Privacy Policy
Last updated 2026-10-03Who we are
RISHA is a clothing brand based in Montréal, Québec, operating the website risha.one. This policy explains what personal information we collect, why, and how you can control it.
What we collect
- Orders: your email address and shipping address, plus the items you buy. Payments are processed by Stripe; we never see or store your full card number.
- Restock / production notices: your email address and the product and size you asked about, only after you confirm the signup by email.
- Authenticity verification: the verification code you look up at risha.one/verification. We do not need your identity to verify a garment.
- Server logs: IP address, browser user agent and the page requested, kept for security and abuse prevention.
We do not sell personal information.
Analytics and cookies
- Visit statistics (always on, no cookies): we run our own copy of Umami on RISHA servers to count page views and shop steps (product viewed, added to cart, checkout started, payment submitted, purchase). It sets no cookies, does not store your IP address, ignores URL parameters, and cannot identify you. Nothing is shared with third parties.
- Meta advertising cookies (only if you accept): if you click “Accept” on the cookie banner, we load the Meta Pixel to measure our Facebook and Instagram ads. Meta then sets cookies (such as
_fbp) and receives the pages you view and the shop steps above. When you place an order after accepting, we also send Meta a purchase event from our server with your order value and hashed (unreadable) email, city, province, postal code and country, plus your IP address and browser, so the ad can be matched. If you decline, none of this happens. - Error reports: if the site or our server crashes, a technical error report is sent to Sentry. We remove emails, tokens and payment secrets from these reports before they leave.
You can change your cookie choice at any time: open cookie settings. Declining after you had accepted stops the Meta Pixel. To remove cookies already set, clear them in your browser settings.
How we use it
- To process, ship and support your order, including order and shipping emails.
- To email you about a product or size you explicitly asked to be notified about.
- To verify the authenticity of RISHA garments.
- To keep the site secure and working.
Who we share it with
Only service providers needed to run the store: Stripe (payments), our shipping carriers (delivery), our hosting and email providers, and Sentry (error reports). They may only use the information to provide their service to RISHA. Meta receives data only if you accept advertising cookies, as described above.
Social media publishing
RISHA publishes its own brand content to social platforms (such as Pinterest, Instagram, Facebook, Threads and X) through an internal, self-hosted tool used only by RISHA staff. That tool stores the access tokens and basic profile details of RISHA-owned accounts, and the content we publish. It does not collect data about members of the public or read private messages. You can revoke access at any time from the connected-apps settings of each platform.
Retention and security
Order records are kept as long as required for accounting and tax purposes. Notification signups are kept until you unsubscribe or the product ships. Data is stored on servers controlled by RISHA, access is restricted to RISHA administrators, and all traffic uses HTTPS.
Your rights
You can ask to access, correct or delete your personal information, or withdraw consent to emails, at any time. Email partner@risha.one and we will respond within 30 days. The person responsible for the protection of personal information at RISHA can be reached at the same address.