PRIVACY POLICY (GDPR COMPLIANT)

Effective Date: 2/18/26
Business Name: OyaRoots
Email: support@oyaroots.shop

OyaRoots respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your information when you visit or make a purchase from our website.

This policy applies to customers in the United States, Canada, the United Kingdom, and the European Union.

1. Information We Collect

When you visit our website, place an order, or interact with us, we may collect:

• Name

• Billing and shipping address

• Email address

• Phone number

• Payment information (processed securely by third-party providers; we do not store full payment details)

• IP address

• Device and browser information

• Order history

• Marketing preferences (if you opt in)

2. How We Use Your Information

We use your information to:

• Process and fulfill orders

• Provide shipping and tracking updates

• Communicate about your purchase

• Provide customer support

• Improve our website and user experience

• Prevent fraud and ensure security

• Send marketing communications (only if you opt in)

3. Marketing Communications & Opt-In

If you choose to opt in to receive marketing communications at checkout or through our website, OyaRoots may use your name, email address, and/or phone number to send:

• Promotional offers

• Product launches

• Brand updates

• Exclusive discounts

• Content related to OyaRoots

Marketing communications are sent only with your explicit consent.

You may withdraw your consent at any time by:

• Clicking the “Unsubscribe” link in any marketing email

• Replying STOP to SMS communications (if applicable)

• Contacting us at support@oyaroots.shop

We do not sell your personal information. Your contact information will not be shared for unrelated third-party marketing.

4. Order Fulfillment & Third-Party Services

OyaRoots uses Printful as a third-party print-on-demand and dropshipping provider. When you place an order, the necessary information (such as your name and shipping address) is shared with Printful solely for order production and fulfillment.

We also use secure third-party providers for:

• Payment processing

• Website hosting

• Email marketing services

• Analytics

These providers process data on our behalf and are required to comply with applicable data protection laws.

5. Legal Basis for Processing (UK & EU Customers)

If you are located in the UK or European Union, we process your personal data under the following legal bases:

• Performance of a contract (to fulfill your order)

• Legal obligation

• Legitimate business interests

• Your consent (for marketing communications)

You have the right to:

• Access your personal data

• Correct inaccurate information

• Request deletion of your data

• Restrict or object to processing

• Withdraw consent at any time

• Request data portability

To exercise these rights, contact support@oyaroots.shop

6. Data Retention

We retain your personal information only as long as necessary to:

• Fulfill orders

• Meet legal and tax obligations

• Resolve disputes

• Enforce agreements

Marketing data is retained until you unsubscribe.

7. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to:

• Improve website functionality

• Analyze traffic and performance

• Remember user preferences

• Support marketing and advertising efforts

You may adjust cookie settings through your browser. UK and EU visitors may be presented with a cookie consent banner where required by law.

8. Data Security

We implement reasonable technical and organizational safeguards to protect your personal information. However, no online transmission is completely secure.

9. International Data Transfers

Because we serve customers globally, your information may be transferred and processed outside your country of residence, including the United States. Where required, we rely on appropriate safeguards to protect your data.

10. Children’s Privacy

OyaRoots does not knowingly collect personal information from individuals under the age of 13 (or under 16 in certain EU jurisdictions).

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revised effective date.

12. Contact Information

For questions about this Privacy Policy or your personal information, please contact:

OyaRoots Email: support@oyaroots.shop