Privacy Policy for Frank and Oak (frankanoak.com)
1. Introduction
At Frank and Oak, accessible via frankanoak.com, we take your privacy seriously. We are firmly committed to safeguarding your personal data and maintaining your trust. This Privacy Policy explains how we collect, use, process, and protect the personal information you provide when interacting with our website, services, and communications.
We are dedicated to full compliance with applicable data protection regulations, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant data privacy laws.
2. Scope and Role of the Data Controller
This Privacy Policy applies to all personal data collected through frankanoak.com and associated services. By visiting or interacting with our website, submitting forms, creating an account, or making a purchase, you acknowledge the practices described herein.
For the purposes of applicable data protection legislation, Frank and Oak, as the owner of frankanoak.com, acts as the Data Controller for any personal information collected. All inquiries regarding data protection may be directed to [email protected].
3. Categories of Personal Data We Collect
We may collect and process the following categories of personal data:
a. Usage Data
Includes information about how you use our website and services such as IP address, browser type, browser version, session duration, time zone settings, page interactions, and browsing patterns.
b. Account Data
Includes identifying information submitted when you create an account or check out, such as your full name, billing and delivery addresses, email address, and phone number.
c. Profile Data
Includes information related to your preferences, purchase history, wishlist, shopping behavior, and demographic interests.
d. Communication Data
Includes the content of emails, forms, support tickets and chat interactions, as well as records of correspondence and customer service queries.
e. Technical Data
Includes device-specific information such as device type, operating system, system configuration, hardware specifications, mobile network data, and platform identifiers.
f. Transaction Data
Includes details about payments, order history, delivery tracking, payment methods (note: we do not store full card numbers), and invoice data.
g. Preference Data
Includes selections about email and SMS marketing consent, product and style interests, and opt-in preferences for campaigns or content subscriptions.
4. Legal Bases for Processing Personal Information
We process your personal data based on the following lawful grounds under the GDPR:
– Consent: Where you have given clear and unambiguous permission for processing (e.g., subscribing to marketing).
– Contractual Necessity: Processing is necessary for entering into or performing contracts with you (e.g., order fulfillment).
– Legitimate Interests: We may process data for our legitimate business interests while ensuring minimal privacy impact (e.g., website improvement, fraud prevention).
– Legal Obligation: In cases where processing is required to comply with a legal or regulatory obligation.
Residents of California may also exercise their rights under the CCPA, including the right to opt out of certain data sales or disclosures.
5. Your Rights
Under data protection laws, you have the following rights with respect to your personal data:
– Right of Access – You may request access to the personal data we hold about you.
– Right of Rectification – You have the right to request correction of any inaccurate or incomplete data.
– Right to Erasure – You may request we delete your personal information, subject to certain conditions.
– Right to Restrict Processing – You can request we restrict how your data is processed in certain scenarios.
– Right to Data Portability – You may request a copy of your data in a structured, commonly used machine-readable format.
– Right to Object – You may object to certain types of data processing, including direct marketing.
To exercise any of these rights, please contact us at [email protected].
6. Data Security Measures
We employ stringent security measures to protect your personal data. These include:
– Secure socket layer (SSL) encryption for all transmissions.
– Role-based access and authentication controls.
– Secure cloud infrastructure with continuous monitoring.
– Regular security audits and penetration testing.
– Employee training programs focused on data protection principles.
– Scheduled data backups and disaster recovery plans.
Despite our efforts, no system can guarantee 100% security. If you believe your data has been compromised while using frankanoak.com, please notify us immediately.
7. International Data Transfers
In some cases, your data may be transferred outside your country of residence, including to countries that may not provide the same level of data protection. When such transfers occur, we apply appropriate safeguards, including the use of Standard Contractual Clauses (SCCs) as approved by the European Commission or reliance on similar international compliance mechanisms.
8. Data Retention
We retain your personal data only as long as necessary for the purposes for which it was collected, including the fulfillment of legal, contractual, and business obligations. Retention periods vary by data category:
– Account and Profile Data: Retained for as long as your account remains active.
– Transaction and Financial Data: Retained for up to 7 years for tax, audit, and reporting purposes.
– Communication Data: Retained for up to 3 years for quality assurance and legal purposes.
– Preference and Consent Data: Retained until you withdraw consent or otherwise update your preferences.
Upon expiration of the applicable period, your data will be securely deleted or anonymized.
9. Cookie Policy
Our website uses cookies and similar technologies to enhance user experience, analyze website performance, and support marketing efforts. These fall into the following categories:
– Essential Cookies: Necessary for the website to function correctly.
– Functional Cookies: Enable customization features like language settings and login persistence.
– Analytics Cookies: Help us understand user behavior, sources of traffic, and website performance trends.
– Performance and Advertising Cookies: Used for measuring campaign effectiveness and delivering personalized content.
You may opt-out of non-essential cookies via our cookie management tool available on frankanoak.com in compliance with applicable regulations.
10. Cookie Management & Compliance
In accordance with GDPR and CCPA, we provide clear disclosure and obtain consent for cookie deployment. Visitors from the European Economic Area (EEA) will see a consent banner allowing full opt-in/opt-out control.
California residents may exercise their rights under the CCPA, including opting out of “sale” of data, as interpreted under the law. Our cookie tool provides these options.
11. Children’s Data
We do not knowingly collect or solicit personal data from individuals under the age of 13. If you are under 13, please do not use our services or submit any personal information via frankanoak.com. If we learn that we have inadvertently collected data from a minor, we will take steps to delete that information promptly.
Parents or guardians who believe that a child has submitted personal data to us should contact [email protected].
12. Policy Updates and Notifications
Frank and Oak reserves the right to update or modify this Privacy Policy at any time to reflect changes in legal requirements, our services, or data processing practices. We will provide notice of any material changes through appropriate channels, which may include notification on frankanoak.com or direct communication by email if you have registered with us.
We encourage you to review this policy periodically to remain informed about how we are protecting your data.
13. Contact Us
For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:
Email: [email protected]
Website: frankanoak.com
We are committed to honoring your privacy rights and maintaining transparency in our data practices. Thank you for trusting Frank and Oak.