Privacy Policy
ONEDERKAM
Last Updated: March 28, 2026
Effective Date: March 28, 2026
This Privacy Policy describes how ONEDERKAM (“we,” “us,” or “our”) collects, uses, and shares information about you when you visit or make a purchase from www.onederkam.com (the “Site”). Please read this policy carefully. By using the Site, you agree to the practices described here.
Section 1 – Information We Collect
We collect the following categories of personal information:
Information You Provide Directly
• Identifiers: name, email address, billing and shipping address, phone number
• Commercial information: products purchased, order history, payment details (processed securely via Shopify — we do not store full card numbers)
• Communications: messages you send us via email or contact forms
Information Collected Automatically
• Device and usage data: IP address, browser type, operating system, pages visited, referring URLs, and time spent on pages
• Cookies and similar tracking technologies (see Section 7)
• Location data: general geographic region inferred from your IP address
Information from Third Parties
• Payment processors (e.g., Shopify Payments, PayPal) may share transaction confirmation data with us
• Analytics and advertising partners may provide aggregated insights about Site visitors
Section 2 – How We Use Your Information
We use the information we collect for the following purposes and legal bases:
• To process and fulfill orders (lawful basis: performance of a contract)
• To send transactional emails such as order confirmations and shipping updates (lawful basis: performance of a contract)
• To respond to your questions and provide customer support (lawful basis: legitimate interests)
• To send marketing emails about new products or promotions, only with your explicit consent (lawful basis: consent — you may opt out at any time)
• To detect and prevent fraud and abuse (lawful basis: legitimate interests)
• To analyze Site usage and improve our store (lawful basis: legitimate interests)
• To comply with legal obligations (lawful basis: legal obligation)
Section 3 – Consent
How We Obtain Your Consent
When you complete a purchase, we collect only the information necessary to process your transaction. We will ask for your separate, explicit consent before using your information for any secondary purpose, such as email marketing.
How to Withdraw Your Consent
You may withdraw consent at any time by:
• Clicking “Unsubscribe” in any marketing email
• Emailing us at theone@onederkam.com
• Writing to us at: ONEDERKAM, 6352 Boots Court, Eastvale, California, US 91752
Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Section 4 – How We Share Your Information
We do not sell your personal information. We may share your information in these limited circumstances:
• Service providers: We share data with trusted partners (such as Shopify, payment processors, and shipping carriers) who help us operate our business. These parties are contractually required to protect your data and use it only as directed by us.
• Legal compliance: We may disclose information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, safety, or property of ONEDERKAM, our customers, or others.
• Business transfers: If ONEDERKAM is acquired or merges with another company, your information may be transferred to the new owners. We will notify you of any such change via a prominent notice on our Site.
• With your consent: We may share information for any other purpose with your explicit consent.
We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.
Section 5 – Shopify
Our store is hosted on Shopify Inc. Shopify provides the e-commerce platform that powers our store. Your data is stored through Shopify’s infrastructure on secure servers protected by firewalls.
Payment information is encrypted using PCI-DSS compliant systems. Credit card data is encrypted via SSL/TLS and AES-256 standards. Purchase transaction data is retained only as long as necessary to complete your transaction and is then deleted.
For more information, see Shopify’s Terms of Service and Privacy Statement.
Section 6 – Third-Party Services
We may use the following categories of third-party services that process your data on our behalf:
• Payment processors (e.g., Shopify Payments, PayPal): process payment transactions
• Shipping and logistics providers: fulfill and deliver orders
• Email marketing platforms: send promotional communications (only with your consent)
• Analytics providers (e.g., Google Analytics): help us understand Site traffic and usage
• Advertising networks: may use cookies to show relevant ads across the web
These providers may be located in or operate from jurisdictions outside your own (including the United States), and your data may be subject to the laws of those jurisdictions. We encourage you to review the privacy policies of any third-party services you interact with.
Once you leave our Site or are redirected to a third-party website, this Privacy Policy no longer applies. We are not responsible for the privacy practices of other sites.
Section 7 – Cookies and Tracking Technologies
We use cookies and similar technologies to provide and improve our services. A cookie is a small file stored on your device. Below is a list of cookies we use:
• _session_id – Session cookie. Allows Shopify to store information about your session (referrer, landing page, etc.).
• _shopify_visit – Persistent (30 minutes). Used by Shopify’s internal stats tracker to record visit counts.
• _shopify_uniq – Expires at midnight of the next day. Counts visits to the store by a single customer.
• cart – Persistent (2 weeks). Stores information about the contents of your shopping cart.
• _secure_session_id – Session cookie. Secure version of session tracking.
• storefront_digest – Indefinite. Used to determine if a visitor has access to a password-protected store.
We may also use analytics and advertising cookies from third-party providers such as Google Analytics. These cookies help us understand how visitors interact with our Site and may be used to show you relevant advertising.
Your Cookie Choices
You can control cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of our Site (for example, your shopping cart may not work properly). To learn more about managing cookies, visit www.allaboutcookies.org.
For residents of California and the EU/EEA, a cookie consent banner will appear when you first visit our Site, giving you control over non-essential cookies.
Section 8 – California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and its amendment, the California Privacy Rights Act (CPRA):
• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the purposes for which it was collected, and the categories of third parties with whom it was shared.
• Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You may request that we correct inaccurate personal information we hold about you.
• Right to Opt-Out of Sale or Sharing: We do not sell your personal information. We do not share your personal information with third parties for cross-context behavioral advertising without your consent. If this changes, we will update this policy and provide a “Do Not Sell or Share My Personal Information” link.
• Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information (such as financial data) beyond what is necessary to provide our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.
To exercise your rights, contact us at theone@onederkam.com or by mail at: ONEDERKAM, 1528 Omalley Avenue, Upland, California, US 91786. We will respond to verifiable requests within 45 days and can honor requests covering the preceding 12 months of data.
Categories of Personal Information Collected (Past 12 Months)
• Identifiers: name, email, IP address, shipping/billing address
• Commercial information: order history, products purchased
• Internet or electronic network activity: browsing behavior on our Site, cookie data
• Geolocation data: general location inferred from IP address
• Inferences: preferences drawn from browsing or purchase history
We collect this information for the purposes described in Section 2. We do not sell any of these categories of personal information.
Section 9 – EU/UK Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA) or the United Kingdom, you have rights under the General Data Protection Regulation (GDPR) or UK GDPR, including:
• Right of access: request a copy of the personal data we hold about you
• Right to rectification: request correction of inaccurate or incomplete data
• Right to erasure (‘right to be forgotten’): request deletion of your personal data in certain circumstances
• Right to restriction of processing: request that we limit how we use your data
• Right to data portability: receive your data in a structured, machine-readable format
• Right to object: object to our processing of your data based on legitimate interests
• Right to withdraw consent: withdraw consent for marketing at any time without affecting the lawfulness of prior processing
• Right to lodge a complaint: you have the right to file a complaint with your local data protection authority
International data transfers: Your personal data may be transferred to and processed in the United States, which may not offer the same level of data protection as your home country. Where required, we rely on Standard Contractual Clauses or other approved transfer mechanisms as established by Shopify’s data processing agreements.
To exercise any of these rights, contact us at theone@onederkam.com.
Section 10 – Data Retention
We retain your personal information only as long as necessary for the purposes for which it was collected:
• Order and transaction records: 7 years (to comply with tax and accounting laws)
• Email marketing data: until you unsubscribe or request deletion
• Account information: as long as your account is active, plus 2 years after closure
• Payment transaction data: deleted upon completion of the transaction; payment card data is never stored by us
• Analytics and log data: typically 26 months
After retention periods expire, we securely delete or anonymize your data.
Section 11 – Security
We take the security of your personal information seriously. We implement industry-standard safeguards including:
• SSL/TLS encryption for all data transmitted between your browser and our Site
• AES-256 encryption for stored data
• PCI-DSS compliant payment processing
• Access controls limiting who within our organization can access personal data
No method of transmission over the Internet or electronic storage is 100% secure. In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law (within 72 hours under GDPR, and within timeframes required by applicable U.S. state laws).
Section 12 – Children’s Privacy
Our Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 in compliance with the Children’s Online Privacy Protection Act (COPPA). If you are under 13, please do not use this Site or provide any personal information.
By using this Site, you represent that you are at least 18 years old, or the age of majority in your state or province of residence. If we become aware that we have collected personal information from a child under 13 without verified parental consent, we will delete that information promptly.
Section 13 – Do Not Track
Some browsers include a “Do Not Track” (DNT) feature that signals to websites that you do not want to be tracked. Our Site does not currently respond to DNT signals. However, you can manage tracking preferences through your browser cookie settings and through our cookie consent tool.
Section 14 – Changes to This Policy
We reserve the right to update this Privacy Policy at any time. The “Last Updated” date at the top of this page reflects when changes were last made. For material changes, we will notify you by email (if you have provided one) or by posting a prominent notice on our Site. We encourage you to review this policy periodically.
Questions & Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or how your personal information is handled, please contact our Privacy Compliance Officer:
ONEDERKAM – Privacy Compliance Officer
1528 Omalley Ave. Upland, CA 91786
Email: theone@onederkam.com
Website: www.onederkam.com
This privacy policy was reviewed and updated on March 28, 2026. ONEDERKAM is committed to protecting your privacy and will continue to review this policy as laws and best practices evolve.