Privacy Policy

1. Personal information we collect

The information we collect depends on how you interact with the Services and may include:

• Information you provide directly, such as your name, billing and shipping address, email address, phone number, payment and order information, account credentials, product reviews, survey responses, and customer support communications.
• Information collected automatically, such as your IP address, browser and device information, network connection, pages and products viewed, referring URLs, shopping activity, and interactions with the Services, emails, advertisements, and messages.
• Information from service providers and business partners, including Shopify, payment processors, fulfillment and shipping providers, analytics providers, advertising partners, and marketing or messaging platforms.

Payment information is processed by our payment providers. We do not intentionally store complete payment card numbers on our own systems.

2. How we use personal information

We may use personal information to:

• Provide the Services, process payments, fulfill and deliver orders, and manage returns or refunds.
• Create and maintain customer accounts and remember preferences.
• Respond to questions, provide customer support, and communicate about orders.
• Send marketing communications where permitted, including email and text message offers.
• Personalize the Services and measure the effectiveness of our content, marketing, and advertising.
• Detect, investigate, and prevent fraud, security incidents, misuse, and other harmful activity.
• Comply with legal obligations, enforce our terms, and protect our rights and the rights of others.

3. Cookies, similar technologies, and abandoned carts

OhCrisp's website uses cookies and similar technologies, including technologies provided by Shopify and applicable website or messaging plugins, to operate the store, remember preferences, understand how visitors use the Services, support analytics and advertising, and help keep track of items placed in a shopping cart, including when a cart has been abandoned.

You can manage cookies through your browser and, where available, our cookie banner. Blocking certain cookies may affect the availability or operation of parts of the Services.

4. SMS/MMS mobile messaging

When you provide your mobile phone number and opt in to receive text messages from OhCrisp, we collect your phone number, consent records, messaging preferences, and information relating to messages sent to or received from you. We use this information to operate our mobile messaging program, including sending promotional offers, product updates, customer service messages, order-related notifications, and abandoned cart reminders.

Message frequency may vary. Consent to receive marketing text messages is not a condition of purchase. Message and data rates may apply. You may opt out at any time by replying STOP to any message. For assistance, reply HELP or contact us at support@ohcrisp.com.

5. How we disclose personal information

We may disclose personal information to:

• Shopify and vendors that provide payment processing, hosting, analytics, marketing, messaging, customer support, fraud prevention, fulfillment, and delivery services.
• Advertising and business partners, including where sharing is used to provide or measure targeted advertising.
• Professional advisers, law enforcement, regulators, courts, or other parties when reasonably necessary to comply with law or protect rights, safety, and property.
• A buyer, investor, or successor in connection with a proposed or completed business transaction, such as a merger, financing, or sale of assets.

Certain disclosures for targeted advertising may be considered a "sale," "sharing," or "targeted advertising" under some U.S. state privacy laws. Eligible residents can exercise applicable opt-out rights through our Your Privacy Choices page.

Mobile data sharing

We may disclose mobile phone numbers, text messaging consent records, and messaging data to service providers that help us operate the mobile messaging program, including Shopify, Klaviyo, telecommunications carriers, technical service providers, and customer support providers. These providers may use the information only to provide services to OhCrisp.

6. Location information

We may infer an approximate location, such as city, state, or country, from your IP address or device information for fraud prevention, security, analytics, website localization, and compliance purposes. We do not intentionally collect precise GPS location through the Services unless we explain the collection at that time and obtain any permission required by applicable law.

7. Data retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain business and transaction records, comply with legal obligations, resolve disputes, prevent fraud, and enforce agreements. For mobile messaging, we may retain limited consent and suppression records after an opt-out so that we can document consent and continue to honor the request.

8. Your rights and choices

Depending on where you live, you may have rights to request access to, correction of, deletion of, or portability of personal information, and to opt out of certain sales, sharing, targeted advertising, or profiling. You may also have the right to appeal a decision regarding a privacy request.

To submit a request, contact support@ohcrisp.com. We may need to verify your identity before completing a request. Authorized agents may submit requests where permitted by law. We will not discriminate against you for exercising an applicable privacy right.

You can unsubscribe from marketing emails using the link in the email and opt out of marketing text messages by replying STOP. You can also visit Your Privacy Choices to exercise eligible opt-out rights associated with cookies and targeted advertising.

9. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no security measure or method of transmission is completely secure, and we cannot guarantee absolute security.

10. Children's privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us so that we can review and, where appropriate, delete it.

11. International data transfers

We and our service providers may process personal information in countries outside the place where you live. Where required, we rely on recognized legal mechanisms intended to protect personal information transferred across borders.

12. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to our practices, technologies, legal requirements, or other factors. When we do, we will post the revised policy and update the "Last updated" date above. We will provide additional notice when required by applicable law.

13. Contact us

If you have questions about this Privacy Policy or want to exercise a privacy right, contact us at support@ohcrisp.com.

Phone: +1 203-393-6788

Mailing address: 36 Journal Square Plaza, Jersey City, NJ 07306, United States