OddDrop Inc. (“OddDrop,” “we,” “us,” or “our”) operates odddrop.com. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit odddrop.com, place an order, create an account, contact us, submit a review, join our marketing list, or otherwise interact with us (collectively, the “Services”).
For purposes of applicable data protection law, OddDrop Inc. is the controller of personal information described in this Policy, except where another party is identified as an independent controller.
1. Personal Information We Collect
Depending on how you use the Services, we may collect the following categories of personal information:
- Contact and account information, such as your name, email address, telephone number, billing and delivery addresses, account login details, and communication preferences.
- Order and commercial information, such as products viewed, cart contents, purchases, returns, refunds, discounts, gift information, order status, and customer-service history.
- Payment and transaction information. Payments are processed by Shopify and the payment method you select, which may include card networks, PayPal, Shop Pay, Apple Pay, or other payment providers displayed at checkout. We generally receive transaction confirmations and limited payment details, such as payment method, billing address, and the last digits of a card. We do not store complete payment-card numbers.
- Device and online activity information, such as IP address, browser and device type, operating system, language, referring pages, pages viewed, searches, clicks, cart activity, session information, cookie or similar identifiers, and approximate location derived from IP address.
- Communications and submitted content, such as messages sent to customer support, survey responses, reviews, ratings, photographs, and other content you choose to provide.
- Fraud, security, and compliance information, such as risk signals, suspected fraudulent activity, chargeback information, and records needed to comply with tax, accounting, sanctions, and other legal obligations.
- Preferences and inferences, such as likely product interests inferred from browsing, cart, purchase, or marketing interactions.
If you provide personal information about another person—for example, when sending a gift—you must have authority to provide that information and should direct that person to this Policy.
2. How We Collect Personal Information
We collect personal information:
- Directly from you, including at checkout, through forms, account registration, support requests, reviews, returns, and marketing sign-ups.
- Automatically, through cookies, pixels, local storage, server logs, and similar technologies when you use the Services.
- From service providers and business partners, including Shopify, payment providers, fraud-prevention providers, fulfillment partners, carriers, customer-support tools, review platforms such as Judge.me, and analytics or advertising partners when enabled.
- From publicly available or lawfully obtained sources, where permitted by law.
3. How and Why We Use Personal Information
| Purpose | Examples | EEA/UK legal basis, where applicable |
|---|---|---|
| Provide the Services and fulfill orders | Process payment, confirm orders, arrange fulfillment and delivery, provide tracking, manage returns and refunds, and maintain accounts. | Performance of a contract; steps requested before entering a contract. |
| Customer support and communications | Respond to questions, resolve complaints, send service messages, and communicate about orders or policy changes. | Performance of a contract; legitimate interests in providing effective support and administering our business. |
| Security, fraud prevention, and payment integrity | Authenticate transactions, detect abuse, prevent chargebacks and fraud, enforce our terms, and protect customers and the Services. | Legitimate interests in protecting our customers and business; legal obligation where applicable. |
| Operate, analyze, and improve the Services | Understand site performance, troubleshoot, conduct analytics, improve navigation and product offerings, and develop features. | Legitimate interests in operating and improving our business; consent where required for non-essential cookies or similar technologies. |
| Marketing and advertising | Send requested marketing messages, measure campaigns, personalize content, and show advertising, subject to your choices. | Consent where required; otherwise legitimate interests, subject to your right to object. |
| Legal, tax, and regulatory compliance | Maintain business records, respond to lawful requests, protect legal rights, conduct recalls, and comply with applicable law. | Legal obligation; legitimate interests in establishing, exercising, or defending legal claims. |
Where we rely on legitimate interests, we consider the nature of the information, the expected impact on you, and whether our interests can be achieved in a less intrusive way. You may object to certain processing as described below.
4. Cookies and Similar Technologies
We and our providers may use:
- Strictly necessary technologies to operate checkout, keep the site secure, remember your cart, and provide requested features.
- Preference technologies to remember settings and improve convenience.
- Analytics technologies to understand use and performance.
- Advertising technologies to measure campaigns and, where permitted, personalize advertising across services.
Where required by law, we ask for consent before using non-essential cookies or similar technologies. You may change your choices through the cookie settings link displayed on the site. Browser controls can also block or delete cookies, but doing so may affect site functionality.
5. Marketing Communications
You can unsubscribe from promotional email by using the unsubscribe link in the message. We may still send non-promotional communications, such as order, security, support, return, or policy notices. Where required, we obtain consent before sending electronic marketing.
6. How We Disclose Personal Information
We may disclose personal information to:
- Commerce and hosting providers, including Shopify, which hosts the store and supports checkout, accounts, storefront functions, and related services.
- Payment and financial-service providers that authorize payments, manage wallets, detect fraud, process refunds, or handle disputes and chargebacks.
- Fulfillment, warehouse, and delivery providers that pack, ship, track, deliver, or return orders.
- Operational service providers supporting customer service, email delivery, cloud hosting, security, fraud prevention, analytics, and product reviews, including Judge.me where enabled.
- Advertising and analytics partners, subject to applicable consent and opt-out rights.
- Professional advisers, authorities, and other parties when reasonably necessary to comply with law, protect rights and safety, prevent fraud, or establish or defend legal claims.
- Parties to a business transaction, such as a merger, financing, reorganization, sale of assets, or insolvency, subject to appropriate safeguards.
- Other parties at your direction or with your consent.
Service providers are permitted to process personal information only for the services they provide to us and under appropriate contractual restrictions, except where they act as independent controllers under applicable law.
7. Targeted Advertising, Sale, and Sharing
We do not sell personal information for money. However, some privacy laws use “sale,” “sharing,” or “targeted advertising” broadly. Depending on the tools enabled on our store, making identifiers and online activity available to advertising or analytics partners for cross-context behavioral advertising may be treated as a sale or sharing under those laws.
Where applicable, you may opt out by visiting Your Privacy Choices and using the control provided there. We also process recognized browser-based opt-out preference signals, including Global Privacy Control, where required by law. Your choice may apply only to the browser and device you use unless you are signed in and applicable law requires broader treatment.
In the preceding 12 months, depending on store configuration, we may have disclosed identifiers and internet or other electronic network activity to advertising and analytics partners in a manner that certain US state laws define as “sharing” or “sale.” We do not knowingly sell or share the personal information of individuals under 16.
8. International Transfers
OddDrop, Shopify, and other providers may process personal information in countries other than the country where you live. Those countries may have different data protection laws. Where required, we use recognized safeguards for restricted transfers, such as adequacy decisions, approved contractual clauses, or other lawful transfer mechanisms. You may contact us for more information about the safeguards relevant to your information.
9. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, maintain transaction and warranty records, meet tax and accounting obligations, prevent fraud, resolve disputes, enforce agreements, and establish or defend legal claims. Retention depends on the type and sensitivity of the information, the relationship with you, legal requirements, and security needs. When information is no longer needed, we delete, anonymize, or securely isolate it as required.
10. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No system or transmission method is completely secure, and we cannot guarantee absolute security. You are responsible for keeping account credentials confidential and should contact us promptly if you suspect unauthorized account activity.
11. Your Privacy Rights
Depending on where you live, you may have the right to request access to, correction of, deletion of, or a portable copy of your personal information. You may also have the right to restrict or object to processing, withdraw consent, opt out of targeted advertising or the sale or sharing of personal information, limit certain uses of sensitive personal information, and appeal our refusal of a request. You will not be discriminated against for exercising a privacy right.
To exercise a right, email service@odddrop.com with the subject line “Privacy Request.” For sale, sharing, or targeted-advertising opt-outs, use Your Privacy Choices.
We may need to verify your identity and request details reasonably necessary to process a request. If an authorized agent submits a request, we may require proof of authorization and may verify your identity directly, where permitted. We respond within the time required by applicable law. If we deny an appealable request, our response will explain how to appeal.
Additional EEA and UK Rights
If EEA or UK data protection law applies, you may complain to the data protection authority where you live or work, or where you believe an infringement occurred. Withdrawing consent does not affect the lawfulness of processing before withdrawal.
California Notice at Collection
The categories described in Section 1 include identifiers; customer records; commercial information; internet or other electronic network activity; approximate geolocation; audio, electronic, or visual information you submit; inferences; and limited sensitive personal information such as account login credentials and payment information processed by payment providers. We collect, use, retain, and disclose these categories for the purposes in Sections 3 and 6. We do not use or disclose sensitive personal information to infer characteristics about you beyond purposes permitted without a right to limit under California law.
12. Children’s Privacy
The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us so we can take appropriate action. You must be legally capable of entering a binding contract to make a purchase, or use the Services with the involvement of a parent or legal guardian.
13. Third-Party Sites and Services
The Services may link to third-party websites, social networks, apps, or payment services. Their privacy practices are governed by their own notices, not this Policy. We encourage you to review those notices before providing information.
14. Changes to This Policy
We may update this Policy to reflect changes in our practices, technology, services, or legal obligations. We will post the updated version with a revised effective date and provide additional notice where required.
15. Contact Us
For privacy questions, requests, or complaints, contact:
OddDrop Inc.
Email: service@odddrop.com