Privacy Policy

osoamazing.com is run by Oso Innovative LLC, doing business as Oso Amazing, a small family shop in Texas, USA. We’re responsible for the personal information described here (the “controller”, in European terms).

This policy explains what we collect, why, who helps us handle it, how long we keep it, and the choices and rights you have. It covers our website and our checkout, which is run by Shopify. If it ever conflicts with our Terms of Service about personal information, this policy wins.

Information you give us

• Orders: your name, email, shipping and billing address, phone number (if given) and what you bought. Payments are handled by Shopify — we never see or store your full card number.
• Account: if you create a customer account at checkout, your sign-in details and saved addresses and preferences, managed by Shopify.
• Personalization: the names, text and choices you enter, and any photos you upload for a personalized piece (for example, a photo of your pet).
• Messages: what you write when you email us, or when you choose to send us a chat from our chat helper, along with the name and email you give.
• Marketing sign-ups: your name and email if you join our mailing list, and your mobile number if you agree to receive text messages.
• Chat helper: the messages you type into it (see section 5).

Information collected automatically

• Technical data: like any website, our hosting and security providers receive your IP address, browser and device type when you visit, and keep short-term logs to run and protect the site.
• Upload protection: when you upload a photo, we record a scrambled (hashed) form of your IP address to limit how many uploads can be made per hour. It can’t be turned back into your IP address.
• Your cart: saved in your own browser’s storage so it’s still there when you come back (see section 11).
• Affiliate referrals: we pay influencers and partners who send customers our way, through our affiliate program provider, Referly. On every page, Referly’s script checks in with Referly. If you arrive through a partner’s link, it saves that partner’s referral code in your browser (local storage, or a cookie if that isn’t available) and tells Referly about the visit and when you add something to your cart, so the partner can be credited if you buy.
• Advertising: unless you opt out (section 8), our website uses Meta’s pixel to tell Meta (Facebook and Instagram) which pages and products you view, what you search for and add to your cart, and when you start checkout, along with your IP address and browser details.

Our website doesn’t use analytics trackers. Shopify’s checkout collects information about your checkout, device and shopping activity as it processes your order (see sections 7 and 8).

From Etsy: we also sell on Etsy. We may show reviews you left there on our site, with your first name or as “A customer”.

• To make, personalize, ship and support your order, including remakes and damage claims.
• To reply to your questions and messages.
• To send order and shipping updates.
• To send our newsletter, offers or text messages, only if you’ve signed up — unsubscribe any time.
• To show you ads for our products, as described in section 8.
• To keep the site secure and prevent fraud and abuse.
• To keep the records we’re required to keep, such as for tax and accounting.
• To show reviews, and customer photos only with the customer’s permission.

Where laws such as the GDPR apply, we rely on:

• Contract — to take and fulfil your order and support it.
• Consent — for our mailing list, text messages, personalized advertising where the law requires consent, and featuring your photos; you can withdraw it any time.
• Legitimate interests — to run, secure and improve the site, answer messages, prevent fraud, and show reviews, balanced against your rights.
• Legal obligation — to keep tax and accounting records.

The chat helper on our site uses artificial intelligence. What you type is sent to our AI service providers to produce a reply. We don’t save chat conversations, and our providers are instructed not to store them for their own purposes.

If you choose “send this chat to us”, the conversation, your name and your email are emailed to us so a person can reply, and we keep that email like any other message. Please don’t share sensitive information, such as payment details or health information, in the chat.

We share personal information only with providers who help us run the shop, for those purposes:

• Shopify — checkout, payments and order management.
• Cloudflare — delivering the site securely and storing uploaded photos.
• Lovable — hosting the site and routing chat helper requests.
• AI model providers (such as OpenAI) — generating chat helper replies.
• NoCodeBackend — our database (for example, mailing list signups and site settings).
• Emailit — sending emails from the site to us and to you.
• Referly — running our affiliate program and crediting partners for referrals.
• Google Fonts — the site’s typefaces load from Google, which receives your IP address to deliver them.
• Shipping carriers and customs authorities — delivering your order.
• Meta (Facebook and Instagram), through the pixel on our website and at checkout, and other advertising partners through Shopify’s marketing tools — showing you ads for our products (section 8).
• Etsy — if you also order from us on Etsy, Etsy’s own privacy policy applies there.

We may also share information if required by law, to protect our rights or others’ safety, or as part of selling or reorganizing the business (the buyer would be bound by this policy).

Our checkout, payments and customer accounts are provided by Shopify, which processes your information to run them. Shopify also uses some information about your activity with our store, along with activity with other Shopify merchants, for its own features — such as fraud protection, Shop Pay and the Shop app. For those uses, Shopify is responsible for your information and for handling requests about it.

Learn more in the Shopify Consumer Privacy Policy, and make requests to Shopify through the Shopify Privacy Portal.

We advertise on Facebook and Instagram. Meta’s pixel on our website, and on our checkout, tells Meta what you viewed, searched for, added to your cart and bought, so it can show you ads for our products and measure whether they work. Through Shopify’s marketing tools, your activity with our store may also be used, together with your activity on other stores and websites, to show you personalized ads. Meta and our other advertising partners use this information under their own privacy policies. Some privacy laws, including California’s, treat this as “selling” or “sharing” personal information for targeted advertising. We don’t sell your information for money.

Opting out: on our website, use Your Privacy Choices (the link at the bottom of every page). At checkout, use Shopify’s data sharing opt-out page. You can also email support@osoamazing.com with “Do not sell or share” in the subject.

Global Privacy Control: if your browser sends a Global Privacy Control (GPC) signal, our website doesn’t load Meta’s pixel at all, and Shopify treats it as an opt-out for that browser and device, and for your Shopify account if it can link the two. We don’t respond to other “Do Not Track” signals. Learn more at globalprivacycontrol.org.

We only send marketing text messages if you’ve agreed to receive them, and agreeing is never a condition of buying from us. How often we message varies; message and data rates may apply. Reply STOP to any message to stop them, or HELP for help. We don’t share your mobile number or text-message consent with third parties for their own marketing.

• Uploaded photos: deleted 90 days after your order ships (long enough for remakes and damage claims). Photos uploaded but never used in an order are deleted after 30 days.
• Order records: kept as long as needed for tax, accounting and legal purposes — typically up to seven years.
• Mailing list: until you unsubscribe or ask us to remove you.
• Emails and messages: as long as needed to help you, and then for up to three years.
• Security logs: short-term, as kept by our hosting and security providers.

We keep this simple. Our website uses:

• Your cart, saved in your browser’s local storage.
• Essential cookies — Cloudflare’s bot-protection cookie, which keeps the site safe from automated abuse, and, for shop staff, a sign-in cookie.
• An affiliate referral code, only if you arrive through a partner’s link (see section 2), kept in local storage or a cookie.

Advertising cookies: unless you opt out, Meta’s pixel sets cookies (such as _fbp) to recognise your browser for ads (section 8). Our website doesn’t use analytics cookies.

Shopify’s checkout pages set their own cookies and similar technologies, to process your payment securely, remember your checkout and, where enabled, support the advertising described in section 8. You can clear cookies and storage in your browser at any time, though that will empty your cart.

Depending on where you live, you may have the right to:

• know what personal information we hold about you and get a copy;
• have it corrected or deleted;
• receive it in a portable format;
• object to or restrict how we use it, or withdraw consent you gave;
• opt out of the “sale” or “sharing” of your information for targeted advertising (section 8);
• not be treated differently for using these rights.

These include rights under the GDPR (EU and UK), Canada’s PIPEDA, and US state laws such as California’s CCPA/CPRA. We extend the same rights to every customer, wherever they live.

To use them, email support@osoamazing.com. We’ll confirm it’s you (usually by replying to the email on your order) and respond within 30 days, or sooner where the law requires. An authorized agent may also make a request for you with your written permission.

If we say no. If we decline your request, we’ll explain why. You can appeal by replying to our answer with “Appeal” in the subject; we’ll respond to an appeal within 45 days. If you’re still not satisfied, you can contact your state attorney general or, in the EU or UK, your local data protection authority.

To stop marketing emails, use the unsubscribe link in any of them; to stop texts, reply STOP. We’ll still send messages about orders you’ve placed.

We’re based in the United States, and our providers may process information in the US and other countries. When we transfer personal information from the EU, UK or elsewhere, we rely on safeguards recognized by those laws, such as our providers’ standard contractual clauses.

Our site isn’t aimed at children, and we don’t knowingly collect personal information from anyone under 16. If you think a child has given us personal information, contact us and we’ll delete it.

We use reputable providers, encrypted connections (HTTPS), and limited access to protect your information. No system is perfectly secure, but if a breach affecting you ever happens, we’ll tell you and the authorities as the law requires.

Our site links to other sites, such as Etsy, Shopify and social media. Their own privacy policies apply there, and we aren’t responsible for how they handle your information. Anything you post publicly on social media can be seen by others.

We’ll update this page when our practices change and change the “last updated” date above. If a change is significant, we’ll make it clear on the site or email you where appropriate.

Questions or requests about your privacy:

See also our Terms of Service.