Privacy

We collect only what is necessary to serve you. When you place an order or interact with oibe, that includes:

• Your name — to address your order and communicate with you
• Your email address — to send you order information and updates
• Your shipping address — to deliver your kit
• Your phone number — to reach you about fulfillment if needed
• Your kid's name and month and year of birth — to confirm the kit is appropriate for their age and to distinguish between kids in the same household. Collected when you confirm your shipment, not at checkout.
• The reason for a refund, if you choose to share it — to understand what we can improve. This is not a condition of the refund.
• Payment reference information from Stripe — to verify and support your transaction
• Communications you send us — to respond to you and improve our service

Your card number and financial details are handled entirely by Stripe and never touch our systems. Stripe is PCI compliant and purpose-built for secure payment processing.

We collect your kid's name and their month and year of birth — to confirm the kit is appropriate for their age and to distinguish between kids in the same household. A family with two kids at different ages may have two active kits; the name ensures each kid's kit is tracked correctly under your account. We do not create an account for your kid. Your kid is never the data subject in our system. You are.

When confirming your shipment, we ask you to confirm that you are the parent or legal guardian of the kid this kit is for. We rely on that confirmation as our lawful basis for collecting your kid's information. That information is used solely to support your order — never for advertising, analytics, or any other purpose. It is deleted when you request deletion of your account.

We process your personal data on the following bases:

• Contract — to fulfill your order and deliver your kit
• Legitimate interest — to understand how our site and product can be improved
• Consent — for any communications you explicitly opt into
• Your explicit consent — for your kid's birth month and year, given when you confirm your shipment

You can withdraw consent for communications at any time. Withdrawing consent for kid data requires a deletion request, which we will honor promptly.

Every piece of information we collect has a specific, stated purpose. We use your information to fulfill your order, manage your account, communicate about your kit, and improve the product itself. We do not use your information for any purpose beyond what is described here. We do not collect data speculatively or hold it for uses we haven't defined.

We use Microsoft Clarity and Google Analytics to understand how people move through this site — where they click, where they pause, what's working and what isn't. Neither service has access to your name or payment information. We use this data solely to make the site clearer and easier to use. We do not use it for behavioral advertising or to track you across other sites or platforms.

We use Stripe to process payments and handle all payment data. We use Klaviyo to send fulfillment notifications — including the link to confirm your shipment address — via email and SMS. We use third-party analytics tools to understand how people use our site. Each provider receives only the data necessary to perform their specific function. We do not authorize any of them to use your information for their own purposes.

By providing your phone number, you consent to receive text messages from oibe about your order — including your kit confirmation link, shipping updates, and delivery notifications. These are transactional messages tied to your order, not marketing.

Message frequency varies by order status — typically 2–4 messages per order. Message and data rates may apply. Reply STOP to any message to opt out at any time. Reply HELP for assistance, or email us. Opting out will not affect your order or your ability to receive email communications.

• Sell your data to anyone, ever
• Use your information for behavioral or interest-based advertising
• Share your information with third parties for their own marketing purposes
• Track you across other websites or platforms
• Collect more than we need for the purpose stated
• Use data collected from families to work against the interests of kids
• Use behavioral advertising toward kids — ever, under any circumstance
• Do anything with your data that would make you feel used

You have the right to know exactly what information we hold about you. You have the right to correct it if it's wrong. You have the right to request that we delete it. You have the right to receive a copy of your data in a portable format. You have the right to restrict how we process it. And you have the right to object to any use of your data that doesn't feel right to you.

These rights apply to all customers — not just those in jurisdictions where they are legally required. To exercise any of them, email us. We will respond promptly and without friction.

We keep your information only for as long as it serves the purpose for which it was collected. When that purpose ends, we delete it — unless we are legally required to retain it, such as transaction records for tax compliance. We do not hold data indefinitely or speculatively.

We use industry-standard security practices to protect your data. In the unlikely event of a security incident that affects your information, we will notify you promptly, tell you what happened, and take immediate steps to address it. We will not minimize, delay, or obscure what occurred.

If we make any meaningful change to how we collect or use your data, we will tell you what changed, why it changed, and what it means for you — before it takes effect, not after. You will always have the option to object or request deletion. We will update the date below each time this policy changes.

Any disputes related to privacy are governed by the laws of the State of Maryland. We'd rather just fix it though. Reach us first.

hey@oibe.com