Privacy policy

Last updated: 2nd June 2024

This Privacy Policy outlines how OLIVER KRAUS (referred to as "the Site," "we," "us," or "our") collects, uses, and discloses your personal information when you interact with our services, make purchases, or communicate with us via oliverkraus.co (the "Site") or other channels (collectively, the "Services"). For the purposes of this Privacy Policy, "you" and "your" refer to the user of the Services, whether a customer, website visitor, or another individual whose information we have collected under this Privacy Policy. Please review this Privacy Policy carefully. By accessing and using any of the Services, you consent to the collection, use, and disclosure of your information as described herein. If you do not agree with this Privacy Policy, please refrain from using or accessing any of the Services. Changes to this Privacy Policy We may periodically update this Privacy Policy to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any revisions will be posted on the Site, and the "Last updated" date will be amended accordingly, along with any other actions required by applicable law. Collection and Use of Personal Information In order to deliver our Services, we collect personal information from various sources over the past 12 months. The nature of information collected depends on your interactions with us. Apart from specific purposes outlined below, we may utilize collected information for communication, service provision, compliance with legal obligations, enforcement of terms of service, and protection of the Services, our rights, and those of our users or others. Types of Personal Information We Collect The personal information we gather depends on your interaction with our Site and Services. "Personal information" refers to data that identifies, relates to, describes, or can be linked to you. The subsequent sections detail the categories and specific types of personal information collected. Information Directly Provided by You This includes basic contact details (name, address, phone number, email), order information, account details (username, password), shopping activity, and customer support communications. Certain Services features may necessitate direct provision of information, failure to do so may limit access to these features. Information Collected through Cookies We automatically collect Usage Data, including device and browser information, network details, and IP address, through Cookies, pixels, and similar technologies. This data helps us understand your interaction with the Site and Services. Information Obtained from Third Parties We may acquire information about you from third parties, including vendors and service providers, who gather data on our behalf, such as: 1. Supporting Companies: Entities aiding our Site and Services, like Shopify. 2. Payment Processors: Providers collecting payment details (e.g., bank account, credit/debit card information) to process orders and fulfill requested products/services, as part of our contractual obligation. 3. Automated Tracking: When visiting our Site, opening or clicking emails, or interacting with Services or ads, we or affiliated third parties may automatically collect specific information using online tracking technologies (e.g., pixels, web beacons, cookies). Any data obtained from third parties adheres to this Privacy Policy. We are not accountable for the accuracy of third-party provided information or their policies/practices. Refer to the "Third Party Websites and Links" section for more details. How we use your personal information 1. Providing Products and Services: Utilizing personal information to deliver Services, process payments, fulfill orders, send notifications regarding account activity, manage accounts, arrange shipping, facilitate returns/exchanges, and enable reviews. 2. Marketing and Advertising: Employing personal information for marketing and promotional activities via email, text, postal mail, and displaying advertisements tailored to enhance Services and advertising on our Site and others. 3. Security and Fraud Prevention: Employing personal information to identify, investigate, or address potential fraudulent, illegal, or malicious activities. Users are urged to safeguard their account credentials, and compromised accounts should be reported immediately. 4. Communication: Using personal information to offer customer support and enhance Services, ensuring responsiveness, effective service provision, and fostering business relationships.

Cookies Similar to many websites, we utilize Cookies to enhance our Site and Services. Details about the Cookies we use, particularly those associated with Shopify, can be found here. These Cookies aid in powering and refining our Site and Services, conducting analytics, and better understanding user interaction. Third parties may also use Cookies on our Site to optimize services, products, and advertising. While most browsers accept Cookies by default, users can modify settings to remove or reject Cookies. However, note that such actions may impair user experience and affect Service functionality. Blocking Cookies might not entirely prevent information sharing with third parties, including advertising partners. Disclosure of Personal Information We are committed to disclosing personal information in compliance with GDPR, COPPA, and CCPA regulations. Our disclosure practices encompass the following scenarios: 1. Vendor Partnerships: Personal information may be shared with vendors and third parties who assist in essential services, including IT management, payment processing, data analytics, customer support, cloud storage, fulfillment, and shipping. 2. Business Collaborations: Collaboration with business and marketing partners, such as Shopify, enables us to deliver services and tailor advertisements. Our partners adhere to their respective privacy policies. For example, we use Shopify for personalised advertising with third-party services. 3. User Consent: Personal information may be disclosed to third parties when users direct, request, or consent to such actions. This includes scenarios like product shipment or interactions with social media widgets or login integrations. 4. Affiliate and Corporate Groups: Personal information may be shared within our corporate group or affiliates, serving our legitimate interests in maintaining a successful business. 5. Legal Obligations and Transactions: In compliance with legal requirements, personal information may be disclosed in business transactions, mergers, or bankruptcy situations. This includes responding to legal requests, enforcing terms of service, and safeguarding the rights of users and stakeholders. Categories of Personal Information Disclosed In the past 12 months, we have disclosed the following categories of personal and sensitive personal information to recipients for the outlined purposes: ● Identifiers: Basic contact details, order, and account information. ● Commercial Information: Order details, shopping information, and customer support data. ● Internet or Network Activity: Usage data and similar network activities. Recipients include vendors, third-party service providers, business and marketing partners, and affiliates. We do not use or disclose sensitive personal information for inferring characteristics about users. User Generated Content Our services allow you to contribute product reviews and other user- generated content. Content submitted to public areas becomes accessible to all users. We cannot control who accesses the information you share publicly, nor can we guarantee their privacy or security. We are not liable for the privacy, security, accuracy, or misuse of publicly available information or any data shared or received from third parties. Third Party Websites and Links Our website may link to third-party websites or platforms. When accessing these sites, review their privacy, security policies, and terms. We are not responsible for the privacy, security, accuracy, or completeness of content on third-party sites. Information shared on public forums or third-party 

social networks may be visible to other users without limitations on its use by us or third parties. Our inclusion of links does not imply endorsement of their content or operators. COPPA (Children’s Online Privacy Protection Act) In compliance with the Children’s Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under the age of 13 without verifiable parental consent. If we discover that we have collected personal data from a child without parental consent, we promptly delete it from our systems. Parents or legal guardians can review their child’s personal information, request its deletion, or refuse further collection by contacting us using the provided contact details. We do not condition a child’s participation in any activity on our website on the disclosure of more personal information than is reasonably necessary. We take appropriate measures to safeguard children’s privacy, including limiting data collection to what is necessary for the intended purpose, obtaining parental consent when required, and ensuring data security.

California Consumer Privacy Act (CCPA) We collect personal information as defined by the California Consumer Privacy Act (CCPA) for the purpose of providing our services and improving user experience. The categories of personal information we collect may include identifiers, commercial information, internet activity, geolocation data, and other information described in the CCPA.

We may use personal information for purposes such as processing orders, communicating with customers, personalizing content, analyzing website usage, and complying with legal obligations. We may disclose personal information to service providers, business partners, affiliates, and third parties as permitted by the CCPA. California residents have the right to request access to their personal information, request deletion of their personal information, opt-out of the sale of their personal information, and not be discriminated against for exercising their rights under the CCPA. For questions or concerns about our privacy practices or to exercise your rights under the CCPA, please contact us at info@oliverkraus.co

Security and Data Retention We acknowledge that no security measures are infallible, and while we strive for "perfect security," we cannot guarantee it. Information you transmit to us may not be secure during transit. We advise against using unsecured channels for sensitive or confidential communications. The duration of retaining your personal data varies based on factors like account maintenance, service provision, legal compliance, dispute resolution, and contractual enforcement. We adhere to applicable laws and policies in determining data retention periods. Your Rights and Options Depending on your location, you may have the following rights regarding your personal data. However, these rights may be subject to limitations and exceptions under the law:

1. Right to Access/Know: You may request access to your personal information, including usage and sharing details. 2. Right to Deletion: You may request the deletion of your stored personal data. 3. Right to Correction: You may request the correction of any inaccurate personal information. 4. Right to Portability: You may request a copy of your personal data and its transfer to a third party in specific circumstances.

Managing Communication Preferences You have the right to opt out of receiving promotional emails from us at any time by using the unsubscribe option provided in our emails. However, please note that even if you opt out of promotional emails, you may still receive non-promotional emails related to your account or orders. You can exercise your rights by following the instructions on our website or by contacting us using the provided contact details. We will not discriminate against you for exercising your rights. To ensure your identity, we may collect necessary information and may require verification before responding to your request. You can also designate an authorized agent to act on your behalf, provided they can verify their authority and your identity. We utilize Shopify’s ad services, including Shopify Audiences, to personalize third-party website advertising. To limit the use of your personal information by Shopify merchants for such purposes, visit https://privacy.shopify.com/en.

GDPR (General Data Protection Regulation) Under the General Data Protection Regulation (GDPR), we process your personal data lawfully, transparently, and for specified purposes. Your 

personal data is collected for legitimate business interests, such as providing services, managing accounts, and improving user experience. We may also process your data to comply with legal obligations or with your consent. As a data subject under GDPR, you have the right to access, rectify, or erase your personal data. You can also restrict or object to its processing and request data portability. To exercise these rights, please contact us using the provided contact details. We implement appropriate technical and organizational measures to ensure data security and integrity. Your personal data is not shared with third parties without your explicit consent, except when required by law or to provide essential services.

Complaints If you have complaints regarding our handling of your personal information, please contact us. If you’re unsatisfied with our response, you may appeal or lodge a complaint with your local data protection authority. International Users Your personal information may be transferred, stored, and processed outside your country, including in the United States. We ensure appropriate data transfer mechanisms, such as Standard Contractual Clauses, for transfers out of Europe, unless adequate protection is assured. For any inquiries about our privacy practices or to exercise your rights, email us at info@oliverkraus.co.