Privacy Policy
Effective Date: April 1, 2026
Oshi Works ("we," "us," or "our") operates the Oshi Works website and services (the "Service"). This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from our website.
By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.
1. Information We Collect
Personal Information
When you make a purchase or attempt to do so, we may collect:
- Name
- Billing and shipping address
- Email address
- Phone number
Payment Information (Processed by Shopify)
We use Shopify as our payment processor. Payment information such as your credit card number is collected and processed directly by Shopify and is not stored on our servers.
Shopify may collect:
- Payment card details
- Billing information
- Transaction amount
- IP address and device data (for fraud prevention)
For more information, please review Shopify's Privacy Policy.
Account Information
If you create an account:
- Username and password
- Order history and preferences
Device & Usage Information
We automatically collect certain information about your device, including:
- IP address
- Browser type
- Time zone
- Cookies and tracking data
- Pages viewed and referring websites
2. How We Use Your Information
We use your information to:
- Process and fulfill orders
- Facilitate secure payments through Shopify
- Communicate with you (order confirmations, support, updates)
- Detect and prevent fraud or unauthorized transactions
- Improve and optimize our website
- Send marketing communications (if you opt in)
3. Sharing Your Information
We share your information with trusted third parties to operate our business:
Shopify (Payment Processing)
We share necessary transaction data with Shopify to process payments securely. Shopify may also use your data to:
- Verify your identity
- Prevent fraud
- Comply with legal obligations
Service Providers
We may also share data with:
- Shipping carriers
- Email service providers
- Analytics tools
Legal Requirements
We may disclose your information if required to:
- Comply with applicable laws or regulations
- Respond to legal requests
- Protect our rights or prevent fraud
4. Cookies and Tracking Technologies
We use a small number of first-party cookies that are either strictly necessary for the site to work or that remember a preference you set. We do not use cookies for analytics, advertising, or third-party tracking, and we do not load any third-party tracking scripts (Google Analytics, Meta Pixel, etc.) on this site.
Cookies set when shopping
vts_cart_id: stores your shopping cart ID so the items you add stay with you between page loads. Strictly necessary.vts_country: remembers the country and currency you selected from the switcher so prices display correctly. Functional / preference.
Cookies set only when signing in to the talent or admin portal
These cookies are only set if you have a portal account and have signed in. Regular shoppers will never have these.
vts_session: keeps you signed in. Strictly necessary (auth).vts_pending_totp: temporary cookie used during two-factor authentication enrollment. Strictly necessary (auth).
Why there's no cookie banner
Under the EU ePrivacy Directive (and equivalent UK rules), cookie consent banners are required for cookies that are not strictly necessary or functional, typically analytics and advertising cookies. Because we don't set any of those, no banner is shown. If we add analytics or marketing tracking in the future, this policy will be updated and a consent prompt will be added before any non-essential cookie is set.
Shopify checkout
When you proceed to checkout you are redirected to Shopify, who hosts the checkout pages. Shopify sets its own cookies for fraud prevention, payment security, and (where applicable) consent management. Those cookies are governed by Shopify's Privacy Policy.
You can clear or block cookies at any time through your browser settings. Blocking the strictly-necessary cookies above will break parts of the site (the cart, sign-in, etc.).
5. Data Retention
We retain your personal information only as long as necessary to:
- Fulfill transactions
- Meet legal, tax, and accounting obligations
- Resolve disputes and enforce agreements
Shopify may retain payment-related data in accordance with its own legal and regulatory obligations.
6. Data Security
We take reasonable measures to protect your information. All payment transactions are encrypted and processed securely through Shopify.
However, no method of transmission over the Internet is completely secure, and we cannot guarantee absolute security.
7. Your Rights
Depending on your location, you may have rights to:
- Access your personal data
- Request correction or deletion
- Object to or restrict processing
- Opt out of marketing communications
To exercise your rights, contact us using the information below.
8. Third-Party Services
Our Service may include links to third-party websites. We are not responsible for their privacy practices. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites.
Information you provide on public or semi-public venues, including information you share on third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party.
Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.
Shopify's services are governed by their own privacy policy and terms.
9. Children's Privacy
The Services are not intended to be used by children, and we do not knowingly collect any personal information about children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted.
As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) personal information of individuals under 16 years of age.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.
Your continued use of the Service constitutes acceptance of those changes.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
