Privacy Policy
Last Updated: September 2026
This Privacy Policy describes how Oneillite (“we,” “us,” or “our”) collects, uses, discloses, and otherwise processes personal information through the website located at oneillite.xyz and the oneillite.xyz platform and services (collectively, the “Services”). This Policy applies to visitors, users, customers, and other individuals who interact with our Services in the United States. By accessing or using the Services, you acknowledge that you have read and understand this Privacy Policy and agree to our information practices as described herein. This Policy is incorporated by reference into our Terms of Service.
Because the United States does not have a single federal omnibus privacy statute, our practices are governed by sector-specific laws such as the Children’s Online Privacy Protection Act, 15 U.S.C. §§ 6501-6506 (COPPA), the Health Insurance Portability and Accountability Act (HIPAA) where applicable, and the Gramm-Leach-Bliley Act, 15 U.S.C. §§ 6801-6809 (GLBA) for financial institutions, as well as the Federal Trade Commission Act § 5, 15 U.S.C. § 45, and the rapidly evolving patchwork of state comprehensive privacy laws. Depending on your state of residence, you may have additional rights under the California Consumer Privacy Act as amended by the CPRA (Cal. Civ. Code § 1798.100 et seq.), the Virginia Consumer Data Protection Act (Va. Code § 59.1-575 et seq.), the Colorado Privacy Act (C.R.S. § 6-1-1300 et seq.), the Connecticut Data Privacy Act (Conn. Gen. Stat. § 42-515 et seq.), the Utah Consumer Privacy Act (Utah Code § 13-11-101 et seq.), and other State comprehensive privacy laws (TX, OR, MT, FL, TN, etc.).
1. Information We Collect
Categories of Personal Information
We may collect personal information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. The categories we collect may include: identifiers such as real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers; commercial information, including records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies; Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our Services; geolocation data; professional or employment-related information; and inferences drawn from any of the foregoing to create a profile about your preferences, characteristics, behavior, and abilities.
Sensitive Personal Information
In limited circumstances, and only where necessary to provide the Services or comply with legal obligations, we may collect categories of information that are classified as “sensitive” under applicable state laws. This may include government-issued identifiers, precise geolocation, account log-in credentials, racial or ethnic origin, or health-related information. We collect sensitive personal information only for permissible business purposes and, where required by law, with appropriate notice and consent or as otherwise authorized by law, such as under the Health Insurance Portability and Accountability Act (HIPAA) where applicable.
Sources of Information
We collect personal information directly from you when you create an account, complete forms, make purchases, subscribe to communications, participate in surveys, or contact customer support. We also collect information automatically through cookies, web beacons, pixels, log files, and similar technologies, as described more fully in our Cookie Policy. In addition, we may receive information from third-party service providers, analytics vendors, advertising networks, business partners, publicly available sources, and social media platforms.
2. How We Use Your Information
Operational and Service Purposes
We use the personal information we collect to operate, maintain, improve, and provide the Services; to process transactions and fulfill orders; to authenticate users and manage accounts; to provide customer support and respond to inquiries; to communicate with you about your account, transactions, security updates, and policy changes; and to enforce our Terms of Service and protect our rights, property, and safety and that of our users and the public.
Analytics, Marketing, and Personalization
We may use personal information to analyze usage trends, monitor the effectiveness of our Services, conduct research and development, personalize content and experiences, and deliver marketing and promotional communications that we believe may be of interest to you. Where required by applicable law, such as under the California Consumer Privacy Act as amended by the CPRA (Cal. Civ. Code § 1798.100 et seq.) and State comprehensive privacy laws (TX, OR, MT, FL, TN, etc.), we honor opt-out preferences for targeted advertising, sale, sharing, and profiling.
Legal and Business Purposes
We may use your information to comply with applicable legal obligations, respond to lawful requests from public authorities, cooperate with law enforcement, prevent fraud and abuse, and pursue available remedies or limit damages we may sustain. We may also use personal information in connection with business transactions such as mergers, acquisitions, financing, reorganizations, bankruptcies, or sales of assets, in which case personal information may be transferred as a business asset subject to reasonable privacy protections.
3. Information Sharing
Categories of Recipients
We may disclose personal information to our affiliates and subsidiaries; service providers and contractors who perform functions on our behalf, such as payment processing, data analysis, email delivery, hosting, customer service, and marketing assistance; analytics and advertising partners; professional advisors; and government or law enforcement entities when required by law or to protect our rights. We require our service providers and contractors to use personal information only for the purposes for which it was disclosed and to implement appropriate security measures.
No Sale of Personal Information
Oneillite does not sell personal information for monetary consideration. However, certain disclosures of personal information to third-party advertising, analytics, and technology partners for cross-context behavioral advertising or other purposes may be treated as a “sale” or “sharing” of personal information under certain state privacy laws, including the California Consumer Privacy Act as amended by the CPRA (Cal. Civ. Code § 1798.120, § 1798.135). Where such treatment applies, we provide applicable notice and honor consumer opt-out rights, including through the Global Privacy Control signal.
Legal Disclosures and Business Transfers
We may disclose personal information if we believe in good faith that such disclosure is necessary to comply with a legal obligation, protect and defend our rights or property, prevent or investigate possible wrongdoing in connection with the Services, protect the personal safety of users or the public, or protect against legal liability. In the event of a merger, acquisition, or sale of all or a portion of our assets, personal information may be among the assets transferred, and we will require the transferee to honor this Privacy Policy.
4. Cookies and Tracking
Tracking Technologies
We and our service providers use cookies, web beacons, pixels, local storage, device identifiers, session-replay technologies, and other tracking mechanisms to collect information about your interactions with the Services. These technologies help us remember your preferences, authenticate users, analyze traffic, understand how users engage with the Services, and deliver relevant advertising. For more detail, please review our Cookie Policy.
Your Choices
You can manage cookies through your browser settings, device controls, and industry opt-out tools such as the Digital Advertising Alliance (DAA) and Network Advertising Initiative (NAI). Under the California Consumer Privacy Act as amended by the CPRA — “Do Not Sell or Share My Personal Information” / Global Privacy Control obligations (Cal. Civ. Code § 1798.120, § 1798.135) — California residents may opt out of the sale or sharing of personal information and the use of sensitive personal information by clicking the “Do Not Sell or Share My Personal Information” link or by transmitting an opt-out preference signal such as the Global Privacy Control. The Electronic Communications Privacy Act, 18 U.S.C. § 2511, and State wiretapping/cpw statutes (e.g., California Invasion of Privacy Act § 631, session-replay litigation) may impose additional limitations on certain tracking practices, and we endeavor to comply with all applicable requirements.
5. Your Rights and Choices
Consumer Rights Under State Law
Depending on your state of residence, you may have the right to: (i) know what personal information we collect, use, disclose, and sell or share; (ii) request access to or copies of your personal information; (iii) request deletion of your personal information; (iv) request correction of inaccurate personal information; (v) opt out of the sale or sharing of personal information and targeted advertising; (vi) limit the use or disclosure of sensitive personal information; (vii) opt out of profiling in furtherance of decisions that produce legal or similarly significant effects; and (viii) not be discriminated against for exercising these rights. These rights are recognized, to varying degrees, under the California Consumer Privacy Act as amended by the CPRA (Cal. Civ. Code § 1798.100 et seq.), the Virginia Consumer Data Protection Act (Va. Code § 59.1-575 et seq.), the Colorado Privacy Act (C.R.S. § 6-1-1300 et seq.), the Connecticut Data Privacy Act (Conn. Gen. Stat. § 42-515 et seq.), the Utah Consumer Privacy Act (Utah Code § 13-11-101 et seq.), and other State comprehensive privacy laws (TX, OR, MT, FL, TN, etc.).
How to Exercise Your Rights
To exercise your privacy rights, please contact us using the information provided in Section 10. We will verify your identity before processing your request, which may require you to provide information sufficient to confirm your identity and your relationship to the personal information requested. If you submit a request through an authorized agent, we may require written authorization and direct verification from you. We will respond within the timeframes required by applicable law and will inform you of any basis for denial or extension.
Appeals
If we deny your request, you may have the right to appeal our decision. To appeal, please submit a written request to [email protected] within the timeframe specified by applicable law and include the original request details and the basis for your appeal. We will respond to appeals in accordance with applicable state law.
6. Data Security
Security Measures
We implement reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, alteration, disclosure, or destruction. These measures may include encryption of data in transit and at rest, access controls, firewalls, intrusion detection, multi-factor authentication, employee training, and regular security assessments. Despite these efforts, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.
Limitation of Liability
To the fullest extent permitted by applicable law, Oneillite shall not be liable for any unauthorized access to, alteration of, theft, destruction, or loss of personal information that occurs despite our reasonable security measures or for any damages arising out of events beyond our reasonable control, including but not limited to acts of God, government actions, war, terrorism, riots, embargoes, acts of civil or military authorities, fires, floods, accidents, strikes, or shortages of transportation, facilities, fuel, energy, labor, or materials. Our aggregate liability arising out of or relating to this Privacy Policy or your use of the Services shall not exceed the greater of the amount you paid us, if any, in the twelve (12) months preceding the claim or one hundred U.S. dollars (USD $100).
7. International Data Transfers
Transfer and Processing in the United States
Oneillite is based in the United States, and the personal information we collect is primarily stored and processed in the United States. If you access the Services from outside the United States, you understand and acknowledge that your personal information will be transferred to, processed in, and stored in the United States and other jurisdictions where our service providers operate, which may have data protection laws that differ from those in your jurisdiction.
Safeguards
Where personal information is transferred across borders, we take appropriate measures to protect that information in accordance with this Privacy Policy and applicable law. Such measures may include standard contractual clauses, data processing agreements, and other legally recognized transfer mechanisms. By using the Services, you consent to the transfer, processing, and storage of your personal information in the United States and other jurisdictions as described herein.
8. Children's Privacy
Age Restrictions
The Services are not directed to children under the age of 13, and we do not knowingly collect, use, or disclose personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take prompt steps to delete that information. Our practices comply with the Children’s Online Privacy Protection Act, 15 U.S.C. §§ 6501-6506 (COPPA), and the COPPA Rule as amended effective June 2025 (16 C.F.R. Part 312, 2025 amendments).
Parental and Guardian Contact
If you are a parent or legal guardian and believe that your child under the age of 13 has provided personal information to us without your consent, please contact us immediately using the information in Section 10. We will work with you to delete such information and terminate any unauthorized account, if applicable. Certain state laws may provide additional protections for minors between the ages of 13 and 16, and we honor applicable opt-in consent requirements for the sale or sharing of such minors’ personal information where required by law.
9. Changes to Policy
Updates and Effective Date
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the Services. When we make material changes, we will revise the “Last Updated” date at the top of this Policy and may provide additional notice through the Services or by other means as required by law. Your continued use of the Services after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.
Prior Versions
We encourage you to review this Privacy Policy periodically. If you do not agree to the revised Policy, you must stop using the Services. Material changes may be effective immediately upon posting or as otherwise required by applicable law. This Policy supersedes all prior versions, agreements, or representations regarding our privacy practices with respect to the Services.
10. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
- Company: Oneillite
- Email: [email protected]
- Phone: +13167985452
- Address: One Liberty Plaza, 165 Broadway, New York, NY 10006, United States
If you are a California resident, you may also contact us for inquiries related to the California Consumer Privacy Act as amended by the CPRA (Cal. Civ. Code § 1798.100 et seq.). If you believe we have not adequately addressed your privacy concern, you may have the right to lodge a complaint with your state attorney general or other applicable regulatory authority.