Privacy Policy

Last updated: 25 May 2026

ONLINEOASIS LLC (“we”, “our”, “us”), is the data controller responsible for your personal data when you use retailssup.com. We are committed to protecting your privacy under the the California Consumer Privacy Act (CCPA/CPRA) and other applicable U.S. state privacy laws and the applicable U.S. federal and state privacy laws.

1. Who we are

ONLINEOASIS LLC
127 N Higgins Ave Ste 307D, Missoula, Montana Islands MT 59802, United States
Email: privacy@retailssup.com
Phone: +1 (555) 422-1587

2. Personal data we collect

  • Account & identity data: name, email address, billing and delivery address, telephone number.
  • Transaction data: products ordered, order value, payment confirmation (we do not store full card numbers — these are handled by Stripe).
  • Technical data: IP address, browser type, device identifiers, timezone, the pages you view on our site.
  • Marketing data: your preferences for receiving emails from us and your communication preferences.
  • Customer service data: correspondence you send us via email, web form, live chat or telephone.

3. Why we use your data (legal basis)

Purpose Legal basis under CCPA/CPRA
Process your order, take payment, deliver your goods Performance of a contract (Art. 6(1)(b))
Send service emails (order confirmation, dispatch, refunds) Performance of a contract
Send marketing emails about similar products Legitimate interest (existing customer soft opt-in under CAN-SPAM/TCPA Reg 22(3))
Send marketing to non-customers Consent (Art. 6(1)(a))
Tax and accounting records Legal obligation (IRS recordkeeping requirements (26 U.S.C. § 6001), the IRS requirements)
Fraud prevention & site security Legitimate interest

4. Who we share your data with

We only share your personal data with the processors below, and only for the purpose stated:

  • Stripe Payments US Ltd — to take card payments. Stripe is PCI-DSS Level 1 certified.
  • USPS / UPS / FedEx — to deliver your order (name, address, telephone for delivery updates).
  • Google Analytics 4 & Google Ads (Google Ireland Ltd) — anonymised website usage and conversion measurement.
  • Our email provider — to send transactional and marketing emails.
  • the IRS, the Montana Secretary of State, fraud-prevention agencies — where we are legally required.

We do not sell your personal data to third parties.

5. International transfers

Some of our processors (Google, Stripe) may transfer data outside the United States. Where this happens, transfers are protected by US adequacy regulations, the United States International Data Transfer Agreement, or Standard Contractual Clauses with the United States Addendum.

6. How long we keep your data

  • Order records: 7 years (the IRS requirement)
  • Customer account: until you ask us to delete it
  • Marketing data: until you unsubscribe
  • Support correspondence: 3 years from last contact
  • Website analytics: 14 months (Google Analytics default)

7. Your rights under CCPA/CPRA

  • Right to be informed
  • Right of access (Subject Access Request)
  • Right to rectification
  • Right to erasure (“right to be forgotten”)
  • Right to restrict processing
  • Right to data portability
  • Right to object
  • Rights related to automated decision-making and profiling

To exercise any of these, email privacy@retailssup.com. We respond within one calendar month, as required by CCPA/CPRA.

8. Complaints

If you believe we have not handled your data correctly, you can complain to the Federal Trade Commission (FTC) at ftc.gov or call 1-877-382-4357.

9. Changes to this policy

We may update this policy from time to time. The current version always shows the last-updated date at the top.