Privacy Policy

Ogascounty is a brand of OTESC ("we", "us", "our"). We are the controller of the personal data described in this policy, which means we decide how and why it is used.

For anything about your data, email support@ogascounty.com with "Privacy" in the subject line.

Information you give us

• Account details: your name, email address, password and, if you choose to add it, your phone number. We store your password only as a one-way hash, so nobody at Ogascounty can read it.
• Order details: what you bought, what you paid, your shipping address and your order's status and tracking. Payments are handled by Stripe; your full card number goes to Stripe, never to us.
• Messages: what you send us through the contact form or by email, including your name and email address.
• Newsletter: your email address, if you subscribe.
• AI style assistant and chat: what you type when you use them. Please don't share sensitive personal information there.

Information collected automatically

• A guest shopping identifier: a random ID stored in a cookie and in your browser (or on your phone in the app) so your bag is still there when you come back. It lasts 30 days on the website.
• Technical information: your IP address, browser or device type and the pages or screens you request, recorded in our server logs to keep the service secure and fix problems.

We don't use advertising cookies, tracking pixels or third-party analytics. See our Cookie Policy for the details.

Data protection law in the EU and UK requires us to name a lawful basis for each use. This is what we do with your data and the basis we rely on:

We don't make decisions about you based solely on automated processing that have legal or similarly significant effects.

We don't sell your personal data, and we don't share it for cross-context behavioral advertising. We share it only with the providers who help us run Ogascounty, and only what each one needs:

• Stripe: takes card and other payments at checkout. They receive: name, email, billing details, payment details (we never see full card numbers). Their privacy policy.
• Printify and its print partners: makes and ships your order. They receive: name, shipping address, phone if given, items ordered. Their privacy policy.
• Resend: sends account and order emails. They receive: email address, name, the content of the email. Their privacy policy.
• Mailchimp (Intuit): sends the newsletter, only if you subscribe. They receive: email address, subscription status. Their privacy policy.
• Google (Gemini API): powers the AI style assistant and chat, only when you use them. They receive: what you type into the assistant and the products it looks up. Their privacy policy.
• Hosting and database providers: run our website, app backend and databases. They receive: everything above, stored on our servers.

We may also disclose data when the law requires it, to protect people's safety or our legal rights, or as part of a sale or merger of the business, in which case we will tell you first.

Our providers process data in the United States and other countries whose data protection laws may differ from yours. When data from the EU, EEA or UK is transferred, we rely on the safeguards our providers offer, such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or the EU-US Data Privacy Framework where a provider is certified.

• Your account: until you delete it. Deleting it erases your profile, saved addresses and bag straight away.
• Order and payment records: as long as tax and accounting law requires, which is commonly up to seven years. After you delete your account these records are no longer linked to your profile.
• Guest shopping identifier: 30 days on the website, or until you clear your browser.
• Newsletter: until you unsubscribe.
• Messages to support: as long as we need to resolve your request, and then only as long as is reasonable for follow-ups.
• Server logs: for a limited period needed for security and troubleshooting.

All traffic to our website, app and API is encrypted in transit with TLS. Passwords are stored as bcrypt hashes. Card payments are handled by Stripe, which is certified to PCI DSS Level 1, so card numbers never touch our servers. Access to our systems is limited to people who need it.

No system is perfectly secure. If a breach affects your personal data in a way that puts you at risk, we will tell you and the relevant authorities as the law requires.

If you are in the EU, EEA or UK

You have the right to:

• access the personal data we hold about you and get a copy of it;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to how we use it, including for our legitimate interests;
• receive your data in a portable, machine-readable format;
• withdraw your consent at any time, without affecting what we did before;
• complain to your local data protection authority, or in the UK to the Information Commissioner's Office.

If you are in the United States

Depending on your state, including California under the CCPA as amended by the CPRA, you have the right to know what personal information we collect and why, to access it, to correct it, to delete it, and to opt out of its sale or sharing. We don't sell or share personal information, so there is nothing to opt out of, and we honor Global Privacy Control signals regardless. We will never treat you differently for using your rights. You can use an authorized agent to make a request for you.

How to use your rights

See Your Privacy Rights for how to make a request and how long we take to respond. To delete your account right now, use the app or the account deletion page.

Ogascounty is for people aged 18 and over, as our Terms of Service explain. We don't knowingly collect data from children. If you believe a child has given us personal data, email us and we will delete it.

We will update this page when our practices change and change the date at the top. If a change is significant, we will also let account holders know by email before it takes effect.

OTESC, trading as Ogascounty. Email support@ogascounty.com.