include sharing personal information for targeted advertising. Because some tracking pixels may collect sensitive categories like precise geolocation, we provide this notice for full compliance. We will not activate targeted advertising pixels or collect sensitive data without your Prior Affirmative Consent. If we decline a privacy request, you have the right to appeal by contacting us at our Privacy Contact Email; if denied, you may contact the Texas Attorney General.

California Residents (CPRA Compliance): We "share" personal information with third parties for Cross-Context Behavioral Advertising. You have the right to opt-out of this sharing. We do not use or disclose "Sensitive Personal Information" for purposes other than those permitted by the CCPA/CPRA.

We will not discriminate against you for exercising any of your rights. To provide a substantive response, we may need to verify your identity by collecting information such as your email address or account details. In accordance with applicable laws, you can designate an authorized agent to make requests on your behalf. Before accepting a request from an agent, we will require proof that you have authorized them to act for you, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required by law.

7. HOW TO OPT-OUT of TRACKING & "SHARING"

You can stop the collection and sharing of your data for advertising through the following methods.

Global Privacy Control (GPC): We honor GPC signals. If your browser sends a GPC signal, we will automatically treat it as a request to opt-out of the "Sale or Sharing" of your data and will display an opt-out confirmation message.

Privacy Dashboard: Click the "Your Privacy Choices" link in our website footer to adjust your cookie preferences and toggle off "Advertising/Targeted Cookies."

Platform Settings: You can manage your ad preferences directly on individual platforms like Google, Meta, or TikTok.

8. CHILDREN’S DATA

Our Services are not intended for children, and we do not knowingly collect their personal information. If you are a parent or guardian and believe your child has provided us with their personal information, please use the contact details below to request its deletion. As of the effective date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell” the personal information of individuals under 16 years of age, as those terms are defined by applicable law.

9. CONTACT US

For any questions regarding this policy or to exercise your rights, please contact:

Company Name Email: Service@madisonandwood.com

Address: 2308 2nd Ave E, Suite 200, Oneonta, AL 35232, United States

Last Updated: June 5, 2026