Privacy policy

This storefront is operated by [registered company name] ("ONYE", "we", "us"). We are the data controller for the personal information described in this policy. For any privacy question, reach us at [privacy@yourdomain.com].

We collect information you give us directly — your name, contact and delivery details, account login, order history, and any artwork, text or specifications you supply for custom work.

We also collect some information automatically as you use the site, such as your device and browser type, pages viewed, and cookie identifiers (see cookies below). We do not store full card numbers — payments are handled by our payment providers.

We use your information to process and fabricate your orders, manage your account, provide support, prevent fraud, meet our legal obligations, and improve the storefront.

With your consent, we may send marketing about new pieces and offers; you can opt out at any time using the link in each message or by contacting us.

We use cookies and similar technologies to keep your cart and session working, remember your preferences, and understand how the site is used. Essential cookies are always on; analytics and marketing cookies are used only where permitted.

You can manage cookies through your browser settings and, where shown, our cookie banner. Replace this section with your actual cookie list and consent tool before publishing.

We share personal information only with service providers who help us run the business — such as payment processors, delivery carriers, hosting and analytics providers — and only as needed to provide the service. They are bound to protect your information and use it only on our instructions.

We may also disclose information where required by law, or to protect our rights, and in connection with a business sale or reorganisation. We do not sell your personal information.

Payments are processed by our third-party payment providers over encrypted connections; we receive confirmation of payment, not your full card details.

We apply appropriate technical and organisational measures to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect it and to respond promptly to any incident.

We keep personal information only for as long as needed for the purposes above — for example, to fulfil your order, support your account, and meet accounting and legal requirements — after which we delete or anonymise it. Specify your actual retention periods here before publishing.

Depending on where you live, you may have the right to access, correct, delete or port your personal information, to object to or restrict certain processing, and to withdraw consent. You can also opt out of marketing at any time.

To exercise any of these, contact us at [privacy@yourdomain.com]. We will respond within the time the law allows and may need to verify your identity first.

Some of our providers may process information in other countries. Where we transfer personal information across borders, we rely on appropriate safeguards, such as standard contractual clauses, to keep it protected. Name the relevant safeguards and regions here before publishing.

The storefront is intended for adults. We do not knowingly collect personal information from children under [age]. If you believe a child has provided us information, contact us and we will delete it.

We may update this policy from time to time. The current version is the one published here, shown by the "last updated" date above. We will post material changes on this page and, where appropriate, notify you.

Questions or requests about your privacy? Email [privacy@yourdomain.com] or write to [registered company name, registered address].

If you are not satisfied with our response, you may have the right to complain to your local data protection authority ([data protection authority]).