Privacy policy

Dear friend of Oolie:

As a clinical psychologist, I am acutely sensitive to matters of privacy, confidentiality, and careful handling of sensitive information. In my therapy practice, I am accustomed to maintaining the highest standards of confidentiality, and I take the right to privacy very seriously.

I built Oolie with that same concern for privacy. We exceed minimum requirements because we value your privacy, and we value your trust.

Oolie will never sell or share your information with anyone else. We use your information only to communicate with you, to field your requests, and to process your orders. If you’ve joined our newsletter list, you can remove yourself from it at any time.

That said, we do rely on some third-party services to help collect, manage, and interact with limited amounts of data on Oolie’s behalf. In GDPR terms, these services are considered “data processors.”

The data processors act at Oolie’s direction and are not allowed to share your information with any other parties. In GDPR terms, Oolie is the “data controller” and we ultimately bear responsibility for ensuring your information is treated with care and used only for the intended purposes.

Below you will find our formal privacy policy, which includes a list of our data processors and how we use their services.

Sincerely,
Nora Murray, Founder & CEO

 

Oolie Inc Privacy Policy

Last updated: October 12, 2023

This Privacy Policy describes how Oolie (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from oolie.com (the "Site") or otherwise communicate with us (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the Services.

Personal information we collect

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”

We collect Device Information using the following technologies:

  • “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit allaboutcookies.org.
  • “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
  • “Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.

Additionally, when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number.  We refer to this information as “Order Information.”

When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information.

How do we use your personal information?

We use the Order Information that we collect generally to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations).  Additionally, we use this Order Information to:

  • Communicate with you;
  • Screen our orders for potential risk or fraud; and
  • When in line with the preferences you have shared with us, provide you with information relating to our products or services.

We use the Device Information that we collect to help us screen for potential risk and fraud, and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing campaigns).

Sharing your personal information

As a rule, we never sell or share your information with anyone else.

However, we do rely on some third-party services to help collect, manage, and interact with limited amounts of data on Oolie’s behalf. In GDPR terms, these services are considered “data processors.”

We vet data processors carefully to ensure that:

  • they do not share any of your (or Oolie’s) data;
  • they are contractually obligated to maintain confidentiality;
  • they implement best practices for information access, security, and integrity (such as end-to-end encryption and multi-factor authentication);
  • and they operate in locales bound by data privacy laws that are consistent with these requirements.

Here is a list of Oolie’s third-party data processors, and a summary of what information may be handled by each service on Oolie’s behalf.

  • Shopify — records basic analytics about website visitors, as well as personal information for customers placing orders or contact requests
  • Consentmo — requests cookie consent preferences from website visitors (in applicable locales, such as Europe and parts of the US), records those preferences, and blocks any additional services (such as those listed below this point) if needed, in accordance with those preferences
  • Metricool — records basic analytics about website visitors
  • Google Analytics — records analytics about website visitors
  • Klaviyo — records detailed analytics about website visitors, as well as storing personal information for our email communications and sending those email communications to customers
  • OpenPhone — used to send and receive phone calls and text messages, which requires handling customer telephone numbers and communications
  • Tally — used to create interactive forms, which may temporarily record customer-submitted personal information, such as names and email addresses
  • Make — integration service which receives some customer-submitted information, such as from Tally forms
  • PDF Monkey — used to generate personalized PDFs after receiving customer-submitted information from Make

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights. (To date, we have never had to share personal information in such a scenario, but it is important to acknowledge the possibility.)

Do Not Track

If our Site receives a Do Not Track signal from your browser, some cookies and related tracking services may be suppressed, including even the cookie consent notification. However, due to differences in browser implementations, we cannot guarantee that a Do Not Track signal will block such services in 100% of cases.

Data Retention

When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.

Changes

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

Related

Contact Us

We invite you to contact us for more information about our privacy practices, to ask any questions, or to make a complaint.