Privacy Policy.

Oasiac is an online beauty and skincare store inspired by Moroccan beauty rituals. This Privacy Policy explains how Oasiac collects, uses, shares and protects personal information when you visit our website, create an order, contact us or otherwise interact with our services.

For privacy-related questions or requests, please contact us through our contact page.

Depending on how you use Oasiac, we may collect information including:

• your name, email address and telephone number;
• billing and shipping information;
• products ordered, quantities, prices and order history;
• payment-related information processed through our payment providers;
• messages and information you provide when contacting us;
• technical information such as browser type, device information, IP address, language and approximate location;
• information about how you interact with our website.

Oasiac does not need to store your complete payment card details on its own servers. Payments may be securely processed by third-party payment providers such as Stripe.

Those providers may process information necessary to authorize, authenticate and complete your payment in accordance with their own privacy and security obligations.

We may use personal information to:

• process and manage orders;
• arrange delivery and communicate order updates;
• process payments and prevent fraudulent transactions;
• respond to questions, support requests and complaints;
• maintain and improve the Oasiac website;
• understand how our website and products are used;
• comply with legal, accounting, tax and regulatory obligations;
• protect Oasiac, our customers and our services from fraud, abuse and security threats;
• send marketing communications where permitted by law and where required, with your consent.

Where applicable data protection law requires a legal basis, Oasiac may process personal information because:

• processing is necessary to perform a contract with you, including processing and delivering an order;
• processing is necessary to comply with a legal obligation;
• processing is necessary for legitimate business interests, provided those interests are not overridden by your rights;
• you have provided consent where consent is required.

We may share personal information only when reasonably necessary to operate Oasiac, including with:

• payment processors;
• delivery, logistics and fulfilment providers;
• hosting, infrastructure and technology providers;
• analytics, security and fraud-prevention providers;
• professional advisers such as accountants or legal advisers;
• authorities or regulators where disclosure is required by law.

We do not disclose personal information to unrelated third parties merely for them to use for their own purposes without an appropriate legal basis.

Some companies that support Oasiac may operate in countries different from the country in which you live. As a result, personal information may be processed or stored internationally.

Where required by applicable law, we seek to use appropriate safeguards for international transfers of personal information.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling orders, providing customer support and meeting legal, accounting, tax, fraud-prevention and record-keeping requirements.

Different categories of information may be retained for different periods depending on their purpose and applicable legal requirements.

Depending on where you live and the laws that apply, you may have rights relating to your personal information, including the right to:

• request access to personal information we hold about you;
• request correction of inaccurate information;
• request deletion of personal information;
• request restriction of certain processing;
• object to certain types of processing;
• receive certain personal information in a portable format;
• withdraw consent where processing relies on consent;
• opt out of certain marketing communications;
• lodge a complaint with an appropriate data protection or privacy authority.

These rights are not absolute and may depend on your location and the circumstances of the processing.

Oasiac may use cookies and similar technologies that are necessary for the operation of the website, as well as other technologies used for preferences, performance, analytics or marketing where permitted.

Where applicable law requires consent for non-essential cookies, those technologies should only be used in accordance with the choices provided to you.

We use reasonable technical and organizational measures designed to protect personal information from unauthorized access, misuse, loss, alteration or disclosure.

No online service can guarantee absolute security, but we aim to use appropriate safeguards considering the nature of the information processed and the risks involved.

Oasiac is not intended to knowingly collect personal information from children where such collection would require parental or guardian authorization under applicable law.

We may update this Privacy Policy when our services, technologies, business practices or legal obligations change. The updated version will be published on this page with a revised effective date.

If you have a question about this Privacy Policy or want to exercise a privacy right, please use the Oasiac contact page.