Oshibori Concept International European Privacy Policy

Welcome to the Oshibori Concept Privacy Policy page. Oshibori Concept respects your privacy and is committed to protecting your personal data.

1. Introduction

This privacy policy explains how Oshibori Concept uses your personal data when you visit our site, interact with us and purchase our goods. It also describes your privacy rights and how the law protects you. It is important that you read this privacy policy together with any other privacy policy we provide to you so that you are aware of why we use your data and how we do so.

2. Our website and the company Oshibori Concept:

Our website www.oshiboriconcept.com sells single-use scented refreshing towels with customizable packaging.

This website dedicated to professional buyers is not intended for children and we do not collect any data relating to children.

Oshibori Concept International is the data controller for this site and for any processing of personal data carried out on its behalf.

In this privacy policy, the words “Oshibori Concept”, “we”, “us”, or “our” refer to the company Oshibori Concept International responsible for processing your data.

3. The personal data we collect about you

Personal data, or personal information, means any information about an individual from which that individual can be identified. It does not include information where the identity is concealed (anonymous data).

We collect a variety of information about our wonderful customers (you!) and visitors to the Oshibori Concept International website. This personal data falls into different categories:

• Identity Data includes title, first name, last name, username or similar identifier, and an encrypted version of your username/password. If you interact with us via social media, your username on social media may be part of this.
• Contact Data includes billing address, shipping address, email address and telephone numbers.
• Financial Data includes your payment card details.
• Transaction Data includes details about your payments and refunds, and products you have purchased from us.
• Profile Data includes your username and password, your purchases or orders, your preferences, and any profile data we have added (for example, through the use of analytics and profiling tools).
• Technical Data includes your IP address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
• Usage Data includes information about how you use our website, products and services.
• Tracking Data includes information that we or anyone else collects about you from cookies and similar tracking technologies, such as web beacons, pixel tags or mobile identifiers.

We do not collect Special Categories of Personal Data (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, genetic or biometric data). We also do not collect information relating to any criminal offences or convictions. If you use this type of personal data on products you design on www.oshiboriconcept.com, we will not know. Any personal data included on designs or products will be treated as ordinary personal data.

Please remember that if you choose not to share personal data with us or refuse certain contact permissions, we may not be able to provide the requested products and services.

4. How is your personal data collected?

We use various methods to collect data about you, including:

Direct interactions. You may provide us with your Identity Data, Contact Data and Financial Data by filling in our forms or by corresponding with us by post, phone, email, chat or social media.

This includes personal data you provide when you:

Third-party or publicly available sources. We may receive personal data about you from different types of third parties, including:

• Technical Data and/or Tracking Data from analytics providers, advertising networks and information providers;
• Financial Data, Contact Data and Transaction Data from payment service providers and fraud prevention services;
• Identity Data and Contact Data from data partners; and
• data from any third party who is legally permitted to share your personal data with us or to whom you have given permission, such as social media or review sites.

5. Use of your personal data

We will only use your personal data in accordance with the law. Generally, your personal data will be used in the following cases:

• In order to perform the contract we have or are going to enter into with you. For example, when you buy our products, this is a contract.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override these. For example, when we carry out anti-fraud checks during the payment process.
• Where we need to meet potential legal or regulatory obligations. For example, to maintain our sales records for tax compliance.

Generally, we do not rely on consent as a legal basis to process your personal data, except where required by law, for example for sending you direct marketing communications. Where the legal basis is consent, you have the right to withdraw your consent at any time.

WHAT DO WE DO WITH YOUR INFORMATION?

When you purchase something from our store, as part of the buying and selling process, we collect the personal information you give us such as your name, address and email address.

When you browse our store, we also automatically receive your computer’s Internet Protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system.

Email marketing (if applicable): With your permission, we may send you emails about our store, new products and other updates.

SMS Marketing (if applicable): With your permission, we may send you text messages about our store, new products and other updates. Updates include payment reminders. Webhooks will be used to trigger the Checkout Reminders messaging system.

6. Cookies

Cookies help www.oshiboriconcept.com to work better and are very useful in the background to make it easier to become an Oshibori customer. You would miss many features if they were no longer there, such as the ease of logging in and moving from page to page or keeping products in your shopping cart when you visit other pages.

Some cookies collect information about how visitors use www.oshiboriconcept.com : for example which pages are visited most often or if error messages have appeared on certain pages. These cookies do not collect information that identifies a visitor. All information collected by these cookies is aggregated and used to improve how moo.com works.

Some cookies allow www.oshiboriconcept.com to remember choices you make (such as your user name, language, and region) in order to provide enhanced, more personal features. These cookies can also be used to remember your changes to text size, fonts, or other parts of web pages that you can customize.

Some cookies collect information about your browsing habits in order to deliver more relevant adverts to you. They are usually placed by advertising networks with our permission. They remember that you have visited a website and this information is shared with other companies such as advertisers. Often targeting or advertising cookies will be linked to site functionality provided by the other company.

When you use www.oshiboriconcept.com , your device or browser may receive cookies from third parties, for example when you use embedded content and social media links. It is important for you to know that we have no access to or control over the cookies used by these third party companies or sites. We advise you to consult the third party's website

for more information about their cookies and how to manage them.

You can set your browser to refuse all or some cookies, or to alert you when sites set or use cookies. Please note that if you disable or refuse cookies, some parts of this site will be inaccessible or will not function properly.

7. Disclosure of your personal data

Your personal data may be shared with the parties listed below for the purposes set out in this Privacy Policy. Your personal data may also be shared if permitted by law. Your personal data may be shared with the following categories of third parties:

• suppliers and service providers (such as technology providers, payment processing and fraud prevention providers, manufacturers, postal and courier services);
• Oshibori Concept International group companies;
• professional auditors and advisers such as bankers, lawyers, accountants and insurers; and
• government, regulators and police.

We require all third parties to ensure the security of your personal data and to treat it in accordance with the law. We do not allow our third party service providers to use your personal data for their own purposes. They are only allowed to process your personal data for specified purposes and in accordance with our instructions.

8. Payment Information

Oshibori Concept uses the PayPal payment processing service to process payments for products on the Site. All online payments will be processed in compliance with the Payment Card Industry (PCI) Data Security Standard, and your billing information (which is used by these payment processing services only for fraud protection purposes) is encrypted before being sent to them. Subject to the exceptions below, your credit card information is sent directly from your browser to these payment processing services. Oshibori Concept never sees your Permanent Account Number (PAN). This means that the payment form is either displayed on another site or in a box on the payment page.

With PayPal, we only store the symbols required to identify the transaction with PayPal, issue refunds, and recognize transactions made through PayPal.

9. International transfers

For any transfer of your personal data outside the EEA, we comply with applicable data protection laws. The mechanisms we may use during an international transfer are as follows:

• Your personal data is transferred to a country whose level of protection is officially considered adequate by the European Commission.
• We may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe (called “EU Standard Contractual Clauses”).
• When we use US-based providers, we may send them data if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared between Europe and the US. In case the provider is not certified by the EU-US Privacy Shield, we may use the Standard Contractual Clauses.

Your personal data is shared within the Oshibori Concept International Group, which involves transferring your data outside the European Economic Area. To do this, we use the EU Standard Contractual Clauses.

10. Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, altered, disclosed or accessed without authorisation. In addition, access to your personal data is limited to those employees, agents, contractors and other third parties on a need-to-know basis. They will process your personal data in accordance with our instructions and are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach. You and any applicable regulator will be notified of any such breach where legally required.

11. Data retention

Your personal data will only be kept for as long as necessary to fulfil the purpose for which it was collected. This includes for any legal, accounting, or reporting requirements. To determine the appropriate retention period for your personal data, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purpose of the processing and whether we can achieve that purpose through other means, and the applicable legal requirements. By law, for tax purposes we must keep basic information about our customers (including Contact Data, Identity Data, Financial Data and Transaction Data) for six years, from when they cease to be our customers. We also promise that you can come back at any time in the future to reprint products you have previously ordered from us. So, unless you delete this information, we keep it to keep that promise. In some cases, you can ask us to delete your data. See Your Legal Rights below for more information. In some cases, we anonymise your personal data (so that it can no longer be associated with you) for statistical or research purposes, in which case we may use it indefinitely, without further notice to you.

12. Your legal rights

If the General Data Protection Regulation applies to you because you are in the European Union, you have the following rights in relation to your personal data, in accordance with data protection legislation:

• The right to be informed: we have an obligation to inform you about how we use your personal data (which we do in this privacy policy);
• The right of access: this is the right to make a request for access to data concerning you in order to receive a copy of the personal data that we hold about you;
• The right to rectification: the right to ask us to rectify personal data concerning you that is incomplete or inaccurate;
• The right to erasure, also known as the “right to be forgotten”: in certain cases, you can ask us to delete the personal data we hold about you (unless there is a compelling legal reason why we need to keep it);
• The right to restriction of processing: you have the right in certain cases to ask us to suspend the processing of personal data;
• The right to data portability: you have the right to ask us for a copy of your personal data in a common format (e.g. a .csv file);
• The right to object: you have the right to object to the processing of your personal data (for example, by prohibiting us from processing your data for direct marketing purposes); and
• Rights relating to automated individual decision-making and profiling: You have the right to ask us to be transparent about any profiling we carry out or any automated decision-making.

Contact us if you wish to exercise any of the rights described above: SARL Oshibori Concept International, 59, rue Boileau, 75016 PARIS. You also have the possibility to file a complaint with the CNIL. You will not have to pay a fee for access to your personal data (or for the exercise of any other right). However, we may charge you a reasonable fee if your request is manifestly unfounded, repetitive or excessive. In this case, we may also refuse to respond to your request. We may ask you for specific information to confirm your identity and ensure your right to access your personal data (or to exercise any other right). This is a security measure to ensure that this personal data is not released to a person who is not authorized to receive it. We may also contact you to obtain more information about your request, in order to give you a faster response. We try to respond to all legitimate requests within one month. This one-month period may be exceeded if your request is particularly complex or if you have made several. In this case, we will notify you and keep you informed.

13. Changes to the Privacy Policy

The General Data Protection Regulation is new and the ICO continues to issue new advice to businesses on how to comply with it. As such, you may see small updates to our privacy policy over the coming months. Please check back and read it from time to time. Thank you.

14. Marketing not SMS

By entering your phone number at checkout and initiating a purchase, signing up through our subscription form or a keyword, you agree that we may send you SMS notifications (for your purchase, including abandoned cart reminders) and SMS marketing offers. SMS marketing messages will not exceed 3 per month. You acknowledge that consent is not a condition of purchase.
If you wish to opt out of receiving SMS marketing messages and notifications, please reply “STOP” to any mobile message sent by us or use the unsubscribe link we have provided to you in one of our messages. You understand and agree that alternative methods of opting out, such as using alternative words or requests, will not be considered a reasonable means of opting out. Message and data rates may apply.
For any questions, please text "HELP" to the number that sent you the messages. You can also contact us for more information. If you wish to unsubscribe, please follow the procedures above.