Privacy
Policy

We may collect the following types of personal information when you use our website or make a purchase:

• Identity & Contact — Name, email address, phone number, and shipping/billing address.
• Payment Information — We do not store card details. Payments are processed securely through Stripe and PayPal. Only a transaction reference is retained on our servers.
• Order Data — Items purchased, sizes, quantities, order history, and delivery preferences.
• Communications — Messages you send via the contact form, email, or WhatsApp.
• Usage Data — Browser type, pages visited, time on site, and referral source — collected via cookies and analytics tools to improve your experience.
• Biometric Data — We do not collect biometric identifiers (fingerprints, facial data, etc.).

We use the information we collect to:

• Process and fulfil your orders, and send order confirmations and shipping updates.
• Respond to your enquiries and provide customer support.
• Send exclusive updates, new collection announcements, or promotional offers — only with your explicit consent.
• Improve our website, products, and services through aggregated and anonymised analytics.
• Comply with legal obligations and prevent fraud.

We do not sell, rent, or trade your personal information. We may share data only with trusted service partners who help us operate our business:

• Payment Processors — Stripe and PayPal for secure transaction handling.
• Shipping Providers — Logistics partners solely to deliver your order.
• Analytics Providers — Tools such as Google Analytics, used under strict data processing agreements.

All third parties are contractually required to keep your data confidential and use it only for the purpose for which it was disclosed.

Our website uses cookies to enhance your experience. You can manage your cookie preferences at any time using the banner displayed when you first visit.

• Essential Cookies — Required for navigation, cart, and checkout. Cannot be disabled.
• Analytics Cookies — Help us understand traffic and usage patterns. Opt-out available at any time.
• Marketing Cookies — Used only with your explicit consent and equal opt-out visibility, in compliance with NY AG guidance.

Per the New York Attorney General's 2024 guidance, our cookie controls give you an equally clear option to decline as to accept. Closing the banner does not imply acceptance.

We retain your personal information only as long as necessary to fulfil the purposes in this policy, or as required by law. Order records are kept for a minimum of 5 years for accounting and legal compliance. You may request deletion at any time — see Section 07.

Depending on your location, you may have the following rights regarding your personal data:

• Access — Request a copy of the data we hold about you.
• Correction — Ask us to correct inaccurate or incomplete information.
• Deletion — Request that we erase your personal data ("right to be forgotten").
• Opt-out — Unsubscribe from marketing communications at any time.
• Portability — Receive your data in a structured, machine-readable format.

To exercise any of these rights, email us at hello@onda-newyork.com. We will respond within 30 days.

Our website may contain links to third-party sites (e.g. Instagram, PayPal). We are not responsible for the privacy practices of those websites and encourage you to review their own policies before submitting any personal information.

Our website and products are intended for adults. We do not knowingly collect personal information from anyone under the age of 16. If you believe a minor has provided us with personal data, please contact us immediately and we will delete it promptly.

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or a notice on our website. The date at the top of this page always reflects the most recent revision. Continued use of the site after changes are posted constitutes acceptance of the updated policy.