Privacy Policy
1. Introduction – Our Commitment to Your Privacy
At OaktreeLA, accessible at oaktreela.com, we are committed to safeguarding the privacy and personal data of all individuals who use our website, products, or services. We adhere to the principles of data protection as outlined by international privacy laws including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection frameworks. Your trust is central to our operations, and we are dedicated to ensuring transparency, accountability, and security in how we handle your personal information.
2. Scope of Policy and Data Controller Role
This Privacy Policy governs the manner in which OaktreeLA collects, uses, maintains, and discloses information from users of our website. OaktreeLA, operating through oaktreela.com, is the Data Controller with respect to personal data processed under this policy. This policy applies to all users who access or interact with our website, submit personal information through our forms, make purchases, or communicate with us by any means.
3. Categories of Data We Process
We may collect and process the following categories of personal data:
– Usage Data: Includes details about your access to our website, such as your IP address, browser type, pages visited, time spent on pages, and referring URLs.
– Account Data: Information you provide when you register an account, such as your full name, billing and shipping address, email address, and phone number.
– Profile Data: Information related to your preferences, purchase history, product browsing behavior, and feedback.
– Communication Data: All correspondence between you and us, including messages sent via our website forms, email, or customer support interactions.
– Technical Data: Device-specific data including device type, operating system, screen resolution, browser settings, and system configurations.
– Transaction Data: Information relating to payments, refunds, delivery status, order confirmations, and purchase receipts.
– Preference Data: Your choices related to marketing communications, notification settings, and interests expressed through user profiles or activities.
4. Legal Bases for Processing Your Data
We process your personal data lawfully, fairly, and transparently based on the following legal bases:
– Consent: Where you explicitly provide consent, such as opting into newsletters or agreeing to cookies.
– Contractual Necessity: When data is necessary to perform the contract we are about to enter into or have entered into with you (e.g., fulfilling product purchases).
– Legitimate Interests: When processing is essential for the functioning and enhancement of our website, fraud prevention, and secure user experiences, provided your fundamental rights are not overridden.
– Legal Obligation: Where processing is necessary for compliance with applicable laws and regulations.
5. Your Rights under Data Protection Laws
Subject to local data protection laws, you have the following rights:
– Right of Access: To request access to your personal data and obtain a copy of the information we hold about you.
– Right to Rectification: To correct inaccurate or incomplete data regarding your information.
– Right to Erasure: To request the deletion of your personal data under certain circumstances.
– Right to Restrict Processing: To limit the way we use your data in specific situations.
– Right to Data Portability: To obtain your data in a structured, commonly used, machine-readable format and transfer it to another controller.
– Right to Object: To object to the processing of your personal data for direct marketing or other purposes where our lawful basis is legitimate interest.
Requests to exercise these rights may be submitted to us via email at [email protected]. We will respond in accordance with applicable data privacy laws.
6. Security Measures
We employ rigorous technical and organizational security measures to safeguard your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include but are not limited to:
– End-to-end encryption of data in transit and at rest
– Multi-factor authentication for internal systems
– Secure access controls and regular audit logs
– Regular data backups stored redundantly
– Ongoing employee privacy and information security training
7. International Data Transfers
Where required, we may transfer your personal data to jurisdictions outside of your country, including countries not recognized under GDPR as offering an adequate level of protection. In such cases, all transfers are governed by legally enforceable Standard Contractual Clauses approved by the European Commission, or similar frameworks.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
– Usage and Technical Data: retained for up to 12 months for analytics and security purposes.
– Account and Profile Data: retained for the duration of your account and up to 5 years after account closure for legitimate business or legal purposes.
– Communication Data: retained for up to 3 years to manage support history and resolve disputes.
– Transaction Data: retained for a legal requirement of up to 7 years for financial and compliance obligations.
– Preference Data: retained for a rolling period of 24 months from the date of the last interaction or consent update.
Upon expiry of these periods, data is securely deleted or anonymized.
9. Cookie Policy
Our website uses cookies and similar tracking technologies to enhance your experience. These include:
– Essential Cookies: Required for core functionality such as user login and cart management.
– Functional Cookies: Enable personalization of settings and preferences.
– Analytical Cookies: Monitor usage patterns and help us analyze performance.
– Performance Cookies: Improve load times and user interface responsiveness.
For more information on our use of cookies, refer to our Cookie Settings panel accessible from any page on oaktreela.com.
10. Cookie Management and Compliance
You may manage your cookie preferences at any time by adjusting your browser settings or using our consent management tool. Under GDPR and CCPA, you have the right to accept or reject non-essential cookies at will. Visitors from specific jurisdictions will be presented with appropriate opt-in or opt-out tools based on regional regulations.
11. Children’s Privacy
The website and services at oaktreela.com are not directed to children under the age of 13. We do not knowingly collect or process data from minors without verified parental consent. If we become aware that we have inadvertently collected personal data from a child under 13, we will take immediate steps to delete it.
12. Policy Updates and Notice
OaktreeLA reserves the right to revise this Privacy Policy to reflect changes in legal or operational requirements. Significant modifications will be communicated via appropriate channels, which may include emails or on-site notifications. Users are encouraged to periodically review this policy for the latest updates.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us:
Email: [email protected]
Website: oaktreela.com
We are dedicated to maintaining compliance with applicable privacy laws and upholding your data protection rights. Thank you for trusting OaktreeLA.