Privacy Policy

When you place an order: your name, email address, and shipping address, along with what you bought and what you paid.

When you create an account: your name, email address, and a password. Passwords are stored only as a salted scrypt hash — we cannot read your password, and nobody here can tell you what it is.

When you contact us or join the mailing list: your email address, plus your name and message if you use the contact form.

When you browse: a randomly generated visitor ID, which pages and products you viewed, when you added something to the cart or started checkout, whether you are on mobile, tablet or desktop, and where you arrived from (a search engine, an ad, a link on another site). This is stored on our own servers, not by a third party.

We do not collect or store your card number. Payment details are entered on Stripe's own checkout page and never reach our servers.

We do not use advertising cookies of our own. We do use:

Necessary — customer_session keeps you signed in to your account; optimai_cart remembers your basket; oai_promo and oai_welcome remember a discount code and whether you have already seen the welcome offer.

Analytics — oai_sid is a random visitor ID that lets us count unique visitors and see how far people get through checkout. oai_attr records where you first arrived from so a sale can be credited to the right channel. Neither contains your name or email.

Advertising — the Meta (Facebook) Pixel sets its own cookies. See below.

Clearing your browser's site data removes all of these.

Stripe — processes payments. Receives your name, email, shipping address and payment details, and is the party that handles your card.

Meta (Facebook/Instagram) — we run ads, and we measure them two ways. The Meta Pixel runs in your browser and reports page views, product views, add-to-cart and purchases. Separately, when an order completes, our server sends Meta a hashed copy of your email address along with the order value and the product IDs, so the purchase can be matched to an ad click. Hashing means Meta receives a scrambled version rather than the address itself, but it is still enough for Meta to match you to an existing profile. This is the least obvious thing on this page, which is why we are stating it plainly.

Resend — delivers our email (order confirmations, shipping and delivery notices, password resets). Receives your email address and the contents of those messages.

Cloudinary — hosts our product images. Receives no personal data.

Railway — hosts the site and its database.

We do not sell your personal information, and we do not share it with data brokers.

We use Google's Gemini model internally to generate and retouch product photographs, and an open-source image model to remove backgrounds from them. No customer data is sent to any AI service. These tools only ever see pictures of the products we sell. There is no AI chatbot on this site and no automated decision-making about you.

Order records are kept while we may need them for tax, accounting and warranty purposes. Account details are kept until you ask us to delete them. Analytics events are kept in a rolling window for reporting. Mailing-list addresses are kept until you unsubscribe.

Wherever you live, you can ask us to show you the personal data we hold about you, correct it, delete it, or send you a copy. If you are in the UK, EU, California or another region with specific privacy laws, those laws may give you further rights, and we will honour them.

To make a request, email orders@optimaitech.com or use the contact form. We may need to confirm you control the email address on the account before we act. We do not charge for this and we will not treat you differently for asking.

To opt out of Meta's advertising tracking, use your browser's tracking protection or Meta's own ad settings. Most ad and tracker blockers stop both the Pixel and our own analytics.

This store is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has given us personal information, contact us and we will remove it.

If we change what we collect or who we share it with, we will update this page and the date at the top. Material changes will be flagged on the site.