Privacy policy

Last updated: September 6, 2026

Opal & Oak operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Opal & Oak is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use or make a purchase or other transaction using the Services, subscribe to our marketing communications, or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use and disclosure of your information as described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified so that it cannot identify or reasonably be linked to you.

We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

Contact details, including your name, billing address, shipping address, phone number and email address.
Financial and payment information, including payment card information, transaction details, form of payment and payment confirmation. Payment information may be processed by Shopify and other authorized payment providers on our behalf.
Account information, including account login details, preferences and settings, where you choose to create or use an account.
Transaction information, including the items you view, add to your cart or purchase and information relating to past transactions, returns, exchanges or cancellations, where applicable.
Marketing preferences, including your preferences regarding promotional emails and other marketing communications.
Communications with us, including information you provide when contacting us with a customer-service, privacy or other inquiry.
Device information, including information about your device, browser or network connection, your IP address and other identifiers.
Usage information, including information about how and when you interact with or navigate the Services.

Personal Information Sources

We may collect personal information from the following sources:

Directly from you, including when you create an account, make a purchase, sign up for marketing communications, visit or use the Services, contact us or otherwise provide us with your personal information.
Automatically through the Services, including from your device when you use the Services or visit our website and through the use of cookies, pixels and similar technologies.
From Shopify and our service providers, including providers that help us operate the website, process payments, fulfil orders, provide email and marketing communications, perform analytics, support advertising, provide customer support or otherwise operate our business.
From our business, marketing and advertising partners or other third parties, where permitted by applicable law.

How We Use Your Personal Information

Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:

Provide, Tailor and Improve the Services. We use your personal information to provide the Services, including to perform our contract with you, process payments, fulfil orders, remember your preferences and items you are interested in, send notifications relating to your account or purchases, manage your account, arrange shipping, facilitate returns or exchanges where applicable, provide website functionality and create a more relevant shopping experience. We may also use this information to understand and improve the performance of the Services.
Marketing and Advertising. We may use your personal information to send you marketing, promotional and product communications by email and through other channels where you have consented or where otherwise permitted by law. We may also use information about your interaction with the Services to measure marketing effectiveness and, where permitted, show you advertising that may be relevant to you on our Services or on third-party websites and platforms.
Security and Fraud Prevention. We use personal information to provide a secure payment and shopping experience, authenticate accounts where applicable, detect, investigate and take action regarding possible fraudulent, illegal, unsafe or malicious activity, protect public safety and secure the Services.
Communicating with You. We use your personal information to provide customer support, respond to requests and inquiries, provide information about orders or accounts and maintain our business relationship with you.
Legal and Regulatory Reasons. We may use personal information to comply with applicable law or respond to valid legal processes, including requests from law enforcement or government agencies, participate in legal proceedings, enforce our terms and policies and protect or defend the Services, our rights and the rights of our users or others.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes and subject to this Privacy Policy.

These circumstances may include:

With Shopify, vendors and other service providers that perform services on our behalf, including payment processing, email and marketing communications, data analytics, advertising, website functionality, IT services, customer support, cloud storage, fulfilment and shipping.
With business, marketing and advertising partners to provide marketing services, measure campaign performance and, where permitted by applicable law, advertise to you.
With Shopify and participating third-party services to support personalized advertising based on your online activity across different merchants and websites. Depending on where you reside, you may have a right to direct us not to sell or share certain personal information or use it for targeted advertising. You can exercise applicable opt-out rights through our Privacy Choices / Data Sharing Opt-Out page.
When you direct us, request us or otherwise consent to our disclosure of certain information to third parties, such as where necessary to ship products to you or when you interact with third-party services or social-media features.
With our affiliates or within our corporate group, where applicable.
In connection with a business transaction such as a merger, acquisition, financing, reorganization or bankruptcy, or where necessary to comply with legal obligations, respond to subpoenas, search warrants or similar requests, enforce our Terms of Service or other policies or protect or defend our rights and those of our customers or others.

Our service providers and business partners may process personal information according to their own privacy notices and contractual obligations.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services.

Information you submit through the Services may be transmitted to and shared with Shopify and other service providers that may be located in countries other than where you reside in order to provide and improve the Services.

In addition, to help protect, grow and improve our business, we may use certain Shopify features that incorporate data and information obtained from your interactions with our store, other merchants and Shopify.

To provide these features, Shopify may process personal information collected about your interactions with our store, other merchants and Shopify. In these circumstances, Shopify may be responsible for certain processing of your personal information, including responding to requests to exercise rights relating to Shopify's use of that information.

To learn more about how Shopify processes personal information and the rights that may be available to you, please review the Shopify Consumer Privacy Policy.

Depending on where you live, you may also exercise certain rights relating to personal information processed by Shopify through the Shopify Privacy Portal.

Cookies and Similar Technologies

We and our service providers may use cookies, pixels and similar technologies to operate the Services, remember your preferences, understand how visitors use the website, improve website functionality, measure marketing performance and, where permitted, support personalized advertising.

Where required by applicable law, non-essential cookies and similar technologies will be used subject to your consent.

You may be able to manage your cookie and privacy preferences through the privacy controls provided on our website. You can also adjust your browser settings to block or delete certain cookies, although doing so may affect the functionality of parts of the Services.

Third-Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties.

If you follow links to sites that are not affiliated with or controlled by us, you should review their privacy and security policies and other terms and conditions.

We do not guarantee and are not responsible for the privacy or security practices of those third-party services, including the accuracy, completeness or reliability of information found on those sites.

Information you provide in public or semi-public venues, including information shared on third-party social-networking platforms, may also be viewable by other users of those platforms.

Our inclusion of links to third-party services does not, by itself, imply endorsement of their content, owners or operators except where otherwise disclosed.

Children's Data

The Services are not intended to be used by children, and we do not knowingly collect personal information from children under the age of majority in the jurisdiction where they live.

If you are the parent or guardian of a child who has provided us with personal information, you may contact us using the details provided below to request that the information be deleted.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell," as those terms may be defined under applicable law, personal information belonging to individuals under 16 years of age.

Security and Retention of Your Information

We take reasonable administrative, technical and organizational measures designed to protect personal information.

However, no security measures are perfect or impenetrable, and we cannot guarantee absolute security. Information transmitted over the internet may also be subject to security risks while in transit, and we recommend that you do not use unsecured channels to communicate sensitive or confidential information to us.

How long we retain personal information depends on a number of factors, including whether we require the information to provide the Services, maintain an account, fulfil contractual obligations, comply with legal or regulatory requirements, resolve disputes, prevent fraud or enforce applicable contracts and policies.

Your Rights and Choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information.

These rights are not absolute, may apply only in certain circumstances and, in some cases, we may decline a request where permitted by applicable law.

Right to Access / Know. You may have the right to request access to personal information we hold about you and information about how we use or disclose it.
Right to Delete. You may have the right to request that we delete personal information we maintain about you.
Right to Correct. You may have the right to request that we correct inaccurate personal information we maintain about you.
Right to Portability. You may have the right to receive a copy of certain personal information we hold about you and, in some circumstances, request that we transfer it to a third party.
Right to Opt Out of Sale or Sharing for Targeted Advertising. Depending on where you reside, you may have the right to opt out of the "sale" or "sharing" of personal information or processing for purposes considered to be "targeted advertising" under applicable privacy laws.

You can exercise applicable opt-out rights through our Privacy Choices / Data Sharing Opt-Out page.

If you visit our website with the Global Privacy Control preference signal enabled, and applicable law requires us to recognize that signal, we will treat it as a request to opt out for the browser or device sending the signal. Where Shopify is able to associate the device with a Shopify account, the opt-out request may also be applied to that account.

You can learn more about Global Privacy Control.

Other than privacy preference signals that we are legally required to recognize, we may not respond to other "Do Not Track" signals sent by browsers or devices.

Managing Marketing Preferences. If you receive promotional emails from us, you may opt out at any time by using the unsubscribe option contained within those emails. If you unsubscribe from marketing communications, we may still send you non-promotional communications relating to your account, orders, transactions or customer-service requests.

You may exercise any of these rights where indicated through the Services or by contacting us using the details below.

To learn more about privacy rights relating to personal information processed by Shopify, please visit the Shopify Privacy Portal.

We will not discriminate against you for exercising applicable privacy rights.

We may need to verify your identity before processing a request, as permitted or required by applicable law.

Where applicable, you may designate an authorized agent to make a request on your behalf. Before accepting a request from an authorized agent, we may require proof that you have authorized that person to act on your behalf and may also require you to verify your identity directly with us.

We will respond to requests within the time required by applicable law.

Complaints

If you have a complaint about how we process your personal information, please contact us using the details provided below.

Depending on where you live, you may also have the right to appeal a decision we make in relation to a privacy request or lodge a complaint with your local data-protection or privacy authority.

International Transfers

We may transfer, store and process personal information outside the country where you live.

Where required by applicable law, we will use recognized mechanisms intended to protect personal information transferred internationally.

For example, where personal information is transferred outside the European Economic Area or the United Kingdom, we may rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Agreement or Addendum, an adequacy decision or another legally recognized transfer mechanism, as applicable.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technologies, Services, legal requirements or for other operational purposes.

When we make changes, we will post the revised Privacy Policy on this website and update the "Last updated" date above. We will provide additional notice where required by applicable law.