Privacy Policy

This Privacy Policy serves to inform you of our policies and procedures regarding the collection, use and disclosure of the information we receive when you access and use our website, services, software, content, and all other products and services (collectively, the "Services") owned, controlled or offered by Afrosavant Digital Technologies Limited, trading as Ouish.

Ouish believes that the privacy of its users is paramount and strives to use Personal Information only in ways outlined in this Privacy Policy. By using the Services, you agree to this Privacy Policy and our Terms of Service.

PLEASE DO NOT USE OR ACCESS THE SERVICES IF YOU DO NOT AGREE TO THIS PRIVACY POLICY.

1. What We Mean by Personal Information

For purposes of this Privacy Policy, "Personal Information" means any information from or about a person that either identifies that person directly or that makes that person identifiable when it is combined with other information from or about that person from any source.

2. Information We Collect

Information You Provide To Us

When you use the Services or otherwise communicate with us, we collect information that you provide to us directly. You can choose not to provide requested information; however, this may limit your ability to use or access the Services.

The information you provide may include:

• Information for completing transactions as a gifter, including your name, email, and other details you provide
• Account registration information as a wishlist creator, including your name, email, mailing address, and other details
• Contact information when reaching out via email or our "Contact" section
• Support channel information through email or social media
• Newsletter subscription information, including your email and topic preferences
• Business relationship information for customers, suppliers or prospects
• Transaction and limited (non-PCI) payment data
• Other information you may share, such as recruitment or job application details

Automatically Collected Information

Most data we collect is technical in nature and collected automatically through APIs, SDKs, cookies and similar technologies. This may include:

• Usage data: search terms entered and pages viewed
• Network and internet information: URLs, IP addresses, bounce rates, location information
• Cookie information: see the "How We Use Cookies" section below
• Advertising data: browsing behaviour, interests, and ad interaction data for personalised advertising

We use several analytics and tracking services:

• Google Analytics & Google Tag Manager: Collect data such as visit times, pages visited, and device information. You can opt out using Google's browser plugin.
• RudderStack: Provides event tracking and product analytics to help us understand user behaviour and improve our services.
• Meta Pixel (Facebook): Tracks user interactions and browsing behaviour to enable personalised advertising and measure ad campaign performance across Meta platforms.
• Stripe: Our payment processor. Stripe collects and processes payment information on our behalf in accordance with PCI DSS standards. We do not store full card details.
• Paystack: Our payment processor. Paystack collects and processes payment information on our behalf in accordance with PCI DSS standards. We do not store full card details.
• CIRCLE: Processes USDC and other digital currencies in accordance with PCI DSS standards; we do not store wallet addresses and other details.

Information You Post on the Services

Information you provide through chat, forums, or profile customisation will be available to the public. Exercise caution when sharing Personal Information through these tools.

Note: A creator's delivery address and email for receiving gifts will not be available to the public or gifters.

How We Use Cookies and Other Technologies

We use cookies to measure page access and feature usage, enabling us to continuously improve our Site. We also use cookies for advertising purposes to show you relevant content and measure advertising effectiveness.

We and our service providers may also use "pixel tags," "web beacons," "clear GIFs," or similar means in connection with the Services and HTML-formatted email messages to track user actions, determine marketing campaign success, and compile aggregate statistics about Site usage and response rates.

3. Use of Collected Information

We use the information you provide to us for the following purposes:

• Provide and improve our Services, including payment processing
• Administer your account and personalise your experience
• Send service announcements and feature updates
• Provide newsletters and promotional materials
• Work with third-party service providers and advertising partners to deliver personalised ads and measure advertising effectiveness
• Enforce our Terms of Service and resolve disputes
• Comply with legal requirements and protect rights and safety
• Obtain feedback about our Site and Services

Additionally, we use automatically collected information to monitor and analyse Service usage, improve our Site and Services, generate useful data about user behaviour, and verify that users meet criteria for processing requests.

4. Third Parties We Share Personal Information With

We may disclose Personal Information with the following categories of third parties:

• Service providers (payment processors including Stripe, web hosting, data storage, marketing, communications, and advertising partners including Meta)
• Public authorities and law enforcement when legally required
• Subsidiaries, affiliates, or subsequent owners in corporate transactions
• Third-party merchants who need shipping information for order fulfilment
• Operational partners including staff, advisors, and consultants

5. Links to Other Websites

Our Services may include links to third-party websites and social media services. This Privacy Policy applies only to our Site and Services. We do not control third-party services, and your interactions with them are governed by their own privacy policies. We encourage you to read their privacy policies before using their services.

6. Security

We understand the importance of privacy and security and use industry-standard security technologies and procedures to protect your Personal Information. We train our employees on privacy and security issues. However, we cannot guarantee that unauthorised third parties will never overcome these measures, and we do not promise absolute protection from unauthorised disclosure or use.

7. Do Not Track Signals and Similar Mechanisms

Some web browsers transmit "do-not-track" signals to websites. Due to differences in how browsers implement this feature, we currently do not take action in response to these signals.

8. Managing Your Privacy

You can correct, terminate, or delete your Account information by following instructions on the Services or by emailing hello@ouish.co. If you cancel your Account or request deletion, we will limit access to your Personal Information and delete accessible information within 14 business days.

9. Your Rights

We help ensure you can exercise your rights regarding Personal Information in accordance with applicable law. If you would like to access, review, erase, withdraw consent, object to, or restrict processing of your Personal Data, submit a request to hello@ouish.co.

Depending on where you live, you may have the right to lodge a complaint with a supervisory authority. We encourage you to reach out to us first so we can address your concerns directly.

10. Your GDPR, CCPA, and NDPR Rights

We comply with applicable privacy laws, including the EU's General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Nigeria's Data Protection Regulation (NDPR). We do not share your Personal Information with third parties for their direct marketing purposes.

Requests to Know

You have the right to request that we disclose:

• Categories of Personal Information we've collected about you
• Categories of Personal Information we've sold or disclosed for business purposes
• Sources from which we've collected Personal Information
• Business or commercial purposes for collecting Personal Information
• Categories of Personal Information sold or shared and third parties involved
• Specific pieces of Personal Information collected

We do not sell, and have not in the prior 12 months sold, Personal Information about California residents or any other users of the Services.

Requests to Delete

You have the right to request deletion of any Personal Information we've collected about you. We will comply unless otherwise required or authorised by law.

Authorised Agents

You may designate an authorised agent to make requests on your behalf. Written permission is required, and we may require direct identity verification.

Methods for Submitting Requests

You may submit requests via email at hello@ouish.co. We will acknowledge receipt within 14 days and respond within 45 days. We may request additional information to verify your identity.

The Right to Non-Discrimination

You have the right not to be discriminated against for exercising your privacy rights. We will not:

• Deny you goods or services
• Charge different prices or rates for goods or services
• Provide different levels or quality of goods or services
• Suggest different pricing or service levels

11. Nigeria Data Protection Regulation (NDPR)

For users based in Nigeria, we comply with the Nigeria Data Protection Regulation (NDPR) issued by the National Information Technology Development Agency (NITDA). In accordance with the NDPR:

• We process your Personal Data only with a lawful basis, such as your consent, the performance of a contract, or our legitimate interests
• We ensure that any third parties we engage to process data on our behalf are bound by appropriate data processing agreements
• We will notify relevant authorities and affected users in the event of a data breach as required by law
• You have the right to request access to, rectification of, erasure of, or objection to the processing of your Personal Data

Requests related to your NDPR rights may be submitted to hello@ouish.co.

12. International Transfers of Personal Information

For GDPR purposes, Afrosavant Digital Technologies Limited (trading as Ouish) is the Data Controller. Our registered address is 63 East Lake Street MDA City Apt. Unit 1505, Chicago, IL 60601, United States.

Ouish is based in the United States, so Personal Data may be transferred to our U.S. offices and third-party service providers. We use the EU's approved Standard Contractual Clauses for transfers of Personal Data from the European Economic Area to third countries.

13. Data Retention

We keep Personal Information for as long as needed to fulfil collection purposes, provide services, handle legal claims, and comply with applicable laws. Thereafter, we delete or de-identify Personal Information, unless legally required to retain it.

14. Changes to the Privacy Policy

Our Privacy Policy is periodically reviewed and enhanced. Changes will be reflected in the "Last Updated" date above. We will endeavour to notify you of changes by email. Your continued use of the Services after any change constitutes acceptance of such change.

15. Contacting Us

If you have any concerns or questions about this Privacy Policy, please contact us at:

Afrosavant Digital Technologies Limited (trading as Ouish)
63 East Lake Street MDA City Apt. Unit 1505
Chicago, IL 60601, United States

Email: hello@ouish.co
Website: https://ouish.co