Privacy Policy

Data controller: Ontiqua LLC, operator of the Ontiqua brand and ontiqua.co, based in the United States.

Privacy requests and questions: hello@ontiqua.co. We verify identity before access, correction, or deletion.

Ontiqua LLC — email hello@ontiqua.co for our current U.S. mailing address on file.

Identifiers: name, email address, shipping address, phone number if you provide it, order numbers, and IP address.

Commercial information: products viewed or purchased, order history, cart contents, and amounts paid.

Internet or network activity: pages viewed, referring URLs, device/browser type, and coarse interaction signals when privacy-oriented analytics is enabled.

Inferences: we do not create profiles for targeted advertising. Limited fraud-prevention signals may be processed by our payment provider.

We do not intentionally collect government ID numbers, precise geolocation, or financial account numbers on our servers — payment credentials are handled by our payment processor.

Directly from you: forms, checkout, email, and returns correspondence.

Automatically: server logs, security tooling, and analytics when enabled.

From service providers: shipping status, payment authorization results, and fulfillment confirmations from partners that help us complete your order.

Provide the site, process orders, arrange production and delivery, send transactional email, and provide customer support.

Send marketing email only when you opt in (newsletter). You may opt out at any time.

Secure the site, prevent abuse, enforce rate limits, and investigate fraud or chargebacks.

Comply with law, tax, and accounting obligations and respond to lawful requests.

Improve the site using aggregated or de-identified analytics — not to profile you for ads.

Where the GDPR or UK GDPR applies, we rely on: (1) contract — to fulfill orders you place; (2) consent — for marketing email; (3) legitimate interests — site security, fraud prevention, and aggregated analytics, balanced against your rights; (4) legal obligation — tax and record-keeping.

You may withdraw consent for marketing by unsubscribing. Withdrawal does not affect prior lawful processing.

You may lodge a complaint with your local data protection authority. We encourage you to contact us first so we can address your concern.

We disclose personal information only as needed to run Ontiqua, under contracts that limit use to providing services to us:

Payment processing (e.g., Stripe) — payment authorization, fraud screening; see Stripe’s privacy policy for card data handling.

Email (e.g., Resend) — newsletter audiences and transactional messages when configured.

Fulfillment (e.g., Printful) — production, packing, and shipping to your address.

Hosting (e.g., Vercel) — serving the site and storing limited order archives.

Analytics (Plausible, when enabled) — privacy-oriented site measurement without ad-tech tracking.

We do not sell personal information. We do not disclose email lists to data brokers.

Essential cookies and storage: checkout, session continuity, and security.

Analytics (when enabled): Plausible measures visits without cross-site ad tracking.

Your browser may offer controls to block cookies. Blocking all cookies may break checkout.

We do not respond to “Do Not Track” browser signals in a uniform way because industry standards are inconsistent; we limit tracking as described above regardless.

Marketing contacts: until you unsubscribe or request deletion, plus short backup cycles.

Orders: retained as needed for support, warranty, chargebacks, and tax law (often several years).

Logs and security records: limited retention unless needed for an investigation.

We use encryption in transit (HTTPS), access controls, and reputable infrastructure partners. No online system is perfectly secure.

If we learn of a breach of personal information that triggers notice obligations, we will notify affected individuals and regulators as required by applicable law.

We collect and use the categories of personal information listed above for the business and commercial purposes described in this policy: providing goods and services, processing payments, shipping, customer service, security, marketing with consent, analytics, and legal compliance.

We disclose identifiers, commercial information, and internet activity to the service provider categories listed above. We do not sell personal information or share it for cross-context behavioral advertising.

We do not make decisions based solely on automated processing that produce legal or similarly significant effects about you. Payment providers may use automated fraud checks under their own policies.

Depending on your state, you may have the right to know what we collect, access, correct, delete, or obtain a portable copy of certain personal information, and to opt out of sale, sharing for targeted advertising, or certain profiling. We do not sell or share personal information for cross-context behavioral advertising. To exercise rights, email hello@ontiqua.co with “Privacy Request” in the subject line.

We will respond within 45 days of verifying your request, unless law allows an extension. We will not discriminate against you for exercising privacy rights.

You may use an authorized agent where your state allows it; we may require proof of authorization and direct verification from you.

California residents: see the Categories and Disclosures sections above. We do not sell personal information. California Civil Code § 1798.83 (Shine the Light): we do not share personal information with third parties for their direct marketing in a way that triggers that statute’s disclosure right.

Nevada residents: we do not sell covered information as defined under Nevada law. You may submit a sale opt-out request to the email above; we will honor applicable requests.

Colorado, Connecticut, Virginia, Utah, and other states with consumer privacy laws: rights described above apply as required in your state. Appeal instructions: reply to our decision email with “Appeal” and we will review.

Where GDPR applies, you may request access, rectification, erasure, restriction, portability, or object to processing based on legitimate interests. Contact us at the email above.

For marketing, use the unsubscribe link in any message. You may complain to your supervisory authority.

We include our identity and a working unsubscribe link in commercial email. Opt-out requests are honored promptly. Transactional messages about an order you placed may continue as needed.

The site is not directed to children under 16. We do not knowingly collect personal information from children. Contact us to request deletion if you believe a child provided data.

We process data in the United States and where our providers operate. If you access the site from outside the U.S., you understand that your information may be transferred to jurisdictions that may not provide the same level of data protection as your home country, subject to appropriate safeguards where required by law.

Shipping is described on our Shipping page; we currently focus on U.S. delivery.

We do not offer price or service differences in exchange for personal information beyond ordinary newsletter signup or purchase benefits that are reasonably related to the value of the data.

Links to social or partner sites are governed by their own policies. Review those policies before providing information.

We may update this policy for legal, technical, or business reasons. Material changes will be reflected in the date above and, when appropriate, on the site or by email to subscribers.

Privacy: hello@ontiqua.co · Ontiqua LLC · ontiqua.co