Entour is a brand of The Werc Shop, LLC ("Entour", "The Werc Shop", "we", "us", or "our"). This Privacy Policy describes how we collect, use, share, and otherwise process your personal information when you visit entourbrand.com, the websites and subdomains of thewercshop.com (together, the "Sites"), or use our products and services. By using the Sites you agree to the practices described here.
1. Scope
This policy covers the processing of personal information when you:
- Visit our Sites or pages that link to this policy.
- Place an order, request a quote, or open a wholesale account.
- Sign up for our newsletter or marketing emails.
- Visit our branded social media pages.
- Contact us by email, phone, contact form, or chat.
- Apply for a job with us.
2. Information We Collect
Information You Give Us
When you create an account, place an order, request samples, or contact us, we may collect:
- Contact details: name, business name, billing and shipping address, email, phone number.
- Account credentials: username and password (passwords are stored hashed, never in plain text).
- Payment information: processed directly by our payment processor (Square). We do not store full card numbers on our servers. We retain the last four digits of the card, card brand, and a Square transaction reference.
- Order history and product preferences.
- Wholesale and licensing information you provide for account verification.
- Communications you send us, including customer service messages.
- Employment and education information when you apply for a role.
Information We Collect Automatically
When you visit the Sites, our servers and the tools we use may automatically collect:
- IP address, approximate location derived from IP, browser type and version, device type and operating system.
- Pages viewed, time on page, referring URL, search terms used to find us.
- Order session data so the cart and checkout work correctly.
- Server logs used for security monitoring, fraud prevention, and debugging.
These are collected using cookies, similar technologies, and standard server logging. See Section 6 for our cookie use.
Information From Third Parties
If you log in or interact with the Sites through a social platform, that platform may share limited profile information with us based on your settings. Our payment processor returns payment confirmation data tied to your order.
3. How We Use Your Information
We use personal information to:
- Process and ship your orders and provide customer support.
- Verify wholesale and business accounts.
- Send transactional messages such as order confirmations, shipping notifications, account notices, and security alerts.
- Send marketing communications about new blends, sample packs, restocks, and offers, only where permitted.
- Operate, maintain, secure, and improve the Sites and our products.
- Detect, investigate, and prevent fraud, abuse, and security incidents.
- Comply with legal, tax, regulatory, and accounting obligations.
- Defend our legal rights and the rights of others.
- Evaluate job applications.
4. Legal Bases for Processing
We rely on the following legal bases, depending on the activity: performance of a contract with you (such as fulfilling your order), compliance with a legal obligation (such as tax recordkeeping), your consent (for marketing emails you opted into), and our legitimate interests in running a secure and useful business (such as preventing fraud and improving our products).
5. How We Share Your Information
We do not sell your personal information for money. We do not share your personal information with third parties for their own marketing purposes. We do not engage in cross-context behavioral advertising (also known as targeted or retargeting ads). We share information only as described below.
Service Providers
We share personal information with vendors who process it on our behalf, under written contracts that restrict their use of the data to providing services to us. These include:
- Square for payment processing.
- ShipStation, UPS, FedEx, and GlobalPost for order fulfillment and shipping.
- Render and Cloudflare for hosting, DNS, security, and CDN.
- Turso for database services.
- Google for Tag Manager (container GTM-5XJQ799W) and Analytics 4 (property “Entour Brand”).
- Email and customer support tools for transactional and marketing messages.
Legal and Safety
We may disclose information if we believe in good faith it is necessary to comply with a law, regulation, subpoena, warrant, or other legal process; to enforce our terms; to protect the safety, rights, or property of Entour, our customers, or others; or to investigate and prevent fraud.
Business Transfers
If The Werc Shop is involved in a merger, acquisition, reorganization, financing, or sale of assets, personal information may be transferred as part of that transaction, subject to the protections of this policy.
Aggregated and De-Identified Information
We may create aggregated or de-identified data that does not identify you and use or share it for any lawful purpose.
California Civil Code § 1798.83 (Shine the Light)
California residents may request information about our disclosures of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes.
6. Cookies and Similar Technologies
We use the following categories of cookies and similar technologies:
- Essential. Keep you logged in, hold items in your cart, and provide CSRF protection on forms. These are always on; the site does not work without them.
- Analytics. Google Analytics 4, loaded through Google Tag Manager (container GTM-5XJQ799W), measures how visitors find and use the Sites. Data is sent to Google as a processor under Google’s data processing terms. Analytics is enabled by default in a consent-mode configuration; you can opt out via the cookie banner.
- Advertising / personalization. Off by default. If you choose “Accept all” in the cookie banner, Google may receive ad-related signals that can be used for remarketing or measurement of Google Ads campaigns. Under CCPA/CPRA, granting this consent may constitute “sharing” for cross-context behavioral advertising. You can withdraw consent at any time by re-opening the cookie banner or clearing site cookies.
You can also control cookies in your browser settings. Disabling essential cookies may prevent the cart or checkout from working.
7. Do Not Track and Global Privacy Control
We honor the Global Privacy Control (GPC) signal: when a GPC signal is detected, we will not consider you to have granted advertising-cookie consent, even if you later click “Accept all” in the banner, and we will not share information with advertising vendors for cross-context behavioral advertising. Most browsers also support Do Not Track (DNT) signals; the industry has not standardized DNT behavior, so we do not rely on DNT for opt-outs.
8. Children's Privacy
The Sites and our products are not directed at children under 16, and our wholesale products are sold for use by qualified businesses only. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.
9. Data Security
We use administrative, technical, and physical safeguards designed to protect personal information, including HTTPS on all pages, password hashing, role-based access controls in our admin tools, audit logging of sensitive actions, and PCI-compliant payment handling through Square. No internet-based service can be completely secure; you acknowledge that you provide information at your own risk.
10. Data Retention
We keep personal information for as long as needed to provide the services and for legitimate business purposes, such as fulfilling tax, accounting, warranty, and legal obligations. Order records are typically retained for at least seven years to meet US tax and recordkeeping requirements. Marketing contacts are retained until you unsubscribe. After the retention period, information is deleted or de-identified.
11. International Visitors
Entour and The Werc Shop operate from the United States and our service providers are primarily located in the United States. If you visit the Sites from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States.
12. Your California Privacy Rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you the rights described below.
Categories of Personal Information Collected in the Last 12 Months
- Identifiers (name, email, address, phone, IP address, account ID).
- Customer records under Cal. Civ. Code § 1798.80 (billing and shipping address, payment information processed by Square).
- Commercial information (purchase history, products considered, sample requests).
- Internet or other electronic network activity (pages viewed, referring URL, device and browser data).
- Geolocation data, limited to general region inferred from IP address.
- Professional or employment information, only if you apply for a role or open a wholesale account.
- Inferences drawn from the above to maintain account preferences (such as the categories you browse most).
Sources, Purposes, and Disclosures
Sources, business and commercial purposes, and the categories of third parties that personal information is disclosed to are described in Sections 2, 3, and 5 above.
Sensitive Personal Information
We collect account login credentials, which are a category of "sensitive personal information" under the CPRA. We use these only to authenticate you and to provide and secure the Sites. We do not use or disclose sensitive personal information for purposes that would trigger your right to limit its use and disclosure under Cal. Civ. Code § 1798.121.
Sale and Sharing
We do not sell personal information for money. Whether Google Analytics constitutes “sharing” under the CPRA depends on the consent state you choose in the cookie banner. Analytics-only mode is configured to prevent cross-context behavioral advertising signals from being sent. If you choose “Accept all”, ad-related cookies may be set and Google may receive signals that can be used to measure or improve Google Ads campaigns; under California law this may be treated as sharing. You can withdraw consent at any time, and a Global Privacy Control browser signal will be honored as an opt-out of sharing. We do not have actual knowledge of selling or sharing the personal information of anyone under 16.
Your Rights
- Right to Know: request that we disclose the categories and specific pieces of personal information we have collected about you, the sources, the business or commercial purpose, and the categories of third parties to whom we have disclosed it.
- Right to Delete: request that we delete personal information we have collected from you, subject to legal exceptions.
- Right to Correct: request that we correct inaccurate personal information.
- Right to Opt Out of Sale or Sharing: because we do not sell or share personal information, there is no opt-out to exercise. If this changes we will update this policy and provide an opt-out mechanism.
- Right to Limit Use of Sensitive Personal Information: we do not use sensitive personal information beyond purposes that would trigger this right.
- Right to Data Portability: we will provide your personal information in a portable, machine-readable format on request.
- Right to Non-Discrimination: we will not deny you goods or services, charge different prices, or provide a different level or quality of goods and services because you exercised your rights.
How to Submit a Request
Email us at erby@thewercshop.com with the subject line "California Privacy Request" and tell us which right you are exercising. We will verify your identity by matching the request against information we already have on file, such as your email address and account or order details. An authorized agent may submit a request on your behalf with a signed written authorization and proof of your identity. We respond within 45 days, with one possible 45-day extension if reasonably necessary.
13. Other US State Privacy Rights
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Tennessee, Indiana, Delaware, New Hampshire, New Jersey, Minnesota, Maryland, and Rhode Island may have rights similar to those described above under their state privacy laws. We honor verifiable consumer requests from residents of these states using the same process described in Section 12.
14. Changes to this Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If we make material changes, we will provide additional notice, for example by email or a banner on the Sites.
15. Contact Us
For questions, requests, or complaints about this Privacy Policy, contact us at:
The Werc Shop, LLC
181 W Huntington Drive #106
Monrovia, CA 91016
Email: erby@thewercshop.com
Phone: 714-931-5806
See also our Terms of Use.