Privacy Policy

1. Introduction

At Oakreative, accessible via oakreative.com, we take your privacy seriously and are committed to safeguarding your personal data in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). We adhere to the principles of transparency, accountability, and user empowerment in all our data collection and processing activities. This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website, interact with our services, or otherwise engage with us.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all personal data collected and processed through oakreative.com. Oakreative acts as the data controller for the purposes of data protection regulation, determining the purposes and means of processing your personal information. If you have any questions regarding this policy or your data rights, you can contact us at [email protected].

3. Categories of Data Processed

We collect and process various categories of personal data, depending on how you interact with our website and services:

a) Usage Data: Includes data about how you use our website, such as your IP address, browser type, browser version, pages visited, session duration, referring/exit URLs, and general geographic location derived from your IP.

b) Account Data: If you create an account or complete certain forms, we may collect your name, email address, phone number, billing and shipping addresses, and other account-related information.

c) Profile Data: Includes user preferences, purchase history, behavioral data on the website, and personal interests as disclosed via the site or inferred from interactions.

d) Communication Data: Includes records of communications exchanged with our support or sales teams, including email correspondence and form submissions.

e) Technical Data: Device type, operating system, browser settings, language preferences, time zone, and other system configuration details recorded automatically through cookies or similar technologies.

f) Transaction Data: Includes payment details (processed through third-party providers), billing address, order details, delivery status, and other relevant logistical information necessary to fulfill a transaction.

g) Preference Data: Includes your choices regarding marketing communications, frequency preferences, content relevance, and expressed product or service interests.

4. Legal Bases for Processing

We process your personal data only where a lawful basis exists. Depending on the context, we rely on the following legal grounds:

– Consent: Where you have explicitly agreed to the processing of your personal data, for example by opting into a newsletter.
– Contractual Necessity: To perform a contract with you or to take steps at your request before entering into a contract.
– Legal Obligation: Where we are required to process data to comply with a legal obligation.
– Legitimate Interests: Where processing is necessary for our legitimate business interests—such as website optimization, fraud detection, customer support, or direct marketing—and those interests are not overridden by your data protection rights.

5. Your Rights

Subject to applicable data protection laws, you have the following rights with respect to your personal data:

– Right of Access: You may request confirmation of whether we process personal data about you and request a copy of that information.
– Right to Rectification: You may request correction of any inaccurate or incomplete personal data about you.
– Right to Erasure: You can request the deletion of your personal data where appropriate under law.
– Right to Restrict Processing: You may ask that we restrict further processing of your personal data in specific circumstances.
– Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
– Right to Object: You can object to the processing of your data where it is based on legitimate interests or for direct marketing purposes.

To exercise any of these rights, please email us at [email protected]. We may require specific verification to confirm your identity before processing such requests.

6. Security Measures

We implement robust technical and organizational safeguards to secure your data against unauthorized access, destruction, loss, or alteration. These measures include but are not limited to:

– End-to-end encryption during data transmission using SSL/TLS protocols.
– Role-based access control to limit internal access to authorized personnel only.
– Regular off-site backups with secure storage.
– Mandatory privacy and data protection training for employees.

Despite our efforts, no method of transmission or storage can be guaranteed as 100% secure; however, we commit to promptly investigating and mitigating any suspected data breach.

7. International Transfers

Given the global nature of the internet and certain service providers we use, some of your data may be transferred outside your local country or region. Where we transfer personal data internationally, we ensure safeguarding measures compliant with GDPR are in place, such as Standard Contractual Clauses approved by the European Commission or certification to internationally recognized frameworks.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which we collected it, including satisfying legal, accounting, or reporting obligations. Data retention periods vary by category:

– Usage and Technical Data: up to 24 months for analytics and system improvement.
– Account and Profile Data: for as long as the account remains active and for 6 years thereafter.
– Communication Data: up to 3 years following the latest interaction.
– Transaction Data: retained for 7 years for invoicing and tax compliance.
– Preference Data: stored until you withdraw your consent.

When data is no longer needed, we securely anonymize or delete it.

9. Cookie Policy

oakreative.com uses cookies and similar technologies to enhance user experience and facilitate certain functionalities. These may include:

– Essential Cookies: Required for accessing core features such as viewing secure areas of the website or processing payments.
– Functional Cookies: Enable personalized features like remembering login details or language preferences.
– Analytics Cookies: Collect aggregated data about website performance and visitor behavior to help us optimize the user experience.
– Performance Cookies: Support performance measurement, load balancing, and error detection.

10. Cookie Management and Compliance

Upon your first visit to oakreative.com, you will be presented with a cookie consent management interface allowing you to choose which categories you wish to allow. You can modify your cookie preferences at any time through your browser settings or the Cookie Settings link available on our site.

We respect “Do Not Sell My Personal Information” rights under the CCPA. Oakreative does not sell personal data to third parties. To manage or inquire about how your data is used for advertising or third-party sharing purposes, please contact us at [email protected].

11. Children’s Privacy

Oakreative does not knowingly collect or solicit personal data from individuals under the age of 13. If we discover that personal information from a child under 13 has been collected without verified parental consent, we will take immediate steps to delete such data. Parents or legal guardians who believe their child may have provided us with personal information are encouraged to contact us at [email protected].

12. Policy Updates

We may update this Privacy Policy periodically to reflect changes in legal requirements or shifts in our business practices. All changes will be posted on this page, and where material changes are introduced, we will provide appropriate notification through the website or direct communication where feasible.

13. Contact

For any questions, concerns, or requests related to this Privacy Policy or the way we handle your personal information, please contact us at:

Email: [email protected]

At Oakreative, we are committed to meeting our legal obligations under GDPR, CCPA, and other applicable privacy laws, and to honoring your rights as an individual. Your trust is our priority. Please don’t hesitate to get in touch with privacy concerns or requests.