Privacy policy

Privacy Policy
Last updated: October 2025

OralBrite operates this store and website, including all related information, content, features, tools, products and services (the “Services”). Our store is powered by Shopify. This Privacy Policy explains how we collect, use and share your personal information when you visit our store, buy from us or contact us. If this Privacy Policy and our Terms of Service conflict on how your personal information is handled, this Privacy Policy applies.

Please read it carefully. By using the Services, you confirm that you have read it and understand how we handle your information.

Personal Information We Collect
“Personal information” means information that identifies you or can reasonably be linked to you. It does not include anonymous or de-identified information. Depending on how you use the Services, we may collect:

  • Contact details: name, billing and shipping address, phone number, email address.
  • Payment information: payment method, transaction details and payment confirmation. Card details are handled by our payment providers, and we do not store full card numbers.
  • Account information: username, password, preferences and settings.
  • Order information: items you view, add to your cart or wishlist, buy, return or cancel, and your past orders.
  • Communications: what you write to us, for example in a support request.
  • Device information: your device, browser and network connection, IP address and other identifiers.
  • Usage information: how and when you use and navigate the Services.

Where We Get Your Information

  • Directly from you: when you create an account, place an order, subscribe to our emails or contact us.
  • Automatically: from your device when you use our website, through cookies and similar technologies.
  • From service providers who work for us, such as payment, analytics and shipping providers.
  • From partners and other third parties.

How We Use Your Information

  • To provide and improve the Services: to process payments and orders, arrange shipping, handle returns and refunds, manage your account, remember your preferences, let you leave reviews, personalise your experience and improve our store.
  • Marketing and advertising: to send you emails, text messages or other promotions (where permitted or with your consent), and to show you ads on our Services or other websites, for example based on items you viewed or added to your cart.
  • Security and fraud prevention: to verify your account, keep payments safe and detect, investigate or act on suspected fraud, illegal or harmful activity.
  • Communicating with you: to give you customer support and keep in touch about your orders.
  • Legal reasons: to comply with the law, respond to valid legal requests, handle legal disputes and enforce our terms and policies.

Legal Basis (EU/EEA and UK)
Where the GDPR applies, we process your personal information on these bases: performing our contract with you (orders and delivery), our legitimate interests (security, improving the Services, certain marketing), compliance with legal obligations (such as tax and accounting), and your consent (for example for marketing emails and non-essential cookies), which you can withdraw at any time.

How We Share Your Information
We may share your personal information with:

  • Shopify and other service providers who work on our behalf (IT, payments, analytics, customer support, cloud storage, fulfilment and shipping).
  • Marketing and advertising partners, who help us advertise to you. They use your information according to their own privacy notices. Depending on where you live, you can opt out of sharing for targeted advertising through [your opt-out link / cookie settings].
  • Third parties you ask us to share with, or when you consent, for example to ship your products or when you use social media integrations.
  • Our affiliates within our corporate group, if any.
  • Others in connection with a business transaction (such as a merger), to meet legal obligations, to enforce our terms or to protect our rights, our users or others.

Relationship with Shopify
Our store is hosted by Shopify, which collects and processes personal information about your use of the Services to provide and improve them. Information you submit is shared with Shopify and with third parties that may be located outside your country. We also use certain Shopify features that combine data from your interactions with our store, other merchants and Shopify. In those cases Shopify is responsible for that processing, including for requests to exercise your rights. Learn more in the Shopify Consumer Privacy Policy (https://www.shopify.com/legal/privacy/app-users) and via the Shopify Privacy Portal (https://privacy.shopify.com/en).

Third-Party Websites and Links
Our Services may link to websites run by others. We do not control and are not responsible for their privacy or security practices, so please read their policies. Information you share on public or social platforms may be visible to others.

Cookies
We and our partners use cookies and similar technologies to run the store, remember your cart, analyse traffic and show relevant ads. Where required, we ask for your consent before using non-essential cookies, and you can change your choices at any time through [cookie settings link] or your browser settings.

Children’s Data
The Services are not intended for children, and we do not knowingly collect personal information from children under the age of [16]. If you are a parent or guardian and believe your child has given us personal information, please contact us and we will delete it.

Security and Retention
No security measure is perfect, so we cannot guarantee absolute security, and information you send us may not be secure in transit. We recommend not sending sensitive information through unsecure channels.

We keep your personal information for as long as needed to provide the Services, maintain your account, comply with legal obligations (such as tax and accounting rules), resolve disputes and enforce our agreements.

Your Rights and Choices
Depending on where you live, you may have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate information.
  • Delete your personal information.
  • Data portability: receive a copy of your information and have it transferred to another party.
  • Object to or restrict certain processing.
  • Withdraw consent where we rely on it. This does not affect processing before you withdrew it.
  • Opt out of targeted advertising or the sale or sharing of your data, where applicable. If your browser sends a Global Privacy Control signal, we treat it as an opt-out request where required.
  • Manage marketing emails: you can unsubscribe at any time using the link in our emails. We may still send you non-promotional messages, such as order updates.

These rights are not absolute and may be limited by law. We may need to verify your identity before we process a request, and we will not treat you differently for exercising your rights. You can use an authorised agent to make a request, but we may need proof of their authority. To exercise your rights, contact us using the details below.

Complaints
If you have a complaint about how we handle your personal information, please contact us first. You also have the right to lodge a complaint with your local data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). A list of EEA authorities is available at edpb.europa.eu.

International Transfers
We may transfer, store and process your personal information outside the country where you live. If we transfer it outside the EEA or the UK, we rely on recognised safeguards such as the European Commission’s Standard Contractual Clauses, unless the destination country has been recognised as providing an adequate level of protection.

Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal or regulatory reasons. We will post the updated version here, change the “Last updated” date and give notice where the law requires it.