Data Protection Policy
At Oysterwood Creatives, we take data protection and the privacy of our customers very seriously. This Data Protection Policy outlines how we collect, use, store, and protect personal data in compliance with the General Data Protection Regulation (GDPR).
1. Data Collection:
1.1 We collect personal data from customers for the purpose of processing orders, providing customer support, and improving our services.
1.2 Personal data collected may include but is not limited to: name, email address, shipping address, billing address, phone number, and order history.
1.3 We collect personal data directly from customers when they place an order, subscribe to our newsletter, or contact us for support.
2. Data Usage:
2.1 We use personal data to process orders, fulfill customer requests, provide customer support, and communicate important information related to orders and account activity.
2.2 With explicit consent, we may also use personal data to send marketing communications, such as newsletters and promotional offers.
2.3 We do not sell or rent personal data to third parties for marketing purposes.
3. Data Storage and Security:
3.1 Personal data is stored securely in electronic format on password-protected servers and databases.
3.2 We implement appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, and destruction.
3.3 Access to personal data is restricted to authorized personnel only and is limited to those who require access to perform their duties.
4. Data Retention:
4.1 We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law.
4.2 Customer account information and order history are retained for as long as the customer maintains an account with us or as required by law.
4.3 Upon request, we will delete or anonymize personal data that is no longer needed for the purposes for which it was collected.
5. Data Subject Rights:
5.1 Customers have the right to access, correct, update, or delete their personal data held by us. Requests for data access, correction, or deletion can be made by contacting us at privacy@oysterwood.com.
5.2 We will respond to data subject rights requests within the timeframes required by applicable data protection laws.
6. Data Breach Notification:
6.1 In the event of a data breach involving personal data, we will notify affected individuals and the appropriate supervisory authority in accordance with GDPR requirements.
7. Privacy by Design:
7.1 We implement privacy by design principles to ensure that privacy and data protection considerations are integrated into our systems, processes, and services.
8. Compliance Monitoring:
8.1 We regularly review and update our Data Protection Policy and practices to ensure compliance with GDPR and other applicable data protection laws.
8.2 We provide training and resources to employees to raise awareness of data protection responsibilities and requirements.
9. Contact Information:
If you have any questions, concerns, or requests regarding our Data Protection Policy or the processing of your personal data, please contact us at privacy@oysterwood.com.
By using our services and providing your personal data, you consent to the collection, use, and processing of your personal data as described in this Data Protection Policy.
Thank you for your trust in Oysterwood Creatives.
[Date of Last Update: February 9, 2024]