Privacy Policy

This Privacy Policy explains how Only NY (“Only NY,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes personal information when you visit onlyny.live, purchase our products, create or use an account, communicate with us, or otherwise interact with our website and related services (collectively, the “Services”).

Please read this Privacy Policy carefully. Depending on where you live, you may have rights and choices concerning your personal information. This Privacy Policy does not apply to websites or services that we do not own or control.

We may update this Privacy Policy from time to time to reflect changes to our practices, technologies, Services, or legal obligations. When we make changes, we will post the revised policy and update the “Last updated” date. We will provide any additional notice required by applicable law.

The information we collect depends on how you interact with us and the Services.

• Contact information, such as your name, email address, telephone number, billing address, and shipping address.
• Order and transaction information, such as products purchased, order value, delivery details, returns, exchanges, and payment confirmation. Payment card information is handled by Shopify and other payment processors.
• Account information, such as login credentials and account preferences.
• Marketing preferences, including email or SMS subscription choices.
• Customer-service information and any other information you include when you contact us, submit a form, enter a promotion, or communicate with us.

When you use the Services, we and our service providers may automatically collect information through cookies, pixels, software development kits, browser storage, web beacons, and similar technologies. This information may include:

• The pages and products you view, links you click, searches you perform, and how you move through the Services.
• Cart, checkout, purchase, return, and other shopping activity.
• Your IP address and approximate location derived from it.
• Browser type, device type, operating system, screen information, language, and similar device details.
• Cookie identifiers, advertising identifiers, and other online identifiers.
• The website, advertisement, or campaign that referred you to us.
• The date and time of your visit and information about interactions with our emails or advertisements.

We may receive information from Shopify, payment processors, shipping and fulfillment providers, advertising and analytics partners, social media platforms, email and SMS providers, fraud-prevention services, and other service providers. We may combine this information with information collected through the Services.

We may use personal information to:

• Provide, operate, maintain, and improve the Services.
• Process orders, payments, shipping, returns, and exchanges.
• Create and manage customer accounts.
• Respond to questions and provide customer support.
• Send transactional communications, such as order and delivery updates.
• Send marketing communications where permitted and manage subscription preferences.
• Measure website and advertising performance, understand how visitors use the Services, and improve customer experience.
• Personalize content, product recommendations, and advertising.
• Build or use advertising audiences and measure whether advertisements lead to visits or purchases.
• Detect, investigate, and prevent fraud, misuse, security incidents, and other harmful activity.
• Comply with law, enforce our agreements, and establish, exercise, or defend legal claims.

We use service providers and third-party technologies to operate the store, communicate with customers, understand use of the Services, and measure or deliver advertising. The providers currently identified include the following:

Shopify provides our ecommerce platform, checkout, customer account, analytics, privacy, and related store services. Shopify may process browsing, device, customer, order, and transaction information to provide these services. Where enabled, Shopify Network Intelligence may also use certain activity to support enhanced services, subject to applicable privacy choices and settings.

We use Meta technologies, including the Meta Pixel and server-side conversion tools, to measure visits and shopping activity, attribute sales, improve advertising, and create or use advertising audiences. Meta may receive page addresses, browser and device information, online identifiers, interaction or purchase events, and matching information associated with eligible events.

We use Google Analytics to understand website traffic, interactions, and ecommerce performance. Google may receive page addresses, browser and device information, online identifiers, approximate location, session activity, and shopping events.

We use Google Ads technologies to measure advertising conversions, attribute visits or purchases to advertising, optimize campaigns, and support audience-based advertising. Depending on configuration and your choices, Google may receive advertising or browser identifiers, ad-click information, page and shopping activity, conversion events, and hashed customer information used for enhanced conversion measurement.

We use Klaviyo for email and SMS communications, signup forms, customer profiles, segmentation, personalization, automation, and marketing measurement. Klaviyo may process contact details, subscription status, page and product activity, online identifiers, cart or purchase information, and information synchronized from Shopify.

We use Simprosys for Google Shopping, product-feed, and related advertising functions. Simprosys technologies may process page or product details, storefront events, device or browser information, and online identifiers. The precise information depends on the features and pixels in use.

We also use providers that support cross-border shopping, returns, preorders, landing pages, website design, fulfillment, shipping, payments, customer service, and related business functions. These providers may include Global-e, Loop, PreOrder Globo, Shogun, GemPages, Shopify payment services, carriers, and other vendors appropriate to the transaction or service you request.

Our providers may change as our business and Services evolve. We review the technologies in use and update this Policy when appropriate.

Cookies and similar technologies help us keep the Services working, remember preferences, understand site use, measure performance, prevent fraud, and support marketing and advertising. Some technologies are necessary for the Services to function. Others are used for analytics, personalization, or advertising.

Where required, we provide controls that allow you to accept, decline, or manage non-essential technologies. You can also adjust your browser settings to block or delete cookies, although doing so may affect some features of the Services.

A browser’s “Do Not Track” setting is different from Global Privacy Control. Because there is no uniform standard for Do Not Track, we do not respond to that signal except where required by law. Our treatment of Global Privacy Control is described below.

We may disclose identifiers, internet or other electronic activity, commercial information, and inferences to advertising and analytics partners, including Meta and Google, to measure advertising, personalize content or advertisements, create audiences, and understand activity across websites or services.

Depending on the law that applies where you live, some of these disclosures may be considered a “sale” or “sharing” of personal information or the processing of personal information for targeted advertising, even when no money is exchanged.

Where required, you may opt out by selecting the “Your privacy choices” link on our website. Your choice will apply as required by applicable law and subject to the information reasonably available to identify your browser or device.

Global Privacy Control (“GPC”) is a browser or device signal that can communicate a request to opt out of the sale or sharing of personal information or the use of personal information for targeted advertising. Where we recognize a GPC signal and applicable law requires us to honor it, we treat the signal as an opt-out request for the browser or device sending the signal.

If you use more than one browser or device, you may need to send the signal or submit a request from each one. If you are logged into an account, we may apply the choice more broadly when required and when we can reasonably associate the signal with your account.

We may disclose personal information to:

• Shopify and other providers that operate, host, secure, analyze, or support the Services.
• Payment processors, fulfillment providers, carriers, cross-border commerce providers, and return-management providers.
• Marketing, advertising, analytics, email, SMS, and social media partners.
• Professional advisers, auditors, insurers, and other parties that assist with legal, compliance, and business matters.
• Government authorities or other parties when required by law or reasonably necessary to protect rights, safety, and security.
• A buyer, investor, lender, or successor in connection with a merger, financing, reorganization, sale of assets, or similar business transaction.
• Other parties when you direct us to disclose information or provide consent.

You may unsubscribe from marketing emails by using the unsubscribe link in the message. You may opt out of marketing text messages by following the instructions in the message. We may continue to send non-promotional communications, such as order and account notices.

Where available, use the cookie banner or preference controls to manage non-essential technologies. You may also use browser controls to block or delete cookies.

Where applicable, use the “Your privacy choices” link to opt out. You may also use a supported GPC signal as described above.

Depending on where you live and subject to applicable exceptions, you may have the right to:

• Know or access the personal information we process about you.
• Request deletion or correction of personal information.
• Receive a portable copy of certain personal information.
• Opt out of sale, sharing, targeted advertising, or certain profiling.
• Limit certain uses or disclosures of sensitive personal information.
• Withdraw consent where processing is based on consent.
• Appeal a decision concerning a privacy request.
• Not receive discriminatory treatment for exercising a privacy right.

You may exercise available rights through the methods provided on our website or by emailing info@onlyny.live. We may take reasonable steps to verify your request. Where permitted, an authorized agent may submit a request on your behalf, but we may require proof of authorization and verification of your identity.

The categories of personal information we may have collected include identifiers; customer records; commercial information; internet or other electronic network activity; approximate geolocation; and inferences drawn from shopping or interaction activity.

We collect these categories from you, your browser or device, Shopify, service providers, advertising and analytics partners, social media platforms, and other sources described above. We use them for the business and commercial purposes described in this Policy.

We may disclose these categories to service providers, contractors, payment and fulfillment providers, analytics providers, advertising and marketing partners, professional advisers, government authorities, and transaction counterparties. We do not knowingly sell or share the personal information of individuals under 16 years of age.

We do not use or disclose sensitive personal information to infer characteristics about you. Payment information and account credentials are processed as necessary to provide and secure the Services.

Residents of certain states may exercise the rights described above. The availability and scope of each right depends on applicable law.

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, maintain accounts, complete transactions, comply with legal and accounting obligations, resolve disputes, prevent fraud, and enforce agreements. Retention periods vary depending on the type of information, why it was collected, and applicable legal requirements.

When personal information is no longer needed, we may delete, de-identify, or aggregate it, unless continued retention is required or permitted by law. Our service providers may maintain information according to their own retention schedules and our agreements with them.

We use reasonable administrative, technical, and organizational measures designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us so we can review and address the request.

We and our service providers may process personal information in the United States and other countries. Where required, we use appropriate safeguards for international transfers.

The Services may link to websites or services operated by third parties. Their privacy practices are governed by their own policies, and we are not responsible for websites or services we do not control.

If you have questions about this Privacy Policy or would like to exercise a privacy right, contact us at:

Only NY
Email: info@onlyny.live