1. What is the scope of this Privacy Policy?
In this policy, you will find all relevant information regarding our use of personal data of "customers/consumers." This Privacy Policy applies to Oldsoak customers, including current, former, and prospective customers, recipients of products or services we provide, as well as visitors to our website, oldsoak.com.
2. What is Personal Data?
Personal data is any information that can be attributed directly or indirectly to you. Examples of personal data include your name, address, email address, phone number, payment information, and purchase orders. Usage history, IP address, member ID, and other types of information you provide when contacting our customer service or ordering products from our website, oldsoak.com, also constitute personal data.
3. Who is responsible for processing your personal data?
The data controller is:
Oldsoak ("we," "us," "Oldsoak," or the "Controller") is the data controller. This means we are responsible for processing and protecting your personal data.
Email: contact@oldsoak.com
4. When may we process your personal data?
We may not collect, process, use, or store personal data without a valid lawful basis.
Lawfulness may be based on the following grounds:
4.1. Consent: With your consent, we will process your personal data for the specific purpose for which you have given your consent. For example, when you request a newsletter with offers and product updates, or when you purchase something on our website, we will notify you about the status of your order.
4.2. Contract: When providing you with products and services, we process personal data necessary for the performance of your contract (such as a purchase agreement) and the performance of any obligations arising from that contract.
4.3. Legitimate Interests: We may process your personal information where it is necessary for our legitimate interests, and those interests are not overridden by your own interests. This includes processing for purposes such as customer service support, improving or developing our products and services, and for security purposes, including fraud prevention.
4.4. Legal Requirements: Whenever we need to process your personal data to comply with a legal obligation in the countries in which we operate. For each specific purpose for which we process your personal data, we will inform you which of these legal bases apply.
5. How do we process your personal data and why?
5.1. Online Shopping
To process your purchase orders and payment transactions
To manage your deliveries, claims, warranty issues, returns, and refunds in a secure and efficient manner, and to notify you of the details and status of such matters.
To provide and follow up on requested services (including discount codes) on the website or app, and to identify and contact you when necessary.
In these cases, we only process contact information (e.g., phone number, email address, shipping address), member ID (where applicable), transaction data, and payment method information.
Lawful Basis: When providing you with products and services, we process your personal data to perform our contract with you and to fulfill any obligations arising from that contract, whether that contract involves purchase orders and payments, or the use of other services provided by us or third parties. If you need to return a product or assert a consumer claim, we process your personal data to perform our obligations arising from your contract with us, whether that contract involves a purchase transaction, or the use of other services provided by us or third parties. For any other purposes mentioned herein, we process your personal data based on our legitimate interests as a business.
We will not retain and process your personal data for longer than necessary to fulfill our contractual and consumer obligations.
5.2. Security
To protect our customers, users, visitors, assets, and business from violence, fraud, theft, abuse, and other malicious activity.
In these circumstances, we only process your order history, payment data, and purchase behavior.
Lawful Basis: Processing your personal data for security purposes is based on our legitimate interests, unless there is a specific legal obligation.
We will not retain your personal data longer than is necessary for each purpose.
5.3. Compliance with Laws
Compliance with certain legal obligations. We are obligated to process certain personal data to comply with local laws. These obligations may vary by country, for example, in relation to tax, accounting, bookkeeping, sanctions, and consumer regulations. The types of personal data we process are dictated by applicable law.
Lawful Basis: Processing your personal data is necessary for Oldsoak to fulfill its legal obligations in the countries in which it operates.
Data retention periods will vary depending on the purpose, context, and specific local legal requirements.
5.4. Content You Share
To provide you with customer engagement marketing services.
To share your photos and/or videos on our official website, social media pages, and other promotional channels.
In these cases, we only process photos, videos, usernames, and credit/debit card information.
Lawful Basis: The processing of your personal data is based on your consent to the service contract.
6. Where and with whom do we share your personal data?
Your personal data is used and accessible only by those who need it to achieve the intended processing purposes. We may share your personal data within Oldsoak, with subcontractors, partners, and other third parties as necessary to achieve the intended processing purposes.
If we merge with or are acquired by a third party, undergo other business transactions such as reorganization, or propose any such transaction, we reserve the right to transfer any personal data we hold about you.
7. How long do we retain your personal data?
The period for which we retain your data depends on the purpose for which we process it, as described below:
7.1. Managing your Platform user registration. We will process your data for as long as you are a registered user (i.e., until you decide to delete your account).
7.2. Formulation, fulfillment, and execution of the purchase or service contract. We will process your data for as long as necessary to manage the product or service you purchased, including potential returns, complaints, or claims related to the purchase of the product or service in question. Sometimes, we will only process data until you make a decision, such as if you ask us to store your payment data for future purchases (where this functionality is available).
7.3. Customer Support. We will process your data for as long as necessary to fulfill your request or application.
7.4. Marketing. We will continue to process your data until you unsubscribe or unsubscribe from our newsletter. Similarly, we will show you personalized advertising until you revoke such consent by changing your device, browser, and/or cookie settings. If you participate in a promotion, we will retain your data for six (6) months after the promotion ends.
7.5. Usability and quality analysis. We may occasionally process your data during specific quality initiatives or surveys, or until we anonymize your browsing data. Although we process your data for the time strictly necessary to achieve the relevant purpose, we will then store and protect it appropriately, in accordance with the legislation in force from time to time, to prevent any liability arising from the processing. Once the statute of limitations for each potential action has expired, we will delete the personal data.
8. What are your rights?
Data protection is a fundamental right, and you have a number of rights under applicable data protection legislation. These rights include:
8.1. Right of Access: You have the right to request information about the personal data we hold about you at any time.
8.2. Right to Portability: When we process your personal data by automated means based on your consent or a contract, you have the right to request a copy of that data to yourself or another party. This only applies to personal data you have submitted to us.
8.3. Right to Correction: If your personal data is inaccurate, you have the right to request its correction, including the completion of incomplete personal data.
8.4. Right to Erasure: You have the right to delete any personal data we process at any time, except in the following circumstances:
You have a dispute with our customer service department;
You have an uncompleted order;
You have an outstanding balance with us;
If you make any purchases, we will retain personal data related to your transaction for billing purposes.
8.5. Right to Restriction: You have the right to request that we restrict the processing of your personal data in the following circumstances:
If you object to processing based on our legitimate interests, we will restrict all processing of such data until such legitimate interests have been verified.
If you allege that your personal data is inaccurate, we must restrict all processing of such data until such legitimate interests have been verified.
If the processing is unlawful, you may object to the erasure of your personal data and instead request the restriction of its use.
If we no longer need your personal data, but we require it to safeguard your legal interests. You have the right to withdraw your consent; for each processing purpose to which you have consented, you have the right to withdraw your consent at any time.
If you choose to do so, we will cease processing your personal data for that specific purpose. However, if you continue to receive marketing communications from us in your social media feed or web browser, this is a decision between you and your platform provider.
You can withdraw your consent or object to further marketing communications by:
Following the instructions in each marketing post,
Editing your account settings,
Configuring the privacy settings on your social media account or browser,
Contacting Customer Service, or deactivating your account on Oldsoak.
8.6. Right to Object to Processing Based on Our Legitimate Interests
You have the right to object to our processing of your personal data based on our legitimate interests. We will not continue to process your personal data unless we can demonstrate legitimate grounds for the processing that override your interests and rights, or if we have legitimate claims.
9. How Can You Exercise Your Rights?
If you have an account on Oldsoak, or if you provided us with personal information when making a purchase, you can exercise your access, portability, and correction rights in your account page. You can also delete your account there or contact us to request that your personal information be deleted from our global databases. If you have any questions about our Privacy Policy or the processing of your data, you can contact us at any time at contact@oldsoak.com.
10. Changes to this Privacy Policy
We may modify the information contained in this Policy as we deem appropriate. If we make changes, we will notify you through various means through the Platform (e.g., via banners, pop-ups, or push notifications) or, if the changes are relevant to your privacy, we may even send a notification to your email address so that you can review and evaluate the changes and, as appropriate, object to or unsubscribe from any services or features. In any case, we recommend that you review this Policy from time to time to stay informed of minor changes or any interactive improvements we make, so that you can always find it as a permanent information point on our e-store.
11. Information About Cookies
We use cookies and similar devices to facilitate your browsing on the Platform, understand how you interact with us, and, in some cases, show you advertising based on your browsing habits.
11.1 We use four categories of cookies: strictly necessary, performance, functional, and marketing. Only the last three categories require user consent. Strictly necessary cookies do not require user consent because these cookies enable the full and continuous display of website content, allowing you to access the website and have an appropriate digital browsing and online experience.
11.2 If you do not want cookies used on your device, you can manage your cookie preferences by selecting the appropriate option in the list of cookie categories in "Cookie Settings." Please note that these changes/selections may affect the functionality of the website and may prevent you from receiving personalized offers or advertising.
In addition to withdrawing your consent, you can easily prevent your browser from accepting cookies by configuring its cookie settings. All commercially available web browsers have cookie management features. Please check your web browser to learn how to delete or disable cookies.
11.3 If you select "Accept All Cookies," you accept all cookie categories and consent to us sharing this information with third parties (such as our advertising partners). If you select "Only Necessary Cookies," no cookies other than those categorized as "strictly necessary" will be placed on your device. You can withdraw your consent at any time to disable cookies that are not strictly necessary for the operation of the website.
12. Contact Us
For more information about our privacy practices, if you have any questions, or if you would like to make a complaint, please contact us at contact@oldsoak.com.