Privacy Policy

This Privacy Policy explains how ONA (the “Site”, “we”, “us”, or “our”) collects, uses, and shares your personal information when you visit our website or make a purchase through it.

Personal Information We Collect

When you access our Site, we gather certain information about your device, how you interact with the Site, and details required to process your purchases. If you contact us for assistance, we may also collect additional information related to your request.

In this Privacy Policy, “Personal Information” refers to any data that can be used to identify an individual directly or indirectly. Below is an overview of the types of information we collect and the reasons for doing so.

Device Information

Examples of information collected:

  • Web browser version

  • IP address

  • Time zone

  • Cookie data

  • Pages or products viewed

  • Search queries

  • Interaction with the Site

Purpose of collection:
This information allows us to ensure the website loads correctly on your device and helps us analyze website usage in order to improve functionality and user experience.

Source of collection:
Automatically collected when you visit the Site through technologies such as cookies, log files, web beacons, tags, and pixels.

Disclosure for business purposes:
This information may be shared with our e-commerce platform provider Shopify.

Order Information

Examples of information collected:

  • Full name

  • Billing address

  • Shipping address

  • Payment details (including credit card information)

  • Email address

  • Phone number

Purpose of collection:
We collect this information to:

  • Process and complete your orders

  • Handle payments securely

  • Arrange shipping and delivery

  • Provide invoices and order confirmations

  • Communicate with you regarding your purchase

  • Monitor transactions for potential fraud or risk

  • Send relevant updates, promotions, or marketing communications if you have agreed to receive them

Source of collection:
Provided directly by you during checkout or account creation.

Disclosure for business purposes:
Shared with Stripe, which processes and manages our online store transactions.

Customer Support Information

Examples of information collected:

  • Name

  • Contact information

  • Billing or shipping details

  • Payment-related information

  • Any information provided during support requests

Purpose of collection:
To respond to inquiries, resolve issues, and provide customer service.

Source of collection:
Directly provided by you when contacting our support team.

Minors

Our website is not designed for individuals under the age of 16. We do not knowingly collect Personal Information from minors.

If you are a parent or guardian and believe that a child has provided us with personal information, please contact us so we can remove the information from our records.

Sharing Your Personal Information

We may share your Personal Information with trusted service providers who help us operate our business and deliver our services. This includes providers that assist with website hosting, order fulfillment, analytics, and payment processing.

For example:

We may also disclose Personal Information if required to:

  • Comply with legal obligations

  • Respond to lawful requests such as subpoenas or court orders

  • Protect our legal rights or the safety of our users

Behavioural Advertising

We may use your Personal Information to show you advertisements or marketing messages that may be relevant to your interests.

For example:

  • We use Google Analytics to understand how visitors interact with our Site.
    More information about Google’s data practices can be found here:
    https://policies.google.com/privacy

You may opt out of Google Analytics here:
https://tools.google.com/dlpage/gaoptout

We may also share certain information about your browsing behavior, purchases, and interactions with advertisements with our marketing partners. This information may be collected using cookies or similar technologies depending on your consent and location.

To learn more about how targeted advertising works, visit the Network Advertising Initiative:
http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work

How We Use Your Personal Information

We use your Personal Information to provide and improve our services, including:

  • Offering products for sale

  • Processing payments

  • Delivering and fulfilling orders

  • Communicating with customers

  • Informing you about new products, promotions, or updates

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

  • Your consent

  • The performance of a contract between you and ONA

  • Compliance with legal obligations

  • Protection of vital interests

  • Tasks carried out in the public interest

  • Our legitimate business interests, provided these do not override your rights and freedoms

Data Retention

When you place an order on our Site, we keep your Personal Information for our records unless and until you request its deletion.

For more details on how to request deletion, please refer to the Your Rights section below.

Automated Decision-Making

If you reside in the EEA, you have the right to object to decisions based solely on automated processing when those decisions significantly affect you.

ONA does not carry out fully automated decision-making that has legal or significant effects on customers.

However, our service provider Stripe uses limited automated processes to help prevent fraudulent transactions. Examples include:

  • Temporarily blocking IP addresses associated with repeated failed transactions

  • Temporarily blocking credit cards linked to suspicious activity

These measures are short-term and designed only to protect transactions.

Selling Personal Information

Under the California Consumer Privacy Act (CCPA), certain data sharing may be considered a “sale” of personal information.

Residents of California have the right to request:

  • Details about the categories of personal data collected

  • Information about how it is used or shared

  • The ability to request deletion of their data

  • The ability to opt out of certain data sharing practices

Your Rights

GDPR Rights (EEA Residents)

If you are located in the European Economic Area, you have the right to:

  • Access the Personal Information we hold about you

  • Request correction or updates to your data

  • Request deletion of your data

  • Transfer your data to another service provider

To exercise these rights, please contact us using the contact information below.

California Privacy Rights (CCPA)

California residents have the right to:

  • Request access to the Personal Information we hold about them

  • Request corrections or deletion of their data

  • Designate an authorized agent to submit requests on their behalf

To exercise these rights, please contact us using the information provided below.

Cookies

Cookies are small data files stored on your device when you visit our Site. We use several types of cookies, including:

  • Functional cookies

  • Performance cookies

  • Advertising cookies

  • Social media cookies

Cookies improve your browsing experience by remembering your preferences and helping the website operate more efficiently.

They also help us understand how visitors interact with the Site, such as whether it is their first visit or a return visit.

Some cookies remain active only while you browse the Site (session cookies), while others remain stored on your device until they expire or are deleted (persistent cookies). These cookies may remain active from 30 minutes up to two years.

Most web browsers automatically accept cookies, but you can modify your browser settings to block or delete them if you prefer. Please note that disabling cookies may limit certain features of the Site.

More information about managing cookies can be found at:
www.allaboutcookies.org

Do Not Track Signals

Currently, there is no consistent industry standard for responding to “Do Not Track” signals. For this reason, our data collection practices remain unchanged if such a signal is detected from your browser.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. When updates occur, the revised version will be posted on this page.

Contact Us

If you have any questions about this Privacy Policy, our data practices, or if you wish to make a complaint, please contact us:

Email: info@ona.services

Dubai, UAE
United Arab Emirates