Privacy Policy

At Oh My Shine!, a brand owned and operated by Nayas Global LLC, your privacy is a top priority. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website www.ohmyshine.com. We are committed to complying with global privacy regulations, including the General Data Protection Regulation (GDPR) for users in the European Union and the California Consumer Privacy Act (CCPA) for California residents.

1. Information We Collect

We may collect personal information in various ways when you use our website:

Personal Identifiers: Name, email address, phone number, shipping and billing address
Account Information: Passwords and preferences if you create an account
Payment Information: Card and payment details are processed securely through third-party payment processors (e.g., Stripe, PayPal). We do not store full payment information.
Device and Usage Data: IP address, browser type, operating system, date/time stamps, and interaction with our website
Marketing and Cookies Data: Through cookies and pixels, we collect information related to your browsing behavior, preferences, and interactions

2. How We Use Your Information

Your data helps us deliver a safe, efficient, and customized shopping experience. We use your information to:

Fulfill and deliver your orders
Communicate with you regarding transactions, returns, and support
Send promotional materials, newsletters, or special offers (if you opt-in)
Improve website performance and usability
Detect and prevent fraud or other unauthorized activities
Comply with legal obligations or law enforcement requests

3. Legal Basis for Processing (GDPR Compliance)

For users in the EU, our processing is based on the following legal grounds:

Consent: For email marketing and cookies
Contractual necessity: For order processing and delivery
Legal obligation: When we are required by law
Legitimate interest: For website analytics and service improvement

4. Sharing Your Information

We do not sell your personal data. However, we may share it with:

Service Providers: Payment gateways, delivery services, email platforms, IT support
Legal Authorities: If required by court order or legal process
Advertising Platforms: Limited anonymized data may be shared with third parties (e.g., Google, Facebook) for remarketing purposes, in compliance with applicable laws

5. Data Storage and Security

We implement technical and organizational security measures including:

SSL encryption
Secure server environments
Access controls and role-based access to sensitive information
Regular data backups

6. International Data Transfers

If you are located outside the United States, please note that your information will be transferred, stored, and processed in the United States. We take steps to ensure that your data is treated securely and in accordance with this Policy.

7. Your Rights

Depending on your jurisdiction, your rights may include:

Access to your personal data
Correction of inaccurate data
Deletion of your data (“right to be forgotten”)
Restriction or objection to processing
Data portability
Withdrawal of consent at any time

To exercise any of these rights, email us at online@ohmyshine.com.

8. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy, unless a longer retention period is required by law.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage users to review third-party privacy policies before providing any personal information.

10. Children’s Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected such data, we will delete it promptly.

11. Policy Updates

We may update this Privacy Policy periodically. The updated version will be indicated by an updated “Last Updated” date. We encourage you to review this policy frequently to stay informed of how we are protecting your data.