GDPR & Data Protection
Your privacy matters. Discover how OAKMOSSCO approaches personal information, data protection, and your privacy rights.
Clear information practices
Responsible data handling
Control over personal data
Careful information management
A More Thoughtful Approach to Personal Data
At OAKMOSSCO, we respect your privacy and recognize the importance of handling personal information responsibly.
This GDPR notice explains how personal information may be collected, used, stored, shared, and protected when you visit our website, browse our products, place an order, or communicate with our customer service team.
We aim to collect only information relevant to our business operations, explain how it is used, and respect the privacy rights available to individuals under applicable data protection laws.
The General Data Protection Regulation (GDPR), Regulation (EU) 2016/679, establishes rules for processing personal data in circumstances covered by European data protection law. Its application depends on the nature of the processing and the relevant legal circumstances. This notice describes our general privacy practices and does not replace any additional rights or disclosures required by applicable law.
Who Is Responsible for Your Information?
For privacy inquiries concerning OAKMOSSCO, you can contact the business using the following details:
GEORGE ROWELL
1617 WEATHERFORD DR
LATTA, SC 29565
United States
carecentervbgtyjkoi@oakmossco.com
+1 8640321536
Where GDPR or other applicable law requires a formally designated representative or data protection officer, the relevant contact information will be provided where applicable.
What Information May We Collect?
Depending on how you interact with our website and services, the information we process may include the following categories:
Personal Identification Information
Your name, billing address, shipping address, email address, and telephone number when you place an order or communicate with us.
Order & Transaction Information
Products purchased, order numbers, transaction details, payment status, delivery information, and relevant customer service records.
Account Information
Information associated with a customer account, such as login credentials and saved account preferences, if you choose to create an account.
Technical & Browsing Information
Information such as IP address, browser type, device information, operating system, website activity, and technical identifiers, where collected through website technologies.
Customer Communications
Information you provide when contacting us about orders, shipping, returns, refunds, product questions, or complaints.
Marketing Preferences
Your communication preferences and consent choices relating to promotional emails or other marketing activities, where applicable.
How Does Information Reach Us?
We may obtain personal information through several channels:
- Directly from you when you place an order, submit a form, create an account, or contact customer service.
- Automatically through website technologies, such as cookies and similar tools, subject to applicable consent requirements.
- Through Shopify and other service providers involved in website hosting, payment processing, order management, and delivery.
- Through other third parties when they lawfully provide information necessary for our business operations.
Why Do We Use Your Information?
We process personal information for legitimate and relevant business purposes, including:
To process purchases, confirm orders, arrange delivery, and provide order-related updates.
To respond to questions, manage complaints, and assist with returns, refunds, and product concerns.
To maintain website functionality, improve browsing experiences, and troubleshoot technical issues.
To help detect suspicious activity, protect transactions, and maintain website security.
To meet applicable legal, tax, accounting, regulatory, and recordkeeping obligations.
To provide promotional communications where permitted and respect your marketing choices.
Our Legal Grounds for Processing
Where GDPR applies, personal data is processed only when an appropriate legal basis is available. Depending on the specific purpose, the relevant basis may include:
Contractual Necessity
Processing necessary to enter into or perform a contract with you, such as fulfilling an order, arranging delivery, or providing requested customer service.
Legal Obligations
Processing necessary to comply with legal obligations, including relevant financial, accounting, and tax requirements.
Legitimate Interests
Processing necessary for legitimate business interests, such as protecting our website, preventing fraud, and improving services, provided those interests are not overridden by your rights and freedoms.
Consent
Processing based on your freely given, specific, informed, and unambiguous consent, such as certain optional cookies or marketing activities where consent is required.
Vital Interests or Public Interest
Where relevant and legally applicable, processing may rely on another lawful basis provided under GDPR, including the protection of vital interests or the performance of a task carried out in the public interest.
Understanding Cookies
Our website may use cookies and similar technologies to support essential website functions, remember preferences, understand website performance, and support permitted advertising or analytics activities.
Where required by applicable law, non-essential cookies and similar technologies will only be used after the necessary consent has been obtained. You may manage available cookie preferences through the website's cookie settings, where provided.
You can also adjust cookie settings through your browser. However, disabling certain cookies may affect website functionality.
For more information about the categories of cookies, their purposes, and available controls, please refer to our Cookie Policy.
Who May Receive Your Information?
We may share relevant personal information with service providers and other parties when necessary for the purposes described in this notice, subject to applicable legal requirements.
- Shopify and website service providers: To host and operate our online store and support order management.
- Payment processors: To securely facilitate payment transactions and related verification.
- Shipping and logistics providers: To process delivery arrangements and provide shipment-related services.
- Technical and analytics providers: To maintain website functionality, security, and performance where applicable.
- Professional advisers: To obtain legal, accounting, or other professional services when necessary.
- Public authorities: Where disclosure is required by law, a valid legal process, or necessary to protect legal rights.
We do not authorize service providers to use personal information for purposes unrelated to the services they provide, except where otherwise permitted by law or based on an appropriate legal basis.
Where Your Information May Be Processed
Our business operates in the United States. Depending on the service providers involved and your location, personal information may be processed or stored in countries other than the country where you reside.
Where GDPR applies and personal data is transferred outside the European Economic Area, we will rely on an appropriate transfer mechanism where required by law. These mechanisms may include an adequacy decision, Standard Contractual Clauses, or another legally recognized safeguard.
Additional information about relevant safeguards may be requested by contacting our customer service team, subject to applicable legal restrictions.
How Long Do We Keep Personal Data?
We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, including providing services, maintaining business records, resolving disputes, and meeting legal obligations.
The appropriate retention period depends on the type of information, the reason for processing, applicable legal requirements, and whether the information is needed to establish, exercise, or defend legal claims.
When personal information is no longer required, we will take appropriate steps to delete, anonymize, or otherwise dispose of it in accordance with applicable law.
Your Rights Over Personal Information
If GDPR applies to the processing of your personal data, you may have the following rights, subject to applicable conditions and exceptions:
Right of Access
You may request confirmation of whether we process your personal data and obtain access to that information, together with certain related details.
Right to Rectification
You may request correction of inaccurate personal data or completion of incomplete information.
Right to Erasure
In certain circumstances, you may request deletion of your personal data. This right is subject to legal exceptions, including situations where retention is required by law or necessary for legal claims.
Right to Restriction of Processing
You may request that we restrict the processing of your personal data in circumstances provided by GDPR.
Right to Data Portability
Where the legal requirements are met, you may request your personal data in a structured, commonly used, and machine-readable format, and request its transmission to another controller where technically feasible.
Right to Object
You may object to certain processing activities based on legitimate interests or public interest grounds. You have the right to object at any time to processing of your personal data for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Rights Regarding Automated Decision-Making
Where applicable, you may have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects or similarly significant effects, subject to GDPR exceptions.
Submit a Privacy Request
To exercise an applicable privacy right, contact us using the email address below.
For efficient handling, please include:
- Your name and contact email address.
- A clear description of the privacy request.
- Relevant order or account information, if applicable.
- Any additional information reasonably necessary to identify the relevant personal data.
We may need to verify your identity before responding to a request. We will not request unnecessary sensitive information for verification.
Where GDPR applies, we generally respond without undue delay and within one month of receiving a request. This period may be extended by up to two additional months where permitted by law, taking into account the complexity and number of requests. We will inform you of any extension and the reasons for it within the applicable period.
How We Protect Your Information
We take reasonable technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, loss, or misuse.
Depending on the nature of the information and the relevant processing activities, safeguards may include access controls, secure service providers, account security measures, and appropriate data-handling procedures.
No method of electronic transmission or storage is completely secure. Although we take reasonable steps to protect personal information, we cannot guarantee absolute security.
Protection of Children's Information
Our website is intended for general consumers and is not designed to knowingly collect personal information directly from children in circumstances where parental consent or other legal authorization is required.
We do not knowingly seek personal information from children for independent marketing or account activities without appropriate authorization.
If you believe a child has provided personal information to us inappropriately, please contact us so we can review the matter and take appropriate steps where required by law.
External Platforms & Links
Our website may contain links to third-party websites, payment services, social media platforms, or other external resources.
These external services may operate under their own privacy policies and data-handling practices. We encourage you to review their privacy notices before providing personal information.
OAKMOSSCO is not responsible for the independent privacy practices of third-party websites or services outside our control.
Your Right to Raise a Concern
If GDPR applies to your personal data, you may have the right to lodge a complaint with the data protection supervisory authority in your country of residence, place of work, or the location of the alleged infringement.
We encourage you to contact us first if you have a concern about how your personal information is handled. We will review your inquiry and seek to address it appropriately.
Contacting us does not limit your right to approach a competent supervisory authority.
Additional State Privacy Protections
Depending on your state of residence and whether the relevant law applies to our business and processing activities, you may have additional privacy rights under U.S. state privacy laws.
These rights may include the right to know or access certain personal information, request deletion or correction, obtain a portable copy, and opt out of certain forms of targeted advertising, sale, or sharing of personal information as defined by applicable law.
Some state laws also provide rights concerning sensitive personal information, profiling, and appeals of certain privacy request decisions.
The availability and scope of these rights depend on the applicable law, relevant exemptions, and the circumstances of the processing. You may contact us using the details in this notice to submit a privacy inquiry.
Changes to This Privacy Notice
We may update this GDPR notice from time to time to reflect changes in our website operations, data-handling practices, service providers, or applicable legal requirements.
Any updated version will be published on this page with its revised effective date where appropriate. We encourage you to review this notice periodically to stay informed about how personal information is handled.
Questions About Your Privacy?
If you have questions about this GDPR notice, how your personal information is processed, or how to exercise your privacy rights, please contact our customer service team.
Contact Privacy SupportYour trust is an important part of every relationship. We believe privacy deserves the same thoughtful attention as every detail of your home.
OAKMOSSCO · GDPR & DATA PROTECTION