Privacy Policy

This Privacy Policy explains how onalux.shop (“the Site”, “we”, “us”, “our”) collects, uses, and discloses your personal information when you visit the Site or make a purchase from it. By using the Site, you agree to the practices described in this Policy.

Collecting personal information

We collect information about your device, your interactions with the Site, and details necessary to process your orders, as well as any additional information you choose to provide when contacting support. “Personal Information” means any data that can be used to identify you directly or indirectly as an individual.

Device information

  • Examples: browser type, IP address, time zone, cookie data, pages or products viewed, search terms, and how you navigate the Site.

  • Purpose: To display the Site correctly, maintain security, and analyze usage so we can improve performance and user experience.

  • Source: Collected automatically through cookies, log files, web beacons, tags, pixels, or similar technologies.

  • Shared with: E‑commerce, hosting, and analytics providers that help operate and monitor the Site.

Order information

  • Examples: name, billing details, digital delivery information, payment details (processed by third parties), email address, and phone number.

  • Purpose: To provide and deliver digital products, process payments, send order confirmations, communicate about purchases, screen for fraud, and send marketing communications if you have opted in.

  • Source: Provided directly by you during checkout or account actions.

  • Shared with: Payment processors, e‑commerce/checkout providers, and other service partners involved in secure order fulfillment and fraud prevention.

Customer support information

  • Examples: your name, contact details, and any information you include in your messages or support requests.

  • Purpose: To respond to inquiries, troubleshoot issues, and provide ongoing customer support.

  • Source: Provided directly by you when you contact us.

  • Shared with: Internal support staff and, where necessary, trusted service providers that assist with support operations.

Sharing personal information

We share your Personal Information with third‑party service providers who assist with running the Site, processing orders, performing analytics, and supporting our business, and they are only permitted to use the data as needed to perform these services. Personal Information may also be disclosed to comply with applicable laws and regulations, respond to lawful requests (such as subpoenas or court orders), or protect our rights, property, or safety and that of others. Our e‑commerce and hosting providers process your data in line with their own privacy policies and data protection commitments.

Behavioural advertising

We may use your information to deliver or measure more relevant advertising and marketing communications, including through tools such as analytics platforms and advertising partners that rely on cookies or similar technologies to understand browsing and purchase activity. You can typically opt out of interest‑based advertising using industry opt‑out tools (such as NAI or DAA options) or by adjusting your advertising preferences within specific platforms, though you may still see non‑personalized ads.

Using personal information

We use Personal Information to provide and improve our digital products, fulfill and manage orders, communicate with you, deliver marketing communications where permitted, and maintain, secure, and analyze the performance of the Site. Information may also support internal record‑keeping, fraud detection, and compliance with legal obligations.

Lawful basis (GDPR/EEA/UK)

For visitors from the EEA or UK, we process Personal Information under one or more of the following lawful bases: your consent, performance of a contract (for example, when processing your order), compliance with legal obligations, protection of vital interests, performance of a task in the public interest, or our legitimate interests where these do not override your fundamental rights and freedoms. You may withdraw consent at any time where processing is based on consent, without affecting processing that occurred before the withdrawal.

Retention

We keep Personal Information for as long as necessary to fulfill the purposes described in this Policy or as required by law. For example, order information may be retained for accounting, tax, or legal record‑keeping purposes unless you request deletion and such deletion is not restricted by legal or legitimate business requirements.

Automatic decision‑making

We do not rely on fully automated decision‑making that produces legal or similarly significant effects on you. Certain partners may use limited automated tools, such as fraud screening or security checks, and users in the EEA/UK may have the right to object to this type of profiling.

Your rights

GDPR/EEA/UK

If you are located in the EEA or UK, you may have the right to access, correct, update, erase, or restrict the processing of your Personal Information, object to certain processing, and request data portability. You can exercise these rights by contacting us using the details in the “Contact” section below, and note that your data may be processed outside your home country (for example, in the United States or Canada) with appropriate safeguards in place.

California (CCPA)

If you are a California resident, you may have rights to know, access, correct, or delete certain Personal Information, as well as the right to non‑discrimination for exercising those rights and the option to use an authorized agent to submit requests on your behalf. To exercise these rights, please reach out to us using the contact details in this Policy and follow any verification steps we provide.

Cookies

The Site uses cookies and similar technologies for essential functionality (such as keeping items in your cart and enabling checkout), remembering preferences, performing analytics, and supporting advertising. You can manage or disable cookies through your browser settings; session cookies typically expire when you close your browser, while persistent cookies remain until you delete them manually or they reach their set expiry.

Do Not Track

Some browsers offer a “Do Not Track” signal, but there is currently no consistent industry standard for recognizing or responding to these signals. As a result, our Site does not change its data collection practices when it receives a Do Not Track signal.

Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements, and any revisions will be posted on this page with an updated “Last updated” date. You are encouraged to review this Policy periodically so you remain informed about how your Personal Information is handled.

Contact

For questions about this Privacy Policy, to exercise your data rights, or to lodge a complaint, you can contact us using the details below.