Privacy Policy

Welcome to OIUUWMD. This page explains how we collect, use, and protect your personal information when you shop with us or browse our website. We have written this policy in plain English because we believe privacy is something you should be able to understand without a law degree. If you have any questions, please email us at [email protected].

Who We Are

OIUUWMD is an online store based in Chicago, Illinois. Our business address is 222 W Merchandise Mart Plaza, Suite 1150, Chicago, IL 60654. We sell a variety of general merchandise and ship to customers across the United States and Canada.

Information We Collect

When you shop with us, we need certain information to get your order to your door. Here is what we collect and why:

Name and email address — so we can confirm your order and send you updates about it.
Shipping address — so the carrier can deliver your package to the right place.
Billing address — for verification and tax purposes.
Payment information — we process payments through Stripe, a secure payment processor. We do not see or store your full credit card number on our servers.
Browsing data — such as which product pages you view, how long you stay on our site, and what you add to your cart. This light analytics data helps us understand what customers are looking for.
Cookies — small text files stored on your device that help the site remember your preferences and keep your cart intact between visits. We explain more about cookies below.

How We Use Your Information

We use your data for three main purposes:

Order processing — fulfilling, shipping, and supporting your purchase. This is necessary for us to complete our contract with you.
Customer service — answering your questions, resolving issues, and providing pre-sale help if you reach out to us.
Marketing — sending occasional emails about new products or promotions, but only if you have given us your consent. You can unsubscribe at any time with one click, and we will stop sending them.

We also use aggregated, anonymized analytics to understand general shopping patterns on our site. This helps us improve the layout, product selection, and overall experience. This data cannot be traced back to you personally.

Legal Basis for Processing (GDPR)

For customers in the European Union and European Economic Area, we rely on the following lawful bases under the GDPR:

Contract — to process your order, we must use your name, address, and payment details to fulfill the purchase you made.
Consent — for marketing emails and non-essential cookies, we ask for your explicit permission first. You can withdraw consent at any time.
Legitimate interest — for fraud prevention, website security, and improving our store. We weigh your privacy rights against our business needs and never use more data than necessary.

Third-Party Service Providers

We work with a small number of trusted service providers to run our store. We only share the minimum data needed for them to do their job:

Stripe — handles your payment securely. They have their own privacy policy and comply with PCI-DSS standards.
Shipping carriers — such as USPS, UPS, FedEx, and Canada Post, who receive your name, address, and tracking details to deliver your package.
Email service provider — handles our marketing newsletters, only for customers who have opted in.

We never sell your personal information to anyone. Not to data brokers, not to advertisers, not to any third party. Full stop.

Cross-Border Data Transfers

If you are ordering from outside the United States, your data may be transferred to and stored on servers in the US or other countries. When we transfer data to third parties in different jurisdictions, we rely on appropriate safeguards, including Standard Contractual Clauses where required by GDPR, to ensure your information is protected at the same level as within the EU/EEA.

Data Retention

We do not keep your information forever. Here is our retention schedule:

Order data — we keep records of orders for 7 years to comply with federal and state tax laws. After that, we securely delete or anonymize the data.
Marketing data — we keep your email address on our marketing list only until you unsubscribe. Once you opt out, we remove you from the list within 30 days.
Browsing data and analytics — retained in aggregated form for up to 24 months, after which it is deleted.

Your Rights Under GDPR

If you are located in the EU/EEA, you have specific rights regarding your personal data:

Right to access — ask us for a copy of the personal data we hold about you.
Right to rectification — ask us to correct any inaccurate or incomplete information.
Right to erasure — ask us to delete your personal data, subject to legal obligations that require us to keep certain records.
Right to restriction — ask us to temporarily halt the processing of your data in certain situations, such as a dispute about its accuracy.
Right to data portability — ask us to provide your data in a structured, machine-readable format, or have it transmitted to another controller where technically feasible.
Right to object — object to processing based on legitimate interest or direct marketing, and we will stop unless we have compelling legitimate grounds.

To exercise any of these rights, simply email us at [email protected]. We will respond within 30 days and verify your identity before making any changes. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.

Your Rights Under CCPA

If you are a California resident, the California Consumer Privacy Act gives you these rights:

Right to know — you can request the categories and specific pieces of personal information we have collected about you in the past 12 months.
Right to delete — you can request that we delete your personal information, subject to certain exceptions under the law.
Right to opt-out of sale — we do not sell your personal information, so there is nothing to opt out of. But if that ever changes, we will update this policy and provide a clear opt-out mechanism.
Right to non-discrimination — we will never charge you a different price, deny service, or treat you differently because you exercise your privacy rights.

To submit a request under the CCPA, email us at [email protected]. We will verify your identity and respond within 45 days. You can also designate an authorized agent to make a request on your behalf.

Because we do not sell your personal information, we do not maintain a “Do Not Sell My Personal Information” link on our site. However, you can contact us at any time with questions about this.

Cookie Policy

Our website uses cookies to make your shopping experience smoother. Here is what we use and why:

Essential cookies — required for the site to function, such as keeping your shopping cart items logged and maintaining your session while you browse. These do not require consent.
Analytics cookies — help us understand how visitors use our site, so we can improve navigation and product placement. These are set only after you accept our cookie banner.
Preference cookies — remember choices you make, such as currency or language, so you do not have to set them on every visit.

When you first arrive at our website, you will see a cookie consent banner at the bottom. It gives you a clear choice to accept or decline non-essential cookies. You can change your cookie preferences at any time in your browser settings, or by clearing your browser cache, which will reset the prompt on your next visit.

Children’s Privacy

OIUUWMD is a general-merchandise store for adults. We do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us with their personal data, please contact us at [email protected], and we will delete it as quickly as possible.

Data Security

We take the security of your information seriously. We use the following measures to protect it:

SSL encryption — all data transmitted between your browser and our website is encrypted using Secure Socket Layer technology.
Access controls — only the small number of team members who need your data to fulfill orders or provide support have access to it. Everyone is required to use strong authentication.
Regular audits — we periodically review our security practices, payment systems, and data-handling procedures to make sure everything is up to date.

While we work hard to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we do everything in our power to keep your information safe.

Policy Updates

We reserve the right to update this privacy policy as our business evolves or as legal requirements change. When we make changes, we will post the updated policy on this page and update the “Last Updated” date at the top. If the changes are significant, we will also contact you by email or display a prominent notice on our website before they take effect. We encourage you to review this page occasionally to stay informed about how we handle your information.

Contact Us

If you have any questions, concerns, or requests about your privacy, or if you would like to speak with someone about data protection matters, please reach out to us:

Email: [email protected]

Address: 222 W Merchandise Mart Plaza, Suite 1150, Chicago, IL 60654

We are happy to answer questions about how your data is handled, what we store, or how you can exercise your rights. We typically respond to all inquiries within one business day.

Thank you for taking the time to read our privacy policy. We appreciate your trust and look forward to serving you at OIUUWMD.