Privacy Policy

Oktoring (“we,” “our,” or “us”) is committed to safeguarding your privacy and ensuring the protection of your personal data. This Privacy Policy outlines how we collect, process, store, and protect your personal information when you interact with our website (https://www.oktoring.com) and related services. In accordance with applicable data protection regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), we uphold a privacy-first approach to data processing and user transparency.

1. Commitment to Privacy and Data Protection

We understand the importance of your personal data and are dedicated to handling it in a lawful, fair, and transparent manner. We employ stringent measures to ensure your data is processed securely and in accordance with your rights under local and international data protection laws.

2. Scope of This Policy and Data Controller Role

This Privacy Policy applies to personal data collected through our website (oktoring.com), mobile interfaces, online services, and customer interactions. For purposes of the GDPR and other applicable laws, the data controller responsible for your personal information is Oktoring, which may be contacted at [email protected].

3. Categories of Data Processed

We may collect and process the following categories of personal data based on your interaction with our services:

a. Usage Data
Includes details such as your browser type, IP address, access times, pages visited, referring URLs, session duration, and diagnostic data. This helps us understand user behavior and website performance.

b. Account Data
Captured when you register or log in to your account, including your full name, billing/shipping address, email address, telephone number, and login credentials.

c. Profile Data
Includes your preferences, purchase history, behavior on the website, and any customizations or settings related to your user profile.

d. Communication Data
Covers your communications with us, including email exchanges, support requests, feedback, and any other correspondence initiated by you.

e. Technical Data
Data about the devices you use to access oktoring.com, such as operating system, device type, internet service provider, time zone setting, and browser plug-ins.

f. Transaction Data
Details of transactions carried out through our website, including payment information (securely handled by third-party processors), product details, delivery address, and order history.

g. Preference Data
Covers your marketing communications preferences, product interest areas, consent records, and opt-in or opt-out settings.

4. Legal Bases for Processing

We process your personal data relying on the following legal bases:

– Contractual Necessity: To establish, perform, and fulfill obligations under any contracts entered into between you and Oktoring.
– Legitimate Interest: To enhance our services, analyze platform performance, prevent fraud, and improve user experience, unless your interests outweigh ours.
– Consent: For processing activities such as marketing communications or non-essential cookies, we request your explicit consent.
– Legal Obligation: Where processing is necessary to comply with legal or regulatory requirements.

5. Your Rights

Under applicable laws, you may exercise the following rights:

– Right of Access: Obtain confirmation regarding the processing of your data and access a copy.
– Right to Rectification: Request correction of inaccurate or incomplete personal data.
– Right to Erasure: Request deletion of your data where legally permissible.
– Right to Restriction: Temporarily restrict processing under certain scenarios.
– Right to Data Portability: Receive your data in a structured, commonly used, and machine-readable format or transmit it to another controller.
– Right to Object: Object to processing based on our legitimate interests, including direct marketing.
– Right Not to Be Subject to Automated Decisions: You will not be subject to decisions based solely on automated processing without your explicit consent, where such decisions produce significant effects.

To exercise any of these rights, please contact us at [email protected].

6. Security Measures

We adopt industry-standard security practices to protect your personal data, including:

– Encryption of data in transit and at rest.
– Access controls to limit data access based on role and authorization.
– Regular data backups and disaster recovery protocols.
– Internal employee training programs on data protection and information security.

7. International Transfers

Where appropriate, your data may be transferred to and stored in jurisdictions outside your country of residence. We implement Standard Contractual Clauses and other recognized safeguards to ensure that such international transfers comply with GDPR, CCPA, and other relevant frameworks.

8. Data Retention

We retain your personal data only for as long as necessary for the purposes stated in this Policy:

– Usage Data: 12 months
– Account Data: For the duration of your account’s active status and up to 6 years thereafter
– Profile and Communication Data: Up to 5 years after last user interaction
– Transaction Data: 7 years, in compliance with applicable tax and accounting obligations
– Preference Data: Until you update or revoke your consent

9. Cookie Policy

Our website uses cookies to enhance functionality, improve performance, and analyze user behavior. The types of cookies we use include:

– Essential Cookies: Required for core website functionality.
– Functional Cookies: Remember your preferences and customization choices.
– Analytics Cookies: Monitor website performance and usage trends.
– Performance Cookies: Track the effectiveness of website features and content.

10. Cookie Management and Compliance

Upon your first visit to oktoring.com, you will be presented with a cookie consent banner. You may accept or reject non-essential cookies or update your preferences at any time through our Cookie Settings interface.

In compliance with GDPR and CCPA, we only process non-essential cookies once you provide explicit consent. Users located within the EU or California have the right to opt out of tracking and can exercise this through browser settings or by contacting us directly.

11. Children’s Privacy

Our services are not intended for use by individuals under the age of 13. We do not knowingly collect or process personal data from children under this age. If we discover that we have inadvertently collected data from a child under the age of 13, we will delete such data from our systems promptly.

12. Policy Updates and User Notifications

We may revise this Privacy Policy to reflect legal, technological, or service changes. While we encourage users to review this Policy periodically, we will notify you of any material changes through prominent banners, account notifications, or email communications where appropriate.

13. Contact

If you have any questions, complaints, or concerns about this Privacy Policy or how your personal data is handled, you may contact us via:

Email: [email protected]

We are committed to complying fully with applicable privacy regulations and ensuring that your personal data is respected and protected. Please do not hesitate to reach out regarding any privacy-related concerns or requests.