How do you obtain my consent?
When you provide us with your personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery, or return a purchase, you agree to our collection and use of personal information only for those specific purposes. This approach ensures that your data is handled responsibly and is utilized solely to facilitate your transactions with us. If we request your personal information for a secondary purpose, such as marketing, we will seek your explicit consent or provide you with the option to opt out. This empowers you to maintain control over how your information is used in the future, reinforcing our commitment to transparency and respect for your privacy.

How can I withdraw my consent?

If you change your mind after providing your data, you can withdraw your consent at any time, allowing you to prevent us from contacting you to obtain or disclose information. To do so, please reach out to us via email at contato@onda-sports.com. We value your preferences and ensure that your requests regarding consent are properly respected.

Section 3 - DISCLOSURE

We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service. This means that in certain circumstances, such as legal obligations or breaches of our policies, we might be compelled to share your information with the appropriate authorities or parties. This action is taken to ensure compliance with legal standards and to protect the integrity of our services. It's important to uphold the terms outlined in our service agreement to maintain trust and safety in our communications and transactions.

Section 4 - SHOPIFY

Our store is hosted on Shopify Inc., which provides us with a robust online e-commerce platform that enables us to sell our products and services effectively. Shopify's infrastructure is designed to facilitate seamless transactions and exceptional shopping experiences for our customers.

Your data is stored through Shopify's data storage solutions, including databases and the general Shopify application. They ensure that all data is housed on secure servers that are well-protected by firewalls, safeguarding sensitive information from potential threats. Additionally, Shopify employs various security measures, including passkeys and two-step authentication, to prevent unauthorized access to data. They maintain a comprehensive information security program featuring a combination of technical and organizational policies to ensure the safety of customers' personal data.

For those looking to enhance security for their Shopify store, resources such as step-by-step security audit guides are available. These guides help users design a thorough security and business continuity plan, ensuring that all data remains protected as you grow your e-commerce operations. By leveraging these security features, we can assure our customers that their information is handled with the utmost care and responsibility.

Payment:
If you choose a direct payment gateway to complete your purchase, Shopify stores your credit card information. This data is encrypted using the Payment Card Industry Data Security Standard (PCI-DSS). Your transaction data is stored only for the time necessary to complete your purchase transaction. After the purchase is finalized, your transaction information is deleted.
All direct payment gateways adhere to the standards set by PCI-DSS, which are managed by the PCI Security Standards Council. This council is a collaborative effort of major brands like Visa, MasterCard, American Express, and Discover.
The requirements of PCI-DSS help ensure the secure use of credit card information by our store and its service providers. For more details, please refer to Shopify's Terms of Service or Privacy Policy.

Section 5 - THIRD PARTY SERVICES
Overall, our third-party providers will only collect, use, and disclose your information to the extent necessary to perform the services they provide to us. However, certain third-party service providers, such as payment gateways and other transaction processors, have their own privacy policies regarding the information we are required to provide them about purchase-related transactions.

Section 6 - SECURITY
To protect your personal information, we take precautions and follow industry best practices to ensure that it is not lost, stolen, accessed, disclosed, altered, or destroyed. If you provide us with your credit card information, it will be encrypted using Secure Socket Layer (SSL) technology and stored with AES-256 encryption. While no method of transmission over the Internet or electronic storage is 100% secure, we adhere to all PCI-DSS requirements and implement additional measures recognized by industry standards. Our commitment to safeguarding your data reflects our dedication to maintaining your privacy and security. We continuously assess our security protocols to adapt to evolving threats and ensure your information remains protected.

Cookies
Here is a list of the cookies we use. We have provided this list so that you can choose whether or not you want to opt into them.

_session_id: This is a unique token for each session, allowing Shopify to store information about your session, such as the referrer and landing page.

_shopify_visit: This cookie does not retain any data and is persistent for 30 minutes from the last visit. It is utilized by the site provider's internal statistics tracker to record the number of visits.

_shopify_uniq: This cookie also does not retain any data and expires at midnight (relative to the visitor) of the following day. Its purpose is to count the number of visits to a store by a single customer.

cart: This unique token is persistent for 2 weeks, storing information about the items in your cart.

_secure_session_id: This is another unique token that is valid per session.

storefront_digest: This unique token is indefinite; if the store has a password, it is used to determine if the current visitor has access.

We believe in transparency when it comes to your data, and we encourage you to review this information to make informed choices about your privacy preferences.

Section 7 - AGE OF CONSENT
When using this site, you confirm that you are of legal age in your state or province of residence and that you have given us your consent to allow any of your minor dependents to use this site. This statement emphasizes the importance of ensuring that all users are of appropriate age and that guardians take responsibility for the online activities of their children. It is crucial in fostering a safe and compliant online environment, as it helps to protect minors and ensure that they have a safe browsing experience. By agreeing to this condition, you acknowledge your understanding of the site's policies and your commitment to adhering to them.

Section 8 - CHANGES TO PRIVACY POLICY
We reserve the right to modify this privacy policy at any time. Therefore, please review it frequently. Changes and clarifications take effect immediately after they are posted on the site. If we make changes to the privacy policy, we will notify you about the update. This way, you will know what information we collect, how we use it, and under what circumstances, if applicable, we will use and/or disclose it. In the event of a merger of our store with another company, your information may be transferred to the new owners so that we can continue selling products to you. This provision ensures that we maintain transparency and keep you informed about how your personal information may be handled in the future, fostering trust and security in our relationship with you as a valued customer.

QUESTIONS AND CONTACT INFORMATION
If you would like to access, correct, modify, or delete any personal information we have about you, file a complaint, or simply request more information, please contact our Privacy Director at contato@onda-sports.com. We take your privacy seriously and are committed to ensuring that you can manage your personal information effectively. Your inquiries will be addressed promptly, and we appreciate your engagement in safeguarding your own data and rights.