Privacy Policy

Account information: name, email address, phone number, mailing/shipping address, and password (stored as a secure one-way hash — we never see or store your plain-text password).

Order information: products purchased, shipping details, order history, and payment status (we do not store full card numbers — see Section 3).

Support information: messages you send us via the support form, email, or WhatsApp, so we can respond to your inquiry.

Usage information: pages visited, device/browser type, and IP address, collected automatically to keep the site secure and improve performance.

• To create and manage your account
• To process orders, payments, and shipping
• To provide and bill your phone service plan
• To respond to support requests
• To send order confirmations and, if enabled, order/account notifications by email or WhatsApp
• To detect and prevent fraud, abuse, or unauthorized access (e.g., login rate-limiting)
• To comply with legal obligations

All payments are processed by Stripe, a PCI-DSS compliant payment processor. Your card details are sent directly to Stripe and are never stored on our servers. We only retain the payment status and a transaction reference needed to fulfill and support your order.

We use browser local storage to remember your shopping cart between visits and to keep you signed in. We do not use third-party advertising trackers. If we add analytics tools in the future, this policy will be updated accordingly.

We do not sell your personal information. We share information only with:

• Our payment processor (Stripe) to complete transactions
• Shipping carriers to deliver your order
• Service providers that help us operate the site (e.g., hosting, email/WhatsApp delivery for notifications you or we enable)
• Law enforcement or regulators, only where required by law

We retain account and order information for as long as your account is active and as needed to comply with tax, accounting, and legal requirements. You may request deletion of your account at any time (see Section 8); some order records may be retained where required by law.

We use industry-standard measures to protect your data, including encrypted password storage (bcrypt), HTTPS encryption in transit, session-based authentication, and login rate-limiting to prevent brute-force attacks. No method of transmission or storage is 100% secure, but we work to protect your information using currently accepted standards.

You may, at any time:

• Access or update your profile information from your account dashboard
• Change your password from Account settings
• Request a copy of your personal information
• Request deletion of your account and associated data
• Opt out of email or WhatsApp notifications (if enabled for your account)

To exercise these rights, contact us at support@oasisorchard.com.

Our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

We may update this Privacy Policy from time to time. The "Effective date" above reflects the latest revision. We encourage you to review this page periodically.

Questions about this Privacy Policy or your data? Contact us at support@oasisorchard.com or +1 (902) 593-4442, 1505 Barrington Street, Suite 200, Halifax, NS B3J 3K5, Canada.