Privacy policy

Privacy Policy

Effective Date: April 22, 2026

1. Introduction
   This Privacy Policy explains how Ocampo & Villegas LLC, doing business as DivineBodys (“DivineBodys,” “we,” “us,” or “our”) collects, uses, shares, and protects your personal information when you visit divinebodys.com (the “Site”), purchase our products, subscribe to our communications, or otherwise interact with us.
   We are the controller of the personal information collected through the Site. Our store is hosted on Shopify Inc., which acts as a processor on our behalf.
   By using the Site, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Site.
2. Who We Are
   DivineBodys
   A brand of Ocampo & Villegas LLC
   24 Mercer Street, Suite 205
   New York, NY 10013
   United States
   Email: support@divinebodys.com
3. Information We Collect
   We collect personal information that you provide directly to us, information we collect automatically when you use the Site, and information we receive from third parties.
   Information You Provide to Us
   • Contact information: name, email address, shipping address, billing address, and phone number (if you choose to provide one)
   • Account information: username, password, and account preferences
   • Payment information: credit or debit card number, expiration date, and billing ZIP code, processed securely through our payment processors. We do not store full payment card numbers on our systems.
   • Order and transaction information: items purchased, order history, and return or refund requests
   • Communications: messages you send to customer support, product reviews, and newsletter signups
   • Marketing preferences: whether you have subscribed to or unsubscribed from our emails
   Information We Collect Automatically
   • Device and browser information: IP address, browser type, operating system, device identifiers, and referring URLs
   • Usage information: pages viewed, products viewed, items added to cart, time spent on the Site, links clicked, and session duration
   • Approximate location information: derived from your IP address
   • Cookies and similar technologies: see Section 6 below
   Information We Receive from Third Parties
   • Social media platforms, if you interact with us via social channels or use a social login
   • Advertising and analytics partners
   • Payment processors, fraud prevention services, and shipping carriers
   • Publicly available sources, where applicable
4. How We Use Your Information
   We use your personal information for the following purposes:
   • To provide the Site and process your orders — including creating your account, processing payments, fulfilling orders, arranging shipping, handling returns and refunds, and providing customer support
   • To communicate with you — including sending order confirmations, shipping updates, responses to inquiries, and important notices about our Site or policies
   • To market our products — including sending promotional emails (with your consent where required), showing you targeted advertisements, and personalizing product recommendations
   • To improve our Site and products — including analyzing how customers use the Site, identifying trends, and measuring the effectiveness of our marketing
   • To protect our business — including detecting and preventing fraud, unauthorized access, and other security issues, and enforcing our Terms of Service
   • To comply with legal obligations — including responding to lawful requests from authorities and complying with tax and accounting requirements
5. How We Share Your Information
   We do not sell your personal information for money. However, some of our marketing and analytics activities may qualify as “sharing” or “sale” under certain state privacy laws (such as the California Consumer Privacy Act). See Section 7 for your opt-out rights.
   We share personal information with the following categories of recipients:
   • Shopify Inc., our e-commerce platform provider, which hosts the Site and processes orders on our behalf
   • Payment processors (such as Shopify Payments, PayPal, Apple Pay, Google Pay, and Shop Pay) to process your payments
   • Fulfillment and shipping partners, which may include third-party warehouses (some of which may be located outside the United States), to prepare and deliver your orders
   • Email marketing and customer service providers, to send communications and respond to your inquiries
   • Analytics providers, such as Google Analytics, to understand how the Site is used
   • Advertising partners, such as Google, Meta (Facebook and Instagram), and other platforms, to show you relevant ads and measure ad performance
   • Professional advisors, such as accountants and attorneys, when needed
   • Government authorities or other third parties, where required by law, court order, or to protect our rights or the safety of others
   • In the event of a business transaction — such as a merger, acquisition, financing, or sale of assets — your information may be transferred as part of that transaction
   We do not knowingly sell or share personal information about individuals under 16 years of age.
6. Cookies and Similar Tracking Technologies
   Our Site uses cookies, pixels, and similar technologies to recognize your device, remember your preferences, understand how you use the Site, and deliver relevant advertising.
   Types of Cookies We Use
   • Strictly necessary cookies — required for the Site to function (for example, cart functionality and login sessions)
   • Performance and analytics cookies — help us understand Site usage and improve performance
   • Functional cookies — remember your preferences and settings
   • Advertising and targeting cookies — deliver relevant ads and measure campaign performance
   Managing Cookies
   You can manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a cookie is set. Please note that disabling certain cookies may affect the functionality of the Site.
   Where required by law, we display a cookie consent banner that allows you to accept or reject non-essential cookies.
7. Your Privacy Rights
   Depending on where you live, you may have certain rights regarding your personal information. We will honor all valid requests to the extent required by applicable law.
   Rights Available to All Users
   • Access: request a copy of the personal information we hold about you
   • Correction: request correction of inaccurate information
   • Deletion: request deletion of your personal information (subject to legal exceptions)
   • Marketing opt-out: unsubscribe from marketing emails at any time using the unsubscribe link at the bottom of any marketing email, or by emailing us
   To exercise these rights, email support@divinebodys.com with the subject line “Privacy Request.” Please include enough detail for us to verify your identity and locate your information.
   California Residents
   If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
   • Right to Know: what personal information we have collected, used, disclosed, or shared
   • Right to Delete: personal information we have collected from you
   • Right to Correct: inaccurate personal information we maintain about you
   • Right to Opt-Out of Sale or Sharing: we do not sell personal information for money, but some of our targeted advertising activities may constitute “sharing” under the CCPA. You can opt out by emailing support@divinebodys.com with “Do Not Sell or Share” in the subject line, or by enabling the Global Privacy Control (GPC) signal in your browser.
   • Right to Limit Use of Sensitive Personal Information: we do not use or disclose sensitive personal information for purposes that trigger this right.
   • Right to Non-Discrimination: we will not discriminate against you for exercising your privacy rights.
   You may designate an authorized agent to make requests on your behalf. We may require verification of your identity and of your agent’s authority before fulfilling requests.
   EEA, UK, and Switzerland Residents
   If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR) and equivalent laws:
   • Right of access, rectification, and erasure
   • Right to restrict or object to processing
   • Right to data portability
   • Right to withdraw consent (where processing is based on consent)
   • Right to lodge a complaint with your local data protection authority
   Our legal bases for processing include performance of a contract, compliance with legal obligations, our legitimate interests (such as running and improving our business), and your consent where required.
   Global Privacy Control
   We recognize and honor the Global Privacy Control (GPC) signal. If your browser transmits a GPC signal when visiting our Site, we will treat it as a valid opt-out request for targeted advertising and the sharing of personal information, for the device and browser you are using. Learn more at globalprivacycontrol.org.
   
8. Data Retention
   We retain personal information only as long as necessary for the purposes described in this Privacy Policy, to comply with legal obligations, resolve disputes, and enforce our agreements.
   General retention periods:
   • Account information: for the lifetime of your account, plus one year after closure
   • Order and transaction information: seven years, to comply with tax and accounting obligations
   • Customer support records: three years from the date of your last interaction
   • Marketing subscriber information: until you unsubscribe, plus a short period to honor and record the opt-out
   • Website analytics data: approximately 14 months, in line with our analytics provider’s default settings
   When personal information is no longer needed, we either delete it or anonymize it so it can no longer be linked to you.
   
9. Data Security
   We implement commercially reasonable technical and organizational measures to protect your personal information, including encryption in transit (HTTPS), secure payment processing through certified payment providers, and access controls.
   No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You share personal information with us at your own risk. If you believe your information has been compromised, please contact us immediately.
10. International Data Transfers
    DivineBodys is based in the United States. Your personal information may be transferred to, stored in, and processed in the United States and other countries where our service providers operate. These countries may have data protection laws different from those in your country.
    When we transfer personal information from the EEA, UK, or Switzerland to a country that has not been recognized as providing adequate protection, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.
11. Third-Party Links and Services
    Our Site may contain links to third-party websites, services, and social media platforms. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you use.
12. Children’s Privacy
    Our Site is intended for adults. We do not knowingly collect personal information from children under 13 (or the equivalent minimum age in your jurisdiction). If we learn we have collected personal information from a child without verified parental consent, we will delete it promptly.
    If you believe a child has provided us with personal information, please contact us at support@divinebodys.com.
13. Changes to This Policy
    We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the “Effective Date” at the top of this policy and, where required, notify you by email or prominent notice on the Site.
    We encourage you to review this policy periodically.
    
    
14. Contact Us
    If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:
15. DivineBodys A brand of Ocampo & Villegas LLC
    24 Mercer Street, Suite 205
    New York, NY 10013
    United States
    Email: support@divinebodys.com
    Please allow up to 30 days for us to respond. We may need to verify your identity before fulfilling certain requests.