Privacy policy.

Who we are

Ouva Labs is a brand owned and operated by 3point41 Ventures LLC. In this policy, "we," "us," and "our" refer to 3point41 Ventures LLC, which runs the Ouva Labs brand and the ouvalabs.com website. We're the data controller for the personal information collected through this site. For privacy questions or to exercise your rights below, write to team@ouvalabs.com.

What we collect

Information you give us

• Order info: name, shipping address, email, items ordered, and order confirmation. Used to fulfill your order.
• Payment information: handled by Shopify Payments and the underlying payment processor. We don't store your full card number.
• Newsletter signups: just your email address.
• Contact form submissions: your name, email, topic, and message.

Information collected automatically

• An HTTP-only cart cookie tied to your Shopify cart id. Persists for about 30 days so your cart survives between visits.
• Server logs from Vercel: IP address, user agent, referrer, and request path. Used for security, debugging, and abuse prevention. Retained for a short window.

Information from third parties

When you complete checkout, Shopify creates a customer record and shares the order confirmation back with us so we can fulfill it.

How we use it

• Fulfill your order and send transactional emails (order confirmations, shipping notifications).
• Respond to your contact form messages and customer service questions.
• Send marketing emails to subscribers. You can unsubscribe at any time.
• Prevent fraud, abuse, and security incidents.
• Comply with legal obligations like tax records.
• Improve the site over time.

Who we share it with

We use a small set of trusted service providers. Each one only sees the data they need.

• Shopify: catalog, cart, checkout, payments, customer records.
• Shopify Payments and our underlying payment processor: handle card data through PCI-compliant systems. We never see your full card number.
• Formspree: receives our newsletter signups and contact form submissions.
• Vercel: hosts the site and produces server logs.

We do not sell or rent your data. We do not share it with advertisers. We may disclose information if legally required (subpoena, court order) or to protect rights and safety.

Cookies

• Essential: an HTTP-only cart cookie we set so your cart persists between visits.
• Checkout: Shopify sets its own cookies on the checkout subdomain when you proceed to pay.
• We do not run analytics, advertising trackers, or remarketing pixels on this site today.

Your rights

You can ask us to access, correct, or delete your data, or opt out of marketing emails, at any time. Email team@ouvalabs.com.

California (CCPA and CPRA)

California residents have additional rights: to know what personal information we collect, to delete it, to correct it, to limit the use of sensitive personal information, and to opt out of sale (we don't sell). We respond to verifiable requests within 45 days, with a 45-day extension if needed. We won't discriminate against you for exercising these rights.

EU and UK (GDPR and UK GDPR)

If you visit from the EU or UK, you have the right to access, rectify, erase, restrict, and port your data, and to object to processing. Lawful bases we rely on: consent (newsletter), contract (orders), and legitimate interest (fraud prevention, server logs). We honor verifiable requests within 30 days.

Marketing emails

We only send marketing emails to people who opted in. Every email has an unsubscribe link, and unsubscribing is honored within a few days. You can also email team@ouvalabs.com to remove yourself from the list.

Children's privacy

This site is not directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child has submitted information to us, write to team@ouvalabs.com and we'll delete it.

Data retention

• Order records: kept as long as required by US tax law (typically 7 years).
• Newsletter list: until you unsubscribe.
• Contact form submissions: up to 24 months, unless you ask us to delete sooner.
• Server logs: short retention window for security and debugging.

Security

We use reasonable measures to protect your information: HTTPS everywhere, HTTP-only cart cookies, payment data isolated to PCI-compliant systems run by Shopify, no in-house analytics or advertising trackers. No system is perfect; if a breach happens that affects your data, we'll notify you as required by law.

International transfers

We sell only within the United States. If you visit our site from outside the US (including the EU or UK) and submit information, that data flows to our US-based service providers. Where required, we rely on standard contractual clauses or equivalent safeguards.

Changes to this policy

We update this policy as the site evolves. The effective date at the top tells you when the current version was published. Material changes will be noted in our newsletter.

Contact

Privacy questions, data requests, or unsubscribes: team@ouvalabs.com.