How are shoppers' privacy, cookies and marketing consent handled?

The cookie banner, a shopper's request to see or erase their data, marketing opt-in and unsubscribe, and the address US law requires in marketing email.

This page describes what Waise does. It is not legal advice; have a lawyer review what applies to you.

The cookie banner and privacy mode

Nothing third-party loads before a visitor chooses. Choices are per purpose: necessary cookies are always on, and "analytics" and "marketing" are separate. A choice is remembered for six months.

Under Settings, "Store details", "Privacy mode" has two options:

• "Automatic by market (recommended)": for US visitors there is no banner, anonymous visit counting with no cookie runs, and the footer carries a "Do not sell or share my personal information" link. The page behind it records the choice and turns off marketing cookies and ad pixels in that browser. A browser that sends the Global Privacy Control signal is treated as already opted out. In the EU, the UK and Israel the consent banner stays, and visitors from outside the US are always asked.
• "Always ask (banner)": shows the banner to everyone.

A shopper asks for a copy of their data, or to be erased

Open the customer's card and use the "More" menu:

• "Export customer data (access request)" downloads everything the store holds about that person as a file.
• "Erase the customer's details" deletes the name, email, phone and addresses everywhere, including the shopper chat; order data stays without identifying details. It cannot be undone, and you confirm by typing the word the prompt shows.

Both actions are recorded in the security log. If a shopper writes to Waise directly, Waise refers them to you, because the store is yours to run.

Marketing consent and unsubscribing

• At checkout the email opt-in reads "Email me offers and news. I can unsubscribe at any time." The text opt-in carries the standard texting wording, including "Reply STOP to opt out" and that consent is not a condition of purchase.
• Waise keeps a record of what each shopper agreed to and the wording they saw. On the customer card, "Marketing" shows whether they opted in.
• Every marketing email carries an unsubscribe link. After "Yes, unsubscribe me", the shopper gets no more marketing, but order and shipping emails keep coming.

The address US law requires

US law (CAN-SPAM) requires your postal address in marketing email. Until a US store has one, marketing emails are held and the automation screens say "Marketing emails are on hold until you add a business address." Add it under Settings, "Business details" (street, city, State, ZIP). Order and shipping emails are not affected.

Where the rules for Waise itself are

Waise acts as your service provider for your shoppers' data. The terms are in its data processing addendum at waise.app/dpa, with the list of sub-processors. Shopper chats and Pulse conversations are kept for 365 days after the last message.

Updated November 5, 2026