Privacy Policy

1. Introduction

Welcome to Ocon's Creations. This Privacy Policy explains how we collect, use, store, and share your personal information when you visit our website, interact with our online store, make a purchase, or otherwise engage with our services (collectively referred to as the "Services"). We are powered by Shopify, which allows us to deliver a seamless and secure shopping experience to you.

This Privacy Policy applies to all information gathered through our Services. In the event that any portion of our Terms of Service conflicts with this Privacy Policy, the terms of this Privacy Policy shall prevail when it comes to the collection, processing, storage, and disclosure of your personal data.

By accessing or using any part of our Services, you confirm that you have reviewed and understood this Privacy Policy, and you consent to the practices described herein. If you do not agree with any part of this policy, we kindly ask that you discontinue use of our Services.

2. Categories of Personal Information We Collect

When we reference "personal information," we mean any data that can be used to identify, contact, or reasonably associate with a specific individual. Anonymous or de-identified data that cannot be linked back to you is not considered personal information under this policy.

Depending on your interactions with us, your geographic location, and applicable legal requirements, we may collect and process the following categories of personal data:

2.1 Contact Information

• Full name
• Email address
• Telephone number
• Shipping address
• Billing address

2.2 Financial and Payment Information

• Credit or debit card numbers
• Payment card details
• Financial account information
• Transaction records, payment method details, and payment confirmations

2.3 Account Details

• Username and password
• Security questions and answers
• Shopping preferences and account settings

2.4 Shopping and Transaction Data

• Products you browse, add to your cart, or save to your wishlist
• Purchase history and order records
• Returns, exchanges, and cancellation requests

2.5 Device and Technical Information

• Web browser type and version
• Operating system details
• IP address and device identifiers
• Cookies, pixels, and similar tracking mechanisms
• Browsing behavior and navigation patterns on our website

2.6 Communication Records

• Customer support inquiries and correspondence
• Product reviews, ratings, and feedback you submit
• Newsletter subscriptions and marketing preferences

3. Sources of Information Collection

We gather personal information from a variety of sources, including:

3.1 Information You Provide Directly

• When you register for an account
• When you complete a purchase or initiate a transaction
• When you communicate with us by email, phone, live chat, or any other channel
• When you sign up for our newsletter or marketing emails
• When you leave product reviews, ratings, or other feedback

3.2 Information Collected Automatically

• Through cookies and related tracking technologies when you browse our website
• Via device and technical data gathered during your visit
• Through your browsing activity and interaction with our store pages and products

3.3 Information from Third-Party Sources

• Payment processing partners
• Shipping and logistics providers
• Analytics and data service providers
• Marketing and advertising collaborators
• Social media platforms (if you choose to sign in or interact through social media)

4. How We Use Your Personal Information

We use the personal information we collect for a variety of legitimate business purposes, depending on how you interact with our Services:

4.1 Delivering and Enhancing Our Services

We rely on your information to:

• Process, fulfill, and ship your orders accurately
• Handle payment transactions securely
• Coordinate shipping and delivery with our logistics partners
• Manage returns, exchanges, and order cancellations
• Send order confirmations, shipping updates, and delivery notifications
• Create, maintain, and secure your account
• Remember your product preferences and shopping history
• Respond to customer service inquiries and resolve issues
• Enable product reviews and ratings
• Tailor your shopping experience with personalized product recommendations

4.2 Marketing and Promotional Activities

We may use your data to:

• Send promotional emails, text messages, or postal mail about new arrivals, sales, and special offers
• Display targeted advertisements on our website and across third-party platforms based on your browsing behavior and past purchases

4.3 Security and Fraud Prevention

Your data helps us to:

• Authenticate and secure your account access
• Provide a safe and reliable payment environment
• Detect, investigate, and prevent fraudulent, unauthorized, or harmful activities
• Protect the safety and security of our customers and the public
• Safeguard the integrity of our Services and platform

If you create an account with us, you are responsible for safeguarding your login credentials. We strongly advise against sharing your username, password, or any other access information with anyone.

4.4 Customer Communication

We use your information to:

• Deliver responsive and helpful customer support
• Address your questions, concerns, and feedback promptly
• Provide updates relevant to your orders or account
• Maintain an ongoing, positive relationship with you as our valued customer

4.5 Legal and Regulatory Compliance

We may process your information to:

• Comply with applicable laws, regulations, and legal obligations
• Respond to lawful requests from government agencies, law enforcement, or courts
• Participate in legal proceedings, investigations, or dispute resolution
• Enforce our terms of service, policies, and contractual agreements

5. When and How We Share Your Personal Information

We may share your personal information with trusted third parties under specific, legitimate circumstances outlined in this policy. We want to be transparent about these situations:

5.1 Service Providers and Vendors

We share necessary information with Shopify, payment processors, shipping carriers, customer support platforms, cloud storage providers, analytics firms, and other vendors who assist us in operating our business and delivering our Services to you.

5.2 Business and Marketing Partners

We collaborate with marketing partners to deliver relevant advertising and promotional content to you. For instance, Shopify powers personalized advertising features that use data about your activity on our store and across other Shopify merchants. These partners handle your information in accordance with their respective privacy policies.

Depending on your location, you may have the right to ask us not to share your information for targeted advertising and cross-merchant marketing purposes.

5.3 With Your Consent

When you ask us to share specific information with a third party — such as when shipping a product to an address you provide, or when using social media login features — we will share that information as directed.

5.4 Corporate Affiliates

We may share information with affiliated companies or within our broader corporate group for operational purposes.

5.5 Business Transactions

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal information may be transferred as part of that transaction. We will also share information when required by law, such as in response to subpoenas, court orders, or other legal processes, and when necessary to protect our rights, our Services, or the safety of our users.

5.6 We Do Not Sell Your Personal Information

We want to be absolutely clear: we do not sell your personal information to any third party for their own independent use.

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and collect certain data about your activity.

6.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They help websites function properly, remember your preferences, and gather analytical data.

6.2 Types of Cookies We Utilize

6.3 Third-Party Cookies

We may permit trusted third-party service providers — including Google Analytics, Shopify, and advertising partners — to place cookies on your device. These cookies help collect data about your activity across various websites and platforms.

6.4 Managing Your Cookie Settings

You can control your cookie preferences by:

• Modifying your browser settings to block or delete cookies
• Responding to our cookie consent banner when you first visit our site
• Visiting your browser's help section for detailed instructions on cookie management

Please be aware that disabling certain cookies may limit or affect the functionality of our website.

7. Our Relationship with Shopify

Our online store is hosted on the Shopify platform. Shopify collects and processes information about how you access and use our Services in order to deliver and continuously improve the platform for you. Any data you provide through our store may be transmitted to Shopify and to third-party processors located in various countries around the world.

Additionally, to help us protect, grow, and enhance our business, we utilize certain Shopify-powered features that incorporate data from your interactions on our store, combined with insights from other Shopify merchants and Shopify's own platform analytics. In these instances, Shopify acts as a data processor and is responsible for handling your personal information for these specific purposes, including responding to any privacy-related requests you may have.

For more details about how Shopify collects and uses your data, and to understand any privacy rights you may have, we encourage you to review the Shopify Consumer Privacy Policy. You can also exercise certain rights regarding your personal data through Shopify's privacy tools.

8. Third-Party Websites and External Links

Our Services may contain links to external websites or platforms operated by third parties. When you click on these links and navigate away from our store, please be aware that we have no control over those external sites. We strongly recommend reviewing the privacy policies, security practices, and terms of use of any third-party website before sharing your personal information.

We are not responsible for the privacy practices, content, security measures, or accuracy of information on any third-party websites, even if you access them through a link on our store.

Additionally, any information you voluntarily share on public or semi-public forums — including third-party social media platforms — may be visible to other users and could be used beyond our control.

The inclusion of external links on our website does not constitute an endorsement of those sites, their content, their owners, or their operators.

9. Data Security and Retention

9.1 How We Protect Your Information

We take the security of your personal data seriously and have implemented a range of technical, administrative, and organizational safeguards to protect it, including:

• Encryption of sensitive data during electronic transmission
• Secure, access-controlled storage of personal information
• Routine security assessments, vulnerability scans, and audits
• Role-based access controls and multi-factor authentication for internal systems
• Ongoing employee training on data protection best practices

While we work diligently to safeguard your information, please understand that no security system is entirely infallible. Data transmitted over the internet cannot be guaranteed to be 100% secure. We recommend that you avoid sending sensitive or confidential information through unsecured channels.

Your Role in Keeping Your Information Safe:

• Keep your account password strong and confidential
• Never share your login credentials with others
• Contact us immediately if you notice any unusual or suspicious activity on your account

9.2 How Long We Keep Your Information

We retain your personal information only for as long as needed to fulfill the purposes described in this policy. The retention period depends on factors such as:

• Maintaining your account and providing ongoing Services
• Fulfilling our legal and regulatory obligations
• Resolving disputes and enforcing agreements

When your data is no longer required, we securely delete or irreversibly anonymize it.

10. Children's Privacy

Our Services are designed for adult consumers and are not intended for use by children. We do not knowingly collect personal information from individuals under the age of majority in their jurisdiction. If you are a parent or guardian and believe your child has provided us with personal data, please contact us using the information below, and we will promptly delete that information.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" (as defined under applicable privacy laws) personal information of individuals under 16 years of age.

11. Your Privacy Rights and Choices

Depending on where you reside, you may have specific rights regarding your personal information. These rights may vary by jurisdiction and are subject to certain legal limitations and exceptions.

11.1 Right to Access

You have the right to request a copy of the personal information we hold about you and to learn how it has been used and shared.

11.2 Right to Deletion

You may ask us to delete the personal information we have collected from you, subject to certain legal exceptions.

11.3 Right to Correction

You may request that we correct any inaccurate or incomplete personal information in our records.

11.4 Right to Data Portability

In certain circumstances, you may request a copy of your personal data in a portable, commonly used format, or ask us to transfer it directly to another service provider.

11.5 Right to Opt Out of Targeted Advertising

Depending on your location, you may have the right to opt out of the "sale" or "sharing" of your personal information for targeted advertising purposes. If your browser has the Global Privacy Control (GPC) signal enabled, we will automatically treat that as an opt-out request for the device and browser you are using.

Learn more about GPC at https://globalprivacycontrol.org/.

11.6 Managing Marketing Communications

You may unsubscribe from promotional emails at any time by clicking the unsubscribe link in any marketing message you receive from us. Please note that even if you opt out of marketing emails, we may still send you transactional or account-related communications, such as order confirmations or shipping updates.

11.7 How to Exercise Your Rights

You may exercise any of the rights described above by contacting us using the information provided in the Contact Us section of this policy. We will not treat you differently or penalize you for exercising your rights.

We may need to verify your identity before processing your request. You may also designate an authorized agent to act on your behalf, provided that the agent can demonstrate written authorization from you and we can verify your identity directly.

12. California Residents — Additional Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act of 2018 ("CCPA"), as amended by the California Privacy Rights Act of 2020 ("CPRA"), grants you specific rights over your personal information. This section provides details about those rights and how to exercise them.

12.1 Categories of Personal Information Collected (Past 12 Months)

12.2 Sources of Collection (Past 12 Months)

• Directly from you — account creation, purchases, customer inquiries, newsletter signups, reviews
• Automatically — cookies, device data, browsing behavior on our website
• From third parties — payment processors, shipping providers, analytics firms, marketing partners, and Shopify

12.3 Business Purposes for Collection

• Order fulfillment and customer service
• Payment processing
• Shipping and delivery coordination
• Returns, exchanges, and cancellations
• Account management and personalization
• Marketing and advertising
• Fraud detection and security
• Analytics and service improvement
• Legal and regulatory compliance

12.4 Third-Party Disclosure (Past 12 Months)

We have not sold personal information of California residents in the preceding 12 months.

12.5 Right to Know / Access

You may request disclosure of the following information about our data practices over the past 12 months:

• The categories of personal information we collected
• The specific data elements we collected
• The sources from which we collected it
• The business purposes for collection
• The categories of third parties with whom we shared it

12.6 Right to Delete

You may request deletion of your personal information, subject to certain legal exceptions. We may retain data when necessary to:

• Complete a transaction or provide a requested service
• Detect and prevent security incidents or fraud
• Debug and repair product errors
• Exercise free speech rights
• Comply with the California Electronic Communications Privacy Act
• Conduct approved scientific, historical, or statistical research
• Enable internal uses aligned with your expectations
• Comply with a legal obligation
• Make other lawful internal uses compatible with the original collection context

12.7 Right to Correct

You may request correction of inaccurate personal information, and we will use commercially reasonable efforts to update our records accordingly.

12.8 Right to Opt Out of Sale and Sharing

You have the right to opt out of the "sale" or "sharing" of your personal information for targeted advertising. You may exercise this right by:

• Clicking the "Do Not Sell or Share My Personal Information" link on our website
• Enabling the Global Privacy Control (GPC) signal in your browser
• Contacting us directly using the information below

We will honor your opt-out request promptly and discontinue sharing your data for targeted advertising purposes.

12.9 Right to Limit Use of Sensitive Personal Information

You may request that we limit the use and disclosure of your sensitive personal information to only what is necessary to provide the Services you reasonably expect. We currently use sensitive personal information solely to process payments and manage your account.

12.10 Non-Discrimination

We will never discriminate against you for exercising any of your CCPA/CPRA rights. We will not:

• Deny you products or services
• Charge you different prices or rates
• Provide a different level of quality or service
• Suggest that you will receive differential treatment

We may, however, offer voluntary financial incentive programs that comply with the CCPA/CPRA, which will be clearly described with written terms at the time of enrollment.

12.11 Financial Incentive Programs

We may offer loyalty programs, discount opportunities, or other incentives that involve the collection of personal information. Participation is always voluntary, and you may withdraw at any time. Any such programs will be designed to provide reasonably equivalent value and will include written terms explaining the program's key details.

12.12 Verification Process

Before responding to your CCPA/CPRA request, we will verify your identity. This may involve:

• Asking you to confirm your name, email address, and/or order number
• Matching the information you provide against our records
• Sending a verification link to your registered email address

If you have an account with us, you may also verify your identity through your account login. If we cannot verify your identity, we may be unable to fulfill your request. We will respond within 45 days of receiving your request, with an extension of up to 45 additional days if needed, along with an explanation for the delay.

12.13 Authorized Agents

You may designate an authorized agent to submit requests on your behalf under the CCPA/CPRA. Before we accept such a request, we will require:

• Written authorization signed by you
• Direct identity verification with you
• Your confirmation that you authorized the agent

12.14 Shine the Light Law (Cal. Civ. Code §1798.83)

Under California's "Shine the Light" law, California residents may request information about the disclosure of their personal information to third parties for direct marketing purposes. As described in this policy, we do not share personal information with third parties for their independent direct marketing without your consent. You may contact us for additional compliance information.

13. Nevada Residents — Additional Privacy Rights (SB 220)

If you are a Nevada resident, you may have the right to opt out of the "sale" of certain personal information to third parties as defined under Nevada law. As stated throughout this policy, we do not sell your personal information. If you have questions or wish to exercise your rights, please contact us using the information below.

14. Other U.S. State Privacy Rights (Virginia, Colorado, Connecticut, Utah, and Others)

If you reside in Virginia, Colorado, Connecticut, Utah, or any other U.S. state with comprehensive privacy legislation, you may have additional rights, including:

• Confirming and accessing information about our processing of your data
• Requesting deletion of personal information you have provided
• Correcting inaccurate personal information
• Opting out of targeted advertising, the sale of personal information, or profiling that produces legal or similarly significant effects

To exercise any of these rights, please contact us using the information provided below. We will respond within the timeframe mandated by applicable law.

15. International Data Transfers

Please be aware that your personal information may be transferred to, stored in, and processed in countries outside of your country of residence. When we transfer data out of the European Economic Area (EEA) or the United Kingdom (UK), we rely on recognized transfer mechanisms, including the European Commission's Standard Contractual Clauses (SCCs) or equivalent approved frameworks, unless the destination country has been deemed to provide adequate data protection.

16. Complaints and Appeals

If you have concerns about how we handle your personal information, please contact us using the details provided below. Depending on your jurisdiction, you may also have the right to appeal our decision or file a complaint with your local data protection authority.

17. Updates to This Privacy Policy

We may revise this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make significant updates, we will:

• Publish the revised policy on this page
• Update the "Last Updated" date at the top of this document
• Provide additional notice as required by applicable law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

18. Contact Us

If you have any questions about this Privacy Policy, our data practices, or if you would like to exercise any of the rights described above, please reach out to us using any of the following methods:

For California Residents — CCPA/CPRA Requests: You may submit a verifiable consumer request by emailing us at info@oconscreations.com with the subject line "CCPA Request" .

By using our website and services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. Thank you for trusting Ocon's Creations with your personal information.