---
title: "Customer notice templates | WhoLayer"
description: "Sample privacy-notice wording for websites that use the WhoLayer tag, with a link to WhoLayer's opt-out."
url: https://wholayer.com/legal/customer-notice
---

[Legal](https://wholayer.com/legal)

# Customer notice templates

Effective November 16, 2026. WhoLayer, Inc.

If you install the WhoLayer tag, your privacy policy must tell visitors about it before the tag runs (see section 3 of our [Terms](https://wholayer.com/legal/terms)). This page gives you sample wording to start from, and the links and code that go with it.

**These are starting points, not legal advice.** Using them does not by itself make your website compliant with any law. Have your own lawyer review and adapt them for your business, the states and countries your visitors come from, and any consent requirements that apply to you.

## 1\. Privacy policy paragraph: Visitor ID (B2B)

Add this to your privacy policy, and replace \[YOUR OPT-OUT LINK\] with your own opt-out page.

```
Visitor identification
We use WhoLayer, a third-party service, to understand which companies and people visit our website. When you visit, WhoLayer's tag collects information such as the pages you view, your IP address, your browser and device type, and an identifier stored in a cookie. WhoLayer uses this information, together with information it obtains from its own data partners, to tell us which company you work for and, for visitors in the United States, who you may be and how to contact you, such as your name, job title, and business email address. We use this to follow up with people who show interest in our products.

Under California law and some other state laws, this may be a "sale" or "sharing" of personal information. You can opt out on our website at [YOUR OPT-OUT LINK], and you can opt out of WhoLayer for every website that uses it at https://wholayer.com/privacy-request. We honor Global Privacy Control: if your browser sends it, the WhoLayer tag does not collect or send anything.

Outside the United States, WhoLayer identifies companies only, never individual people, and only after you agree through our cookie banner.
```

## 2\. Privacy policy paragraph: Shopper ID (ecommerce)

Use this instead if you send identified shoppers to your email marketing tools.

```
Shopper identification
We use WhoLayer, a third-party service, to recognize visitors to our store. When you visit, WhoLayer's tag collects information such as the pages and products you view, your IP address, your browser and device type, and an identifier stored in a cookie. For visitors in the United States, WhoLayer may match this to an email address from its data partners and send it to our email marketing tools, so we may email you about products you viewed. Every email we send includes a way to unsubscribe.

Under California law and some other state laws, this may be a "sale" or "sharing" of personal information. You can opt out on our website at [YOUR OPT-OUT LINK], and you can opt out of WhoLayer for every website that uses it at https://wholayer.com/privacy-request. We honor Global Privacy Control: if your browser sends it, the WhoLayer tag does not collect or send anything.
```

## 3\. A “Your privacy choices” link

Put a link like this in the footer of every page where the tag runs. Point it at your own opt-out page if you have one, and link to WhoLayer's opt-out from there.

```
<a href="https://wholayer.com/privacy-request">Your privacy choices</a>
```

To let visitors stop the tag in their own browser on your site, add a button that calls the tag's opt-out:

```
<!-- Lets a visitor stop the WhoLayer tag in this browser on your site (sets a cookie for 5 years). -->
<button type="button" onclick="window.wholayer && wholayer('optout')">
  Stop visitor identification in this browser
</button>
<p>To opt out of WhoLayer on every website, visit <a href="https://wholayer.com/privacy-request">https://wholayer.com/privacy-request</a>.</p>
```

## 4\. If you use a cookie banner

Outside the US the tag does nothing until your banner records consent. If you set your site to **Require consent everywhere** under Sites in your dashboard, the same applies to US visitors. Call the tag from your banner's accept and decline handlers:

```
<!-- When your cookie banner records the visitor's choice, tell the WhoLayer tag. -->
<script>
  // Visitor accepted marketing or analytics cookies:
  window.wholayer && wholayer("consent", true);

  // Visitor declined or withdrew consent:
  window.wholayer && wholayer("consent", false);
</script>
```

See [consent banners and non-US visitors](https://wholayer.com/help/consent-banners) for how the tag treats each visitor.

## 5\. Before you go live

- Your privacy policy describes the tag (section 1 or 2 above) before the tag goes on your site.
- Your footer has a “Your privacy choices” or “Do Not Sell or Share My Personal Information” link.
- Sensitive pages are excluded, such as health, financial hardship, or anything for children. See [excluded paths](https://wholayer.com/help/excluded-paths).
- Your cookie banner calls `wholayer("consent", …)` if you use one.
- You only install the tag on websites you own or control.

Last reviewed: draft, pending attorney review.

---

## Questions

Email [legal@wholayer.com](mailto:legal@wholayer.com) or write to WhoLayer, Inc., 1309 Coffeen Avenue, Suite 1200, Sheridan, WY 82801. For privacy requests, use our [privacy request page](https://wholayer.com/privacy-request).

Other policies: [Terms of Service](https://wholayer.com/legal/terms), [Privacy Policy](https://wholayer.com/legal/privacy), [Data Processing Addendum](https://wholayer.com/legal/dpa), [Acceptable Use Policy](https://wholayer.com/legal/acceptable-use), [Cookie Policy](https://wholayer.com/legal/cookies), [Subprocessors](https://wholayer.com/legal/subprocessors), [Fair Use Policy](https://wholayer.com/legal/fair-use).
