1. Overview

OneShear ("OneShear," "we," "us," or "our") is an e-commerce retailer located in Loxahatchee, Florida. This Privacy Policy describes how we collect, use, disclose, and protect personal information when you visit oneshear.com (the "Site"), make a purchase, or otherwise interact with us.

By using the Site, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, please discontinue use of the Site.

2. Information We Collect

Information You Provide Directly

• Account & Order Information: Name, billing and shipping address, email address, phone number, and payment information (processed securely via Shopify Payments; we do not store full card numbers).
• Communications: Messages you send us via email, contact forms, or customer support channels.
• Marketing Preferences: Email opt-ins, subscription choices, and promotional preferences.

Information Collected Automatically

• Device & Browser Data: IP address, browser type, operating system, referring URLs, and device identifiers.
• Usage Data: Pages viewed, products clicked, time spent on pages, add-to-cart actions, and checkout behavior.
• Cookies & Similar Technologies: First-party and third-party cookies, pixel tags, and web beacons. See Section 5 for details.
• Transaction Data: Purchase history, order values, and return/refund activity.

Information from Third Parties

• Advertising platforms (Google, Meta) may share audience and attribution data with us.
• Shopify may provide analytics and fraud detection signals.

3. How We Use Your Information

4. How We Share Your Information

We do not sell your personal information to data brokers. We may share your information in the following circumstances:

Service Providers

We share data with trusted third-party vendors who help us operate our business, including Shopify (e-commerce platform), shipping carriers, payment processors, and email service providers. These parties are contractually obligated to use your data only to provide services to us.

Advertising & Analytics Partners

We share behavioral and transactional data with Google and Meta to serve targeted ads and measure campaign effectiveness. This may be considered a "sale" or "sharing" under California and other state privacy laws. See Section 6 for opt-out options.

Legal Requirements

We may disclose your information if required by law, court order, or government authority, or to protect the rights, safety, or property of OneShear, our customers, or others.

Business Transfers

If OneShear is acquired, merged, or sells substantially all of its assets, your information may be transferred as part of that transaction. You will be notified via email and/or a prominent notice on our Site.

5. Third-Party Services & Tracking Technologies

We use the following third-party services that may collect or receive information about your activity on our Site:

Cookies

We use the following categories of cookies:

• Strictly Necessary: Required for the Site to function (e.g., shopping cart, checkout session).
• Analytics: Help us understand how visitors use the Site (e.g., Google Analytics).
• Marketing / Advertising: Used to serve relevant ads on other platforms (e.g., Meta Pixel, Google Ads).
• Functional: Remember your preferences (e.g., currency, language).

You can manage cookie preferences through our Site's privacy controls. You may also adjust settings through your browser, though disabling certain cookies may affect Site functionality.

6. Targeted Advertising

We participate in targeted advertising, which means your browsing behavior on our Site may be used to show you OneShear ads on other websites and platforms. Depending on your state of residence, this activity may be classified as a "sale," "sharing," or "targeted advertising" of personal information under applicable state privacy laws.

Your opt-out preferences for targeted advertising are managed through our Site's privacy and cookie consent controls.

If your browser or device sends a Global Privacy Control (GPC) opt-out signal, we will honor it as a request to opt out of the sale or sharing of your personal information for targeted advertising purposes for that browser and device, to the extent required by applicable law.

6a. Your Opt-Out Rights — Do Not Sell or Share My Personal Information

We may collect and share personal information, including through cookies and similar technologies, with third-party advertising partners to show you ads on other websites that are more relevant to your interests and for other reasons outlined in this Privacy Policy.

Sharing of personal information for targeted advertising based on your interaction on different websites may be considered "sales," "sharing," or "targeted advertising" under certain U.S. state privacy laws. Depending on where you live, you may have the right to opt out of these activities.

If you visit our website with the Global Privacy Control (GPC) opt-out preference signal enabled, we will treat this as a request to opt out of activity that may be considered a "sale" or "sharing" of personal information or other uses that may be considered targeted advertising for the device and browser you used to visit our website.

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. General retention guidelines:

• Order & transaction records: 7 years (for tax and legal compliance)
• Customer account data: Duration of account plus 3 years after last activity
• Marketing data: Until you unsubscribe or request deletion
• Analytics data: Up to 26 months (Google Analytics default)

Upon request, we will delete or anonymize your personal information where we are not required by law to retain it.

8. Data Security

We implement commercially reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These include:

• SSL/TLS encryption on all data transmissions
• PCI-DSS compliant payment processing through Shopify
• Access controls limiting employee access to personal data
• Regular security assessments of our platform

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach that affects your rights, we will notify you in accordance with applicable law.

9. Your Privacy Rights

Depending on your location, you may have some or all of the following rights regarding your personal information:

• Right to Know / Access: Request a copy of the personal information we hold about you.
• Right to Deletion: Request that we delete your personal information, subject to certain legal exceptions.
• Right to Correction: Request that we correct inaccurate personal information.
• Right to Portability: Request your data in a portable, machine-readable format.
• Right to Opt Out: Opt out of the sale, sharing, or use of your data for targeted advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.

To exercise any of these rights, contact us at sales@oneshear.com. We will respond within 45 days. We may need to verify your identity before processing your request.

10. California Residents (CCPA / CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

Categories of Personal Information We Collect

In the past 12 months, we have collected the following categories of personal information:

• Identifiers (name, email, IP address, device ID)
• Commercial information (purchase history, transaction data)
• Internet or network activity (browsing behavior, page interactions)
• Geolocation data (derived from IP address)
• Inferences drawn from the above to create a profile about preferences

Sale / Sharing of Personal Information

We share certain identifiers and internet activity data with Google and Meta for targeted advertising purposes. Under CCPA/CPRA, this may constitute a "sale" or "sharing" of personal information. California residents have the right to opt out. Opt-out preferences are managed through our Site's privacy and cookie consent controls.

Sensitive Personal Information

We do not collect sensitive personal information as defined under CPRA beyond what is necessary to process your order (e.g., payment card data processed by Shopify's PCI-compliant infrastructure).

Shine the Light

California Civil Code Section 1798.83 allows California residents to request information about personal information shared with third parties for their direct marketing purposes in the preceding calendar year. To make such a request, contact us at sales@oneshear.com.

Submitting a California Privacy Request

Email sales@oneshear.com with subject line "California Privacy Request." We will acknowledge your request within 10 business days and respond within 45 calendar days. You may designate an authorized agent to submit a request on your behalf.

11. Other U.S. State Privacy Rights

Residents of the following states may have similar rights to access, delete, correct, or opt out of certain uses of their personal information under applicable state law:

• Virginia (VCDPA)
• Colorado (CPA)
• Connecticut (CTDPA)
• Texas (TDPSA)
• Florida (FDBR – applicable to businesses meeting certain revenue thresholds)

To exercise any rights available under your state's law, contact us at sales@oneshear.com. We will respond within the timeframe required by applicable law and will not discriminate against you for exercising your rights.

12. Children's Privacy

Our Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete it promptly. If you believe we have collected such information, please contact us at sales@oneshear.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email or via a notice on the Site.

We encourage you to review this policy periodically. Your continued use of the Site after any changes constitutes your acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: