Privacy Policy

Last Updated: August 12, 2026

1. Overview

OmVanta operates the online store and website located at https://omvanta.us, including the information, content, features, products, and services offered through the website collectively referred to as the “Services.”

The Services are powered by Shopify, which provides the ecommerce platform that enables us to operate our online store.

This Privacy Policy explains how OmVanta collects, uses, discloses, retains, and protects personal information when you:

• Visit or interact with our website
• Create or use an account
• View or purchase a product
• Submit an order or payment
• Contact customer support
• Request a return or refund
• Subscribe to marketing
• Submit a review or other content
• Otherwise interact with the Services

For purposes of applicable privacy law, OmVanta is generally the business, controller, or data user responsible for the personal information described in this policy, except where Shopify or another third party acts as an independent controller or business for its own processing purposes.

If this Privacy Policy conflicts with our Terms of Service regarding the collection, use, or disclosure of personal information, this Privacy Policy will control for those matters.

By using the Services, you acknowledge that you have been provided with this Privacy Policy. Where applicable law requires consent for particular processing, we will request that consent separately.

2. Meaning of Personal Information

“Personal information” means information that identifies, relates to, describes, or can reasonably be linked to an identified or identifiable person.

Depending on applicable law, personal information may also be described as personal data.

Personal information does not generally include information that has been anonymized or de-identified so that it cannot reasonably be associated with an identifiable person.

3. Personal Information We Collect

Depending on how you interact with OmVanta, we may collect the following categories of personal information.

Contact Information

• Full name
• Email address
• Telephone number
• Billing address
• Shipping address
• Country, state, province, or region

Account Information

• Account username
• Password or authentication credentials in protected form
• Account preferences
• Saved addresses
• Wishlist or saved products
• Communication preferences

Order and Transaction Information

• Products viewed, purchased, returned, exchanged, or cancelled
• Products added to a cart or wishlist
• Order number
• Purchase date
• Order value
• Shipping method
• Delivery and tracking information
• Return and refund records
• Transaction history
• Discount or promotion usage

Payment Information

• Payment method
• Payment authorization status
• Billing information
• Transaction confirmation
• Limited payment details supplied by the payment processor

Complete payment card details are generally collected and processed directly by payment providers. OmVanta does not necessarily receive or store your complete card number or security code.

Communications

• Customer-service messages
• Email and telephone communications
• Return and refund requests
• Product questions
• Complaint information
• Reviews, feedback, photographs, and other content you submit

Device and Technical Information

• IP address
• Browser type
• Device type
• Operating system
• Language and time-zone settings
• Cookie and similar identifiers
• Network information
• Approximate location derived from an IP address
• Website error and diagnostic information

Website Usage Information

• Pages viewed
• Products viewed
• Links selected
• Search activity
• Time spent on pages
• Referring website
• Cart activity
• Checkout activity
• Interactions with advertisements and marketing communications

Fraud-Prevention Information

• Order risk indicators
• Payment or address verification results
• Suspected fraudulent activity
• Device and transaction signals
• Information reasonably required to protect accounts, customers, and transactions

4. Sources of Personal Information

We may collect personal information:

• Directly from you
• Automatically from your browser or device
• Through cookies and similar technologies
• From Shopify
• From payment processors
• From shipping carriers and fulfillment providers
• From fraud-prevention and security providers
• From customer-support providers
• From analytics and advertising providers
• From social media or login integrations you choose to use
• From business partners and other third parties where legally permitted
• From publicly available sources where appropriate

5. How We Use Personal Information

We may use personal information for the following purposes.

Providing and Fulfilling the Services

• Processing and managing orders
• Confirming payments
• Arranging shipment and delivery
• Providing tracking information
• Processing returns, replacements, and refunds
• Maintaining customer accounts
• Responding to product and order questions
• Providing customer support
• Remembering carts and preferences
• Delivering requested website functions

Improving the Services

• Understanding how customers use the website
• Diagnosing technical problems
• Improving website navigation and performance
• Evaluating product interest and store demand
• Developing or selecting products
• Improving customer service
• Measuring the effectiveness of store features

Security and Fraud Prevention

• Authenticating accounts
• Verifying transactions
• Detecting and preventing fraud
• Protecting customers and the website
• Investigating suspicious or unlawful activity
• Enforcing our terms and policies
• Preventing misuse and cyberattacks

Communications

• Sending order confirmations
• Sending shipping and delivery updates
• Responding to inquiries
• Providing return or refund information
• Sending security or account notices
• Providing legally required notices

Marketing and Advertising

Where legally permitted and subject to any required consent, we may:

• Send promotional emails
• Measure advertising effectiveness
• Understand general product interest
• Display advertising
• Personalize website content
• Conduct retargeting or targeted advertising
• Create advertising audiences using permitted information

You can manage marketing and advertising preferences as described in this policy and on our Your Privacy Choices page.

Legal and Business Purposes

• Complying with legal obligations
• Maintaining tax, accounting, and transaction records
• Responding to valid legal requests
• Establishing, exercising, or defending legal claims
• Enforcing agreements
• Conducting audits
• Managing an actual or proposed business transaction

6. Legal Bases for Processing

Where applicable law requires a legal basis, we may process personal information based on:

Performance of a Contract

We process information necessary to:

• Accept and fulfill an order
• Process payment
• Arrange delivery
• Provide customer support
• Process a return or refund

Legitimate Interests

We may process information where reasonably necessary for legitimate business interests, including:

• Preventing fraud
• Securing the Services
• Improving website performance
• Managing customer relationships
• Maintaining business records
• Understanding general store usage

We consider the potential impact on your privacy before relying on legitimate interests.

Consent

We may rely on consent for:

• Certain cookies
• Certain targeted advertising
• Marketing communications
• Processing that applicable law classifies as sensitive
• Other activities for which consent is required

You may withdraw consent where applicable. Withdrawal does not affect processing that was lawful before consent was withdrawn.

Legal Obligations

We may process information to comply with tax, accounting, consumer protection, court, regulatory, law-enforcement, or other legal requirements.

Protection of Rights

We may process information where necessary to protect the rights, property, security, or safety of OmVanta, our customers, or other persons, subject to applicable law.

7. Religious Interests and Potentially Sensitive Information

OmVanta sells Hindu religious, puja, devotional, cultural, and spiritual products. As a result, information about products viewed or purchased could potentially indicate religious interests or preferences.

We do not require customers to identify or confirm their religious beliefs as a condition of making an ordinary purchase.

We do not intentionally use product activity to determine, label, or create a profile of a customer’s religious identity.

Where browsing, purchasing, or other information is treated as sensitive personal information under applicable law:

• We will use it only for legally permitted purposes
• We will obtain consent where required
• We will provide applicable limitation or withdrawal rights
• We will not use an inferred religious belief for targeted advertising without any consent specifically required by law
• We will apply additional care when disclosing or processing the information

Customers should not include unnecessary information about religious beliefs, health, government identifiers, payment credentials, or other sensitive matters in reviews or customer-service messages.

8. Cookies and Similar Technologies

We and our service providers may use:

• Cookies
• Pixels
• Tags
• Local storage
• Software development kits
• Analytics tools
• Advertising technologies
• Similar tracking technologies

These technologies may be used to:

• Operate the website
• Maintain security
• Remember preferences
• Preserve cart contents
• Process checkout
• Analyze website performance
• Measure advertising
• Personalize content or advertising where permitted

Some cookies are essential for website operation. Other cookies may be optional and subject to your preferences or consent.

Where available, you can manage non-essential cookies through the cookie preferences tool on our website. You may also block or delete cookies through your browser settings.

Disabling necessary cookies may prevent features such as accounts, carts, or checkout from functioning correctly.

9. Global Privacy Control and Do Not Track

Where required by applicable law and when received by our website in a legally recognized format, we will treat a Global Privacy Control signal as a request to opt out of the sale or sharing of personal information associated with the browser and device transmitting the signal.

A GPC preference may not automatically apply to another browser, device, or account.

Other browser-based “Do Not Track” signals do not have a universally accepted legal or technical standard. We do not necessarily respond to signals other than those we are legally required to recognize.

Additional information is available on our Your Privacy Choices page.

10. Marketing Communications

You may unsubscribe from promotional emails by:

• Selecting the unsubscribe link in a promotional email
• Contacting us at bazylkhy@gmail.com

After unsubscribing, you may continue to receive transactional or service-related communications concerning:

• Orders
• Payments
• Shipping
• Returns
• Refunds
• Customer support
• Account security
• Material policy changes

We may maintain limited suppression information to ensure that your marketing preference continues to be respected.

11. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients for legitimate business purposes.

Shopify

Shopify hosts and supports the Services and processes information necessary to operate, secure, maintain, and improve the ecommerce platform.

Payment Providers

Payment processors, banks, card networks, and fraud-prevention providers may process information needed to authorize and complete transactions.

Fulfillment and Shipping Providers

Suppliers, warehouses, fulfillment providers, customs agents, postal services, and shipping carriers may receive information necessary to prepare and deliver orders.

Technology and Service Providers

We may use providers for:

• Website hosting
• Cloud storage
• Customer support
• Email delivery
• Analytics
• Security
• Fraud prevention
• Data management
• Technical maintenance

Advertising and Marketing Partners

Subject to applicable law and required consent or opt-out rights, advertising and marketing partners may receive online identifiers, commercial information, and website activity for advertising, measurement, attribution, or audience-related purposes.

Professional Advisers

Lawyers, accountants, insurers, auditors, consultants, and other professional advisers may receive information where reasonably necessary to provide their services.

Government and Legal Recipients

We may disclose information:

• To comply with applicable law
• In response to valid legal process
• To protect legal rights and safety
• To investigate fraud or unlawful activity
• To establish, exercise, or defend legal claims

Business Transactions

Information may be disclosed in connection with an actual or proposed merger, acquisition, financing, restructuring, sale, insolvency, or transfer of all or part of the business, subject to appropriate confidentiality and legal safeguards.

At Your Direction

We may disclose information when you direct us to do so, request an integration, or provide valid consent.

12. Sale, Sharing, and Targeted Advertising

We do not necessarily sell personal information in the ordinary sense of exchanging customer lists for money.

However, certain disclosures of online identifiers, device information, commercial information, or website activity to advertising or analytics partners may be legally defined as:

• A sale of personal information
• Sharing of personal information
• Targeted advertising
• Cross-context behavioral advertising

Depending on your location and applicable law, you may have the right to opt out of these activities.

The categories that may be involved include:

• Identifiers
• Device and network information
• Website usage information
• Approximate location
• Commercial information
• Advertising interaction information
• Inferences used for advertising

You may submit an opt-out request through our website’s privacy choices mechanism or by following the instructions on our Your Privacy Choices page.

We do not knowingly sell or share personal information of individuals under 16 in a manner requiring affirmative authorization without obtaining the authorization required by law.

13. Relationship With Shopify

The Services are powered by Shopify. Information submitted through the Services is transmitted to and processed by Shopify so that Shopify can provide, secure, maintain, and improve its platform.

Shopify may process information in countries other than your country of residence.

Shopify may also process certain information as an independent controller or business for its own legally disclosed purposes, including platform security, fraud prevention, analytics, and enhanced platform features.

Shopify’s processing is governed by its own applicable privacy terms.

You can review Shopify’s privacy information and available controls at:

https://privacy.shopify.com/en

Where Shopify processes information solely on our behalf, you should generally direct your request to OmVanta. Where Shopify independently determines the purposes and means of processing, you may also need to submit a request directly to Shopify.

14. Third-Party Websites and Services

The Services may contain links to websites, platforms, social media services, or other resources operated by third parties.

We do not control the privacy or security practices of independent third parties.

Before providing information to a third-party service, review its:

• Privacy policy
• Cookie policy
• Security practices
• Terms of service

The inclusion of a link does not by itself mean that OmVanta endorses the third party or accepts responsibility for its independent privacy practices.

15. International Data Transfers

OmVanta operates with a business correspondence address in Hong Kong and uses service providers that may process information in multiple countries.

Your personal information may be transferred to, stored in, or processed in countries outside your country of residence, including countries whose privacy laws may differ from those in your location.

Where required, we use recognized transfer mechanisms or safeguards, which may include:

• Contractual data-protection clauses
• Standard Contractual Clauses
• United Kingdom international data transfer mechanisms
• Adequacy decisions
• Consent or another legally permitted transfer basis
• Contractual requirements imposed on service providers

No transfer mechanism can eliminate every risk. We select and manage providers in accordance with applicable legal requirements.

16. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including to:

• Fulfill orders
• Maintain accounts
• Provide customer service
• Process returns and refunds
• Maintain tax and accounting records
• Prevent fraud
• Resolve disputes
• Enforce agreements
• Comply with legal obligations

The retention period depends on:

• The nature of the information
• The reason it was collected
• Whether an account remains active
• Applicable tax, accounting, limitation, and consumer laws
• Security and fraud-prevention requirements
• Ongoing disputes or legal claims
• Your privacy choices

When information is no longer reasonably required, we may delete, anonymize, or securely dispose of it, subject to technical and legal limitations.

17. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure.

These safeguards may include:

• Access controls
• Authentication measures
• Encryption where appropriate
• Secure payment processing
• Fraud monitoring
• Service-provider controls
• Data minimization
• Security updates
• Incident-response procedures

No website, transmission, or storage system can be guaranteed to be completely secure.

Do not send complete payment card information, account passwords, government identifiers, or unnecessary sensitive information by ordinary email or telephone.

If you believe your account or personal information has been compromised, contact us promptly.

18. Data Breaches

If we identify a personal-data security incident, we will investigate and take reasonable steps to contain and address it.

Where required by applicable law, we will notify affected individuals, regulators, or other appropriate parties.

Notification timing and content will depend on applicable legal requirements, the nature of the incident, and the available information.

19. Children’s Privacy

The Services are not directed to children who are unable to consent to the collection of personal information under applicable law.

We do not knowingly collect personal information directly from children for the purpose of allowing them to make independent purchases.

If you are a parent or legal guardian and believe that a child has provided personal information without appropriate permission, contact us so we can review and, where appropriate, delete the information.

We do not knowingly sell or share the personal information of children under 16 in a manner requiring affirmative authorization without obtaining the required authorization.

20. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

• Request access to personal information
• Request information about collection, use, and disclosure
• Correct inaccurate personal information
• Request deletion
• Obtain a portable copy of certain information
• Object to or restrict certain processing
• Withdraw consent
• Opt out of sale, sharing, or targeted advertising
• Limit certain uses of sensitive personal information
• Appeal a privacy-request decision
• Lodge a complaint with a privacy regulator
• Receive equal service without unlawful discrimination

These rights are not absolute. We may retain or decline to disclose certain information when legally permitted or required, including for security, fraud prevention, legal compliance, protection of another person’s privacy, or legal claims.

21. Exercising Your Rights

To exercise an applicable privacy right, contact:

Email: bazylkhy@gmail.com
Phone: +1 (936) 260-5549

Use the email subject:

Privacy Request

Please include:

• Your full name
• The email address associated with your account or order
• Your country and state, province, or territory
• The right you wish to exercise
• Your order number, if relevant

Do not send complete payment card information, passwords, or unnecessary government identification with your initial request.

You may also use any privacy request or cookie preference mechanism made available on our website.

22. Verification and Authorized Agents

We may need to verify your identity before processing certain requests.

Verification may involve confirming information already associated with your account or transaction. We will request only information reasonably necessary to process and secure the request.

Where permitted by applicable law, you may authorize another person to submit a request on your behalf.

We may request:

• Proof of the agent’s authority
• Verification of your identity
• Direct confirmation that you authorized the request

We may decline a request if we cannot reasonably verify the requester or authorized agent, subject to applicable law.

23. Non-Discrimination

We will not unlawfully discriminate against you for exercising an applicable privacy right.

Exercising a privacy right will not, by itself, result in:

• Denial of products or services
• Unlawfully different pricing
• A lower quality of service
• Retaliation
• Another unlawful disadvantage

24. Complaints and Appeals

If you have concerns about how we process personal information, contact us first so that we can investigate.

If we decline your request and applicable law provides an appeal right, you may submit an appeal using:

Email: bazylkhy@gmail.com
Subject: Privacy Request Appeal

Include the reference to your original request and explain why you believe the decision should be reconsidered.

Depending on where you live, you may also have the right to complain to a local privacy or data-protection authority.

For matters governed by Hong Kong’s Personal Data (Privacy) Ordinance, you may contact the Office of the Privacy Commissioner for Personal Data, Hong Kong.

25. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

• Our privacy practices
• Technology
• Service providers
• Products and services
• Legal or regulatory requirements

The revised policy will be posted with an updated “Last Updated” date.

Where required by law, we will provide additional notice or obtain consent before applying a material change.

A revised policy will not retroactively authorize materially different processing when applicable law requires additional notice or consent.

26. Contact Information

For privacy questions, complaints, or requests, contact:

Store Name: OmVanta
Email: bazylkhy@gmail.com
Phone: +1 (936) 260-5549
Website: https://omvanta.us

Business Correspondence Address:
Unit 809, 8/F, Brill Plaza
84 To Kwa Wan Road
To Kwa Wan, Hong Kong

Please use “Privacy Request” in the subject line when submitting a privacy request by email.

---