Privacy Policy for OakTree LA

OakTree LA (“we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our website (oaktreela.com), and informs you about your privacy rights and how the law protects you. We are dedicated to maintaining the highest standards of data protection and transparency in accordance with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Commitment to Privacy and Data Protection

We understand that your privacy is of paramount importance. At OakTree LA, safeguarding your personal information is a foundational aspect of our operations. We strictly adhere to data protection laws and best practices to ensure the integrity, confidentiality, and availability of personal data under our control.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all visitors, users, and customers who access or interact with oaktreela.com. We act as the data controller for the processing of your personal data. This means OakTree LA determines the purpose and means of processing your personal data.

If you have any questions about how your information is handled, please contact us via email at: [email protected].

3. Categories of Data We Collect and Process

We only collect data that is necessary for our services or that you voluntarily provide to us. The data we collect may include, but is not limited to, the following categories:

a. Usage Data:
– Internet protocol (IP) address
– Browser type and version
– Operating system and device type
– Referral source
– Pages visited and time spent
– Date/time of visit and interaction patterns

b. Account Data:
– Full name
– Email address
– Mailing address
– Telephone number
– Login credentials (where applicable)

c. Profile Data:
– Purchase history
– Behavior on our website
– Saved preferences
– Interests and feedback

d. Communication Data:
– Customer support tickets
– Email inquiries or responses
– Chat messages and contact history

e. Technical Data:
– Device identifiers
– System configurations
– Web server logs

f. Transaction Data:
– Payment card details (processed via third-party)
– Billing and shipping information
– Order history

g. Preference Data:
– Consent records for marketing communications
– Opt-in/out preferences
– Wishlist and product interest selections

4. Legal Bases for Processing Data

We rely on the following legal bases as defined under the GDPR to process your personal data:

– Consent: Where you have actively provided consent for us to process your data for specific purposes.
– Contractual Necessity: Where processing is required to perform a contract we have entered into or are about to enter with you.
– Legitimate Interests: Where we process your data to pursue our legitimate business interests, provided that those interests do not override your fundamental rights and freedoms (e.g., fraud prevention, improving services).
– Legal Obligations: Where processing is necessary to comply with a legal requirement or obligation.

5. Your Rights Under Data Protection Law

Under GDPR and CCPA, you have the following rights, which you may exercise by contacting us at [email protected]:

– Right of Access: You may request access to your personal data held by us.
– Right to Rectification: You can ask us to correct any inaccuracies or complete your data.
– Right to Erasure (“Right to be Forgotten”): You may request deletion of your personal data, in certain circumstances.
– Right to Restrict Processing: You may request us to restrict processing of your data, pending resolution of concerns.
– Right to Data Portability: You have the right to receive your personal data in a portable, machine-readable format.
– Right to Object: You may object to our processing of your data where the legal basis is our legitimate interest or direct marketing.
– Right to Non-Discrimination (CCPA): You will not be discriminated against for exercising any of your privacy rights.

6. Security Measures

OakTree LA employs comprehensive security measures to protect your data, including but not limited to:

– End-to-end encryption in data transmission
– Role-based access control for data access
– Firewalls and intrusion detection systems
– Regular system and security audits
– Secure data backups and recovery systems
– Employee privacy training and access logs

Despite our precautions, no online transmission is 100% secure; you are strongly encouraged to maintain appropriate data hygiene, such as using strong passwords and updating browser versions.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside of your jurisdiction if needed for the operation of oaktreela.com or for our third-party service providers. In such cases, we ensure data protection by implementing Standard Contractual Clauses approved by the European Commission and ensuring compliance with local and regional regulatory requirements.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes we collected it for, including:

– Usage Data: retained for 12 months to monitor site performance
– Account Data: retained for the duration of account existence and up to 5 years after closure
– Profile Data: retained for 3 years unless you request deletion
– Communication Data: retained for 2 years for audit and service quality purposes
– Technical Data: retained for up to 1 year
– Transaction Data: retained for 7 years to comply with tax and accounting obligations
– Preference Data: retained until you withdraw consent or alter preferences

9. Cookie Policy

We use cookies and similar technologies on oaktreela.com for various purposes, including:

– Essential Cookies: Necessary for the website to function correctly (e.g., login, shopping cart).
– Functional Cookies: Enhance features and individual user preferences.
– Analytical Cookies: Track usage patterns to optimize performance.
– Performance Cookies: Improve speed, load times, and responsiveness.

You may review our full cookie notice within your browser or privacy settings. By continuing to use our website, you consent to the use of cookies in accordance with this policy unless you opt out via your browser settings.

10. Cookie Management and Compliance

We offer a cookie consent mechanism compliant with GDPR and CCPA regulations. Users are given the choice to accept or reject non-essential cookies upon their initial visit. You may withdraw or modify your preferences at any time by revisiting the cookie settings available on oaktreela.com or adjusting your browser’s settings.

11. Protection for Children Under 13

Our website and services are not directed to individuals under the age of 13. We do not knowingly collect or solicit personal data from children. If we learn that we have collected data from a child under 13, we will take immediate steps to delete such information. Parents or guardians who believe their child has provided us with personal data should contact us at [email protected].

12. Policy Updates and Revisions

We reserve the right to make changes to this Privacy Policy at any time. Material changes will be communicated clearly via notices on oaktreela.com or direct notifications (e.g., email when applicable). We encourage users to review this policy periodically to stay informed about how we are protecting personal data.

13. Contact Information

If you have questions, concerns, or requests related to this Privacy Policy, please contact our privacy team at:

Email: [email protected]
Website: https://oaktreela.com

We are fully committed to upholding your privacy rights and ensuring that your data is used transparently, responsibly, and lawfully. Please do not hesitate to reach out with any concerns regarding your privacy.