Oshibori Concept International European Privacy Policy

Welcome to the Oshibori Concept Privacy Policy page. Oshibori Concept respects your privacy and is committed to protecting your personal data.

1. Introduction

This privacy policy explains how Oshibori Concept uses your personal data when you visit our website, interact with us, and purchase our products. It also describes your privacy rights and how the law protects you. It is important that you read this privacy policy along with any other privacy policies we provide to you so that you understand why we use your data and how we do so.

2. Our website and the company Oshibori Concept:

Our website, www.oshiboriconcept.com, sells single-use scented refreshing towels with customizable packaging.

This website, which is intended for professional buyers, is not intended for children, and we do not collect any data relating to children.

Oshibori Concept International is the data controller for this website and for any processing of personal data carried out on its behalf.

In this privacy policy, the terms “Oshibori Concept,” “we,” “us,” or “our” refer to Oshibori Concept International, the company responsible for processing your data.

3. The personal data we collect about you

Personal data, or personal information, refers to any information about an individual that can be used to identify that individual. It does not include information where the identity is concealed (anonymous data).

We collect a variety of information about our wonderful customers (you!) and visitors to the Oshibori Concept International website. This personal data falls into different categories:

• Identity Data includes title, first name, last name, username, or a similar identifier, and an encrypted version of your username and password. If you interact with us via social media, your social media username may be included in this data.
• Contact information includes billing address, shipping address, email address, and phone numbers.
• Financial data includes your payment card information.
• Transaction data includes details about your payments and refunds, as well as the products you have purchased from us.
• Profile data includes your username and password, your purchases or orders, your preferences, and any profile data we have added (for example, through the use of analytics and profiling tools).
• Technical data includes your IP address, login information, browser type and version, time zone settings and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
• Usage Data includes information about how you use our website, products, and services.
• Tracking Data includes information that we or others collect about you through cookies and similar tracking technologies, such as web beacons, pixel tags, or mobile identifiers.

We do not collect special categories of personal data (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, genetic data, or biometric data). We also do not collect information relating to any criminal offenses or convictions. If you use this type of personal data on products you design on www.oshiboriconcept.com, we will not know. Any personal data included on designs or products will be treated as ordinary personal data.

Please note that if you choose not to share personal data with us or decline certain contact permissions, we may not be able to provide the requested products and services.

4. How is your personal data collected?

We use various methods to collect data about you, including:

Direct interactions. You may provide us with your personal information, contact information, and financial information by filling out our forms or by communicating with us via mail, phone, email, chat, or social media.

This includes personal data you provide when you:

Third-party or publicly available sources. We may receive personal data about you from various types of third parties, including:

• Technical data and/or tracking data from analytics providers, advertising networks, and information providers;
• Financial data, contact data, and transaction data from payment service providers and fraud prevention services;
• Identity data and contact data from data partners; and
• data from any third party that is legally authorized to share your personal data with us or to whom you have given permission, such as social media or review sites.

5. Use of your personal data

We will only use your personal data in accordance with the law. Generally, your personal data will be used in the following cases:

• In order to fulfill the contract we have entered into or are about to enter into with you. For example, when you purchase our products, that constitutes a contract.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override these. For example, when we conduct anti-fraud checks during the payment process.
• Where we need to comply with potential legal or regulatory obligations. For example, to maintain our sales records for tax compliance.

Generally, we do not rely on consent as a legal basis for processing your personal data, except where required by law, such as when sending you direct marketing communications. Where the legal basis is consent, you have the right to withdraw your consent at any time.

WHAT DO WE DO WITH YOUR INFORMATION?

When you purchase something from our store, as part of the buying and selling process, we collect the personal information you provide, such as your name, address, and email address.

When you browse our store, we also automatically receive your computer’s Internet Protocol (IP) address to help us understand your browser and operating system.

Email marketing (if applicable): With your permission, we may send you emails about our store, new products, and other updates.

SMS Marketing (if applicable): With your permission, we may send you text messages about our store, new products, and other updates. Updates include payment reminders. Webhooks will be used to trigger the Checkout Reminders messaging system.

6. Cookies

Cookies help www.oshiboriconcept.com work better and play a vital role in the background to make it easier for you to become an Oshibori customer. Without them, you would miss out on many features, such as the ability to log in and navigate from page to page with ease, or to keep items in your shopping cart while you browse other pages.

Some cookies collect information about how visitors usewww.oshiboriconcept.com, such as which pages are visited most often or whether error messages have appeared on certain pages. These cookies do not collect information that identifies a visitor. All information collected by these cookies is aggregated and used to improve the functionality of moo.com.

Some cookies allowwww.oshiboriconcept.com to remember the choices you make (such as your username, language, and region) in order to provide enhanced, more personalized features. These cookies can also be used to remember your changes to text size, fonts, or other customizable elements of web pages.

Some cookies collect information about your browsing habits in order to show you more relevant ads. They are usually placed by advertising networks with our permission. They remember that you have visited a website, and this information is shared with other companies, such as advertisers. Often, targeting or advertising cookies are linked to site features provided by the other company.

When you usewww.oshiboriconcept.com, your device or browser may receive cookies from third parties, such as when you view embedded content or click on social media links. It is important to note that we have no access to or control over the cookies used by these third-party companies or websites. We recommend that you visit the third party’s website

for more information about their cookies and how to manage them.

You can configure your browser to block all or some cookies, or to notify you when websites set or use cookies. Please note that if you disable or block cookies, some parts of this site may not be accessible or may not function properly.

7. Disclosure of your personal data

Your personal data may be shared with the parties listed below for the purposes described in this Privacy Policy. Your personal data may also be shared if permitted by law. Your personal data may be shared with the following categories of third parties:

• suppliers and service providers (such as technology providers, payment processing and fraud prevention providers, manufacturers, and postal and courier services);
• Oshibori Concept International group companies;
• professional auditors and advisors such as bankers, lawyers, accountants, and insurers; and
• the government, regulators, and the police.

We require all third parties to ensure the security of your personal data and to handle it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes. They are only permitted to process your personal data for specified purposes and in accordance with our instructions.

8. Payment Information

Oshibori Concept uses the PayPal payment processing service to process payments for products on the Site. All online payments are processed in compliance with the Payment Card Industry (PCI) Data Security Standard, and your billing information (which is used by these payment processing services solely for fraud prevention purposes) is encrypted before being sent to them. Subject to the exceptions below, your credit card information is sent directly from your browser to these payment processing services. Oshibori Concept never sees your Permanent Account Number (PAN). This means that the payment form is either displayed on another site or in a box on the payment page.

With PayPal, we only store the information necessary to identify the transaction with PayPal, issue refunds, and recognize transactions made through PayPal.

9. International transfers

For any transfer of your personal data outside the EEA, we comply with applicable data protection laws. The mechanisms we may use during an international transfer are as follows:

• Your personal data is transferred to a country whose level of data protection is officially recognized as adequate by the European Commission.
• We may use specific contracts approved by the European Commission that provide the same level of protection for personal data as is provided in Europe (known as “EU Standard Contractual Clauses”).
• When we use US-based providers, we may send them data if they are part of the Privacy Shield, which requires them to provide a level of protection for personal data shared between Europe and the US that is comparable to that provided by the EU-US Privacy Shield. If the provider is not certified under the EU-US Privacy Shield, we may use the Standard Contractual Clauses.

Your personal data is shared within the Oshibori Concept International Group, which involves transferring your data outside the European Economic Area. To do this, we use the EU Standard Contractual Clauses.

10. Data security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, misused, altered, disclosed, or accessed without authorization. In addition, access to your personal data is limited to those employees, agents, contractors, and other third parties on a need-to-know basis. They will process your personal data in accordance with our instructions and are bound by a duty of confidentiality. We have established procedures to address any suspected personal data breach. You and any applicable regulator will be notified of any such breach where legally required.

11. Data retention

Your personal data will only be retained for as long as necessary to fulfill the purpose for which it was collected. This includes any legal, accounting, or reporting requirements. To determine the appropriate retention period for your personal data, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purpose of the processing and whether we can achieve that purpose through other means, and the applicable legal requirements. By law, for tax purposes, we must retain basic information about our customers (including Contact Data, Identity Data, Financial Data, and Transaction Data) for six years after they cease to be our customers. We also promise that you can return at any time in the future to reprint products you have previously ordered from us. So, unless you delete this information, we keep it to fulfill that promise. In some cases, you can ask us to delete your data. See Your Legal Rights below for more information. In some cases, we anonymize your personal data (so that it can no longer be associated with you) for statistical or research purposes, in which case we may use it indefinitely, without further notice to you.

12. Your legal rights

If the General Data Protection Regulation applies to you because you are located in the European Union, you have the following rights regarding your personal data, in accordance with data protection laws:

• The right to be informed: we are required to inform you about how we use your personal data (which we do in this privacy policy);
• The right of access: this is the right to request access to data concerning you in order to receive a copy of the personal data we hold about you;
• The right to rectification: the right to ask us to correct personal data about you that is incomplete or inaccurate;
• The right to erasure, also known as the “right to be forgotten”: in certain cases, you can ask us to delete the personal data we hold about you (unless there is a compelling legal reason why we need to keep it);
• The right to restriction of processing: In certain cases, you have the right to ask us to suspend the processing of your personal data;
• The right to data portability: You have the right to request a copy of your personal data from us in a commonly used format (e.g., a .csv file);
• The right to object: You have the right to object to the processing of your personal data (for example, by prohibiting us from processing your data for direct marketing purposes); and
• Rights regarding automated individual decision-making and profiling: You have the right to ask us to disclose any profiling we conduct or any automated decision-making.

Please contact us if you wish to exercise any of the rights described above: SARL Oshibori Concept International, 59 Rue Boileau, 75016 Paris. You also have the option to file a complaint with the CNIL. You will not be charged a fee for accessing your personal data (or for exercising any other right). However, we may charge you a reasonable fee if your request is manifestly unfounded, repetitive, or excessive. In this case, we may also refuse to respond to your request. We may ask you for specific information to confirm your identity and ensure your right to access your personal data (or to exercise any other right). This is a security measure to ensure that this personal data is not released to a person who is not authorized to receive it. We may also contact you to obtain more information about your request, in order to provide you with a faster response. We strive to respond to all legitimate requests within one month. This one-month period may be extended if your request is particularly complex or if you have submitted multiple requests. In this case, we will notify you and keep you informed.

13. Changes to the Privacy Policy

The General Data Protection Regulation is new, and the ICO continues to issue updated guidance to businesses on how to comply with it. As a result, you may see minor updates to our privacy policy over the coming months. Please check back and review it from time to time. Thank you.

14. Marketing, not SMS

By entering your phone number at checkout and initiating a purchase, signing up through our subscription form or a keyword, you agree that we may send you SMS notifications (regarding your purchase, including abandoned cart reminders) and SMS marketing offers. We will not send more than 3 SMS marketing messages per month. You acknowledge that consent is not a condition of purchase.
If you wish to opt out of receiving SMS marketing messages and notifications, please reply “STOP” to any mobile message sent by us or use the unsubscribe link we have provided to you in one of our messages. You understand and agree that alternative methods of opting out, such as using alternative words or requests, will not be considered a reasonable means of opting out. Message and data rates may apply.
For any questions, please text "HELP" to the number that sent you the messages. You can also contact us for more information. If you wish to unsubscribe, please follow the procedures above.