Privacy Policy

Last updated October 8, 2026

Summary of key points

What personal information do we process?

When you visit, use, or navigate our Services, we may process personal information depending on how you interact with OllaCart, the choices you make, and the products and features you use.

Do we process any sensitive personal information?

We do not process sensitive personal information.

Do we receive any information from third parties?

We may receive information from public databases, marketing partners, social media platforms, and other outside sources.

How do we process your information?

We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

When and with whom do we share personal information?

We may share information in specific situations and with specific third parties, described in the section below.

How do we keep your information safe?

We have adequate organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet can be guaranteed to be 100% secure.

What are your rights?

Depending on where you are located geographically, applicable privacy law may mean you have certain rights regarding your personal information.

How do you exercise your rights?

The easiest way is by contacting us at support@ollacart.com. We will consider and act upon any request in accordance with applicable data protection laws.

1. What information do we collect?

Personal information you disclose to us

In short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, participate in activities on the Services, or otherwise when you contact us.

The personal information we collect may include the following:

• Email addresses
• Mailing addresses
• Contact preferences
• Shipping information
• Clothing, shoe, and dress measurements or sizing
• Clothing and style preferences
• Purchase preferences
• Names

Sensitive information. We do not process sensitive information.

Payment data. OllaCart does not take payments or collect card numbers. When you buy something you found on OllaCart, you complete the purchase on the retailer's own website, and the retailer collects your payment and delivery details under its own privacy policy. If we offer paid features in the future, payment data will be handled by a third-party payment processor, and we will update this notice to name it.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

In short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

2. How do we process your information?

In short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including to facilitate account creation and authentication, to deliver and facilitate delivery of Services to you, to respond to your inquiries and offer support, to send administrative information such as updates about our terms and policies, to protect our Services (including monitoring for fraudulent activity), and to save or protect an individual's vital interest.

3. What legal bases do we rely on to process your information?

In short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e. legal basis) to do so under applicable law, such as with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.

4. When and with whom do we share your personal information?

In short: We may share information in specific situations described in this section and/or with the following categories of third parties.

We have contracts in place with our third parties, designed to help safeguard your personal information. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will also not share your personal information with any organization apart from us. They also commit to protect the data they hold on our behalf and to retain it for the period we instruct.

The categories of third parties we may share personal information with are:

• Affiliate marketing programs and networks that pay OllaCart commissions on purchases (for example, the Amazon Services LLC Associates Program, Skimlinks, Rakuten Advertising, CJ, Impact, Awin, and ShareASale, as well as retailers we partner with directly)
• Data analytics services
• Sales & marketing tools
• User account registration & authentication services

How OllaCart earns money: OllaCart is free to use. We earn money through affiliate marketing — when you click through from OllaCart to a retailer and buy something, the retailer (directly or through an affiliate network) may pay us a commission. This does not change the price you pay. To get credited, we keep a record of clicks and of the purchase reports the networks send us (the store, the order amount and commission, and the click reference code). If you share a cart or list with others, we may use the same records to credit you a portion of the commission on purchases made through your share, depending on your account tier, and to prevent fraudulent or self-referred clicks.

Affiliate links and cookies: when you open a retailer's page from OllaCart (for example, "Buy Now", or checkout for items bought on the store's own site), we record the click (the product, the time, and your account if you are signed in) and may send you to the retailer through an affiliate link. The retailer or affiliate program may then set its own cookie in your browser to credit the purchase. That cookie is set by the retailer's site, not OllaCart, and is governed by their privacy policy; you can clear or block it in your browser settings. We do not share your name, email address, or cart contents with affiliate programs. Our browser extension and iOS app do not insert affiliate tags into other websites. See our Affiliate Disclosure at ollacart.com/affiliate-disclosure.

We may also need to share your personal information in the following situations: Business transfers — we may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. Affiliates — we may share your information with our affiliates, in which case we will require those affiliates to honor this privacy notice. Business partners — we may share your information with our business partners to offer you certain products, services, or promotions.

5. What is our stance on third-party websites?

In short: We are not responsible for the safety of any information that you share with third parties that we may link to, or who advertise on our Services, but who are not affiliated with our Services.

The Services may link to third-party websites, online services, or mobile applications and/or contain advertisements from third parties that are not affiliated with us. We do not make any guarantee regarding any such third parties, and we will not be liable for any loss or damage caused by the use of such third-party websites, services, or applications. Any data collected by third parties is not covered by this privacy notice — you should review their policies directly.

6. How long do we keep your information?

In short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice, unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law. No purpose in this notice will require us to keep your personal information for longer than the period of time in which you have an account with us. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible, securely store it and isolate it from further processing until deletion is possible.

7. How do we keep your information safe?

In short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise that unauthorized third parties will never be able to defeat our security. Transmission of personal information to and from our Services is at your own risk.

8. What are your privacy rights?

In short: In some regions, such as the European Economic Area (EEA), United Kingdom (UK), and Canada, you have rights that allow you greater access to and control over your personal information. You may review, change, or terminate your account at any time.

In some regions, you have certain rights under applicable data protection laws, including the right to (i) request access to and a copy of your personal information, (ii) request rectification or erasure, (iii) restrict processing of your personal information, and (iv) if applicable, data portability. You may also have the right to object to processing. You can make such a request using the contact details in the “How can you contact us” section below.

If you are located in the EEA or UK and believe we are unlawfully processing your personal information, you have the right to complain to your local data protection supervisory authority. If you are located in Switzerland, contact details for the data protection authority are available at edoeb.admin.ch.

Withdrawing your consent: if we are relying on your consent to process your information, you have the right to withdraw it at any time via the contact details below. This will not affect the lawfulness of processing before the withdrawal.

Opting out of marketing communications: you can unsubscribe from marketing emails at any time using the link in those emails, or by contacting us. We may still send you service-related messages necessary for your account.

Account information: to review, change, or terminate your account, contact us using the details below. Upon a termination request we will deactivate or delete your account, though we may retain some information to prevent fraud, troubleshoot, assist investigations, or comply with legal requirements.

9. Controls for Do-Not-Track features

Most web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. No uniform technology standard for recognizing and implementing DNT signals has been finalized, so we do not currently respond to DNT browser signals. If a standard is adopted that we must follow, we will update this notice.

10. Do California residents have specific privacy rights?

In short: Yes, if you are a resident of California, you are granted specific rights regarding access to your personal information.

California Civil Code Section 1798.83 (“Shine the Light”) permits California residents to request, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names/addresses of those third parties. If you are under 18, reside in California, and have a registered account, you have the right to request removal of unwanted data you publicly post — contact us and include the email associated with your account and a statement that you reside in California. We will ensure the data is not publicly displayed, though it may not be completely removed from all systems (e.g. backups).

CCPA privacy notice

The California Code of Regulations defines a “resident” as (1) every individual who is in the State of California for other than a temporary or transitory purpose, and (2) every individual domiciled in California who is outside the state for a temporary or transitory purpose. If this applies to you, we must adhere to certain rights and obligations regarding your personal information.

How do we use and share your personal information? OllaCart Incorporated collects personal information through your account and the products you save, analytics cookies (Hotjar) that help us understand how the site is used, and click redirects to merchant and retail websites (the affiliate links you click through to a retailer). We do not use advertising or social media tracking pixels.

Will your information be shared with anyone else? We may disclose your personal information to our service providers under a written contract; each is a for-profit entity that processes information on our behalf. We may also use your personal information for our own business purposes, such as internal research for technological development — this is not considered “selling.”

OllaCart Incorporated has not sold personal information, and has not shared it for cross-context behavioral advertising, in the preceding twelve months. When you click through to a retailer, the retailer or its affiliate program learns that the visit came from OllaCart, along with a click reference code we use to credit the commission. That code does not contain your name, email address, or cart contents.

Your rights with respect to your personal data

Right to request deletion — you can ask us to delete your personal information, subject to certain legal exceptions.

Right to be informed — you have a right to know whether we collect and use your personal information, the categories collected, the purposes, whether we sell it, and the categories of third parties involved.

Right to non-discrimination — we will not discriminate against you for exercising your privacy rights.

Verification process — upon receiving your request we will need to verify your identity, which may require you to provide information matching what we already have on file.

Other rights — you may object to or request correction of the processing of your personal data, and may designate an authorized agent to make a request on your behalf (subject to proof of authorization).

To exercise these rights, contact us at support@ollacart.com or using the details at the bottom of this page.

11. Do we make updates to this notice?

In short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by an updated “Last updated” date, and will be effective as soon as it is accessible. If we make material changes, we may notify you by prominently posting a notice or by directly sending you a notification.

12. How can you contact us about this notice?

If you have questions or comments about this notice, you may contact our Data Protection Officer by email at support@ollacart.com, or by post at:

13. How can you review, update, or delete the data we collect from you?

You have the right to request access to the personal information we collect from you, change that information, or delete it. To request to review, update, or delete your personal information, please visit ollacart.com/personal-data or contact us at support@ollacart.com.