Privacy

Who is responsible

ODDJOY ONLINE SELLER, trading as Oddjoy, is responsible for the personal data described in this policy. Oddjoy is a Sole Establishment licensed by Dubai Department of Economy and Tourism (DET). Licence number: 1637107. Commercial register number: 2892389.

Business location: Dubai, United Arab Emirates. Privacy and customer-service enquiries may be sent to hi@oddjoy.store.

Information we use and why

To process and fulfil an order, Oddjoy may use the customer's name, email address, telephone number, delivery address, order contents, gift note, payment status and correspondence. This information is used to perform the order, provide customer service, arrange delivery and resolve order issues.

When a customer supplies a photograph, Oddjoy processes the photograph, crop settings and Print Job ID only to prepare, quality-check and fulfil the requested print and to support that order.

Oddjoy may keep transaction and communications records where required for accounting, fraud prevention, security, dispute handling or compliance with legal and regulatory obligations.

Where processing depends on consent, the customer may withdraw that consent for future processing. Withdrawal does not affect processing that was lawful before withdrawal or information Oddjoy must retain for another lawful reason.

Service providers and recipients

Shopify hosts the store data, cart, checkout, order records and customer photographs used for custom printing. Payments are handled through Shopify checkout and its payment providers. Oddjoy does not store full card details on this website.

Vercel hosts the Oddjoy website and provides privacy-focused traffic and performance measurement. Quiqup receives the delivery information needed to deliver and track an order. Oddjoy's email provider processes messages sent to the customer-service address.

Custom photographs are printed in-house. They are not sent to an external printer and may be accessed only by authorised Oddjoy personnel for printing, quality checking, packing and customer support.

Information may also be shared with professional advisers, accountants, regulators, courts or public authorities when reasonably necessary or legally required. Oddjoy does not sell customer photographs or use them for advertising.

Custom photographs and deletion

Customer photographs upload directly to Shopify Files and are linked to a server-generated Print Job ID. Oddjoy does not expose the Shopify file address in the public cart.

For a completed order, authorised Oddjoy personnel use the photograph only to prepare and quality-check the included Instax Mini print. After the print has been prepared and the parcel has been packed, Oddjoy manually removes the photograph from its active Shopify Files.

Photographs attached to an abandoned or incomplete checkout are not used for another purpose. Oddjoy reviews and removes these abandoned uploads from its active Shopify Files within 7 days of upload.

After removal from active files, limited copies may remain temporarily in service-provider backups or security records under the provider's own controlled retention processes.

Cookies, analytics and advertising

Oddjoy uses essential storage needed to keep the store secure and functional. This includes reconnecting a visitor to a Shopify cart, supporting checkout and fraud prevention, and keeping limited campaign parameters, the referring website domain and the first landing-page path in session storage. When a purchase begins, these source details may be attached to the Shopify cart and resulting order so Oddjoy can understand which channel led to a sale. Oddjoy does not store the full referring URL through this process.

Oddjoy uses Vercel Speed Insights to measure website performance. Shopify checkout may use essential cookies or similar storage needed for checkout, fraud prevention, security and payment. Essential storage cannot be switched off through Oddjoy's cookie settings because the store may not work correctly without it.

With the visitor's analytics consent, Oddjoy loads Google Analytics 4 to understand visits, page activity, devices, approximate location and traffic sources. Google may use cookies or similar identifiers and process this information on Oddjoy's behalf. Google Analytics stays off until analytics consent is given.

With the visitor's advertising consent, Oddjoy loads Meta Pixel to measure pages viewed, product views, additions to cart and the start of checkout, and to measure or improve Meta advertising. Event information may include a product identifier, product value, currency, browser or device information and campaign source. When Google Ads campaigns are activated, Google advertising measurement and remarketing will also remain off unless advertising consent is given.

Oddjoy does not send customer photographs, gift-note text or full payment-card details to Google Analytics, Meta Pixel or Google Ads. Oddjoy does not sell customer photographs or use them in advertising.

A visitor can accept all optional tracking, reject non-essential tracking or choose analytics and advertising separately. The choice is stored in the browser and can be changed at any time using Cookie settings in the footer. Withdrawing consent stops future optional tracking on this storefront and removes accessible first-party Google and Meta tracking cookies. Providers may retain information processed lawfully before consent was withdrawn according to their own controlled retention practices.

International processing

Shopify, Vercel and other service providers operate internationally. Customer information may therefore be processed or stored outside the UAE, including in countries where these providers or their subprocessors maintain operations.

Oddjoy selects established providers and relies on their contractual, organisational and technical safeguards for international processing. Protections and legal rights may differ between countries, but Oddjoy requires personal data to be handled consistently with applicable data-protection law.

How long information is kept

Completed-order and abandoned-upload photographs are handled according to the specific periods described in the custom-photograph section above.

Order, payment-status, delivery and accounting records are kept for the period needed to fulfil the order, handle disputes, prevent fraud and meet applicable legal, tax and accounting obligations.

Customer-service messages are kept only for as long as reasonably needed to answer the enquiry, support the order and maintain any necessary business or legal record. Aggregated or anonymised information may be kept where it no longer identifies an individual.

Customer rights and requests

Subject to applicable law and relevant exceptions, a customer may ask Oddjoy for information about the personal data being processed; request access or transfer where technically applicable; correct incomplete or inaccurate data; request deletion; restrict or object to processing in applicable circumstances; and withdraw consent where processing depends on consent. Requests may be sent to hi@oddjoy.store.

Oddjoy may need to verify the requester's identity and may preserve information required for fulfilment, fraud prevention, accounting, legal claims or other legal obligations. Oddjoy will explain if a request cannot be completed in full.

A customer who believes their personal data has been handled unlawfully may contact Oddjoy first so the concern can be reviewed and may also submit a complaint to the competent UAE data-protection authority.

Security

Oddjoy uses reasonable organisational and technical measures intended to protect customer information. Access to customer photographs and order records is limited to people who need it for authorised operational purposes.

No online service can guarantee absolute security. Customers should contact Oddjoy promptly if they believe information connected to an order has been accessed or used without permission.