PRIVACY POLICY

01 — Introduction

OAKAURA LAB operates this website and online store, including its related information, content, features, products, and services (collectively, the "Services"). Our online store is powered by Shopify, which provides the platform and related services that enable us to operate our website and serve our customers.

This Privacy Policy describes how we collect, use, process, and disclose personal information when you access our Services, communicate with us, submit business information, or engage in a commercial relationship with OAKAURA LAB.

If there is a conflict between our Terms of Service and this Privacy Policy concerning the collection, processing, or disclosure of personal information, this Privacy Policy will control with respect to those matters.

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.

02 — Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through:

• Our website and online store;
• Customer accounts and online transactions;
• Inquiry forms and quotation requests;
• Product development briefs and project submissions;
• Email communications and customer support;
• Newsletter subscriptions and marketing communications;
• Other interactions with OAKAURA LAB.

Our Services may be used by businesses, brand owners, purchasing representatives, professionals, and individual customers.

This Privacy Policy governs the handling of personal information. It does not replace separate agreements that may apply to a specific business relationship, including non-disclosure agreements, project agreements, formula purchase or transfer agreements, or other written commercial agreements.

03 — Personal Information We Collect

The types of personal information we collect depend on how you interact with our website and Services. Personal information generally means information that identifies or can reasonably be linked to an identifiable individual.

Contact Information

Name, company name, brand name, email address, telephone number, billing address, shipping address, and other contact details.

Business Information

Company details, business role, purchasing responsibilities, business location, target markets, product categories, and other information related to a business relationship.

Account Information

Account identifiers, login credentials or authentication information, preferences, settings, and other information associated with your customer account. Account credentials may be managed by Shopify or other authorized service providers.

Project Information

Product concepts, product requirements, formula requirements, ingredient preferences, packaging specifications, artwork, uploaded files, product references, technical specifications, and other materials submitted for product development or evaluation.

Transaction Information

Products viewed or purchased, shopping cart activity, order history, quotations, payment status, shipping information, returns, cancellations, and fulfillment details.

Financial Information

Payment method details, transaction records, payment confirmations, and related financial information. Payment card and financial account information may be collected and processed by Shopify and applicable payment service providers. We do not intend to store complete payment card numbers or card security codes on our own systems.

Communications

Information you provide when contacting us, requesting support, submitting inquiries, discussing projects, or communicating with our team.

Technical and Usage Information

IP address, browser type, device information, operating system, network connection, approximate location, pages visited, referring website, and information about how you interact with our website.

04 — Sources of Personal Information

We may collect personal information from the following sources:

• Directly from you: When you create an account, submit an inquiry, request a quotation, upload project materials, place an order, subscribe to communications, or contact us.
• Automatically through our Services: Through cookies, pixels, log files, and similar technologies when you browse or use our website.
• From service providers: When third-party providers collect or process information on our behalf.
• From business partners and other third parties: Including referral sources and publicly available business information, where permitted by applicable law.

05 — How We Use Your Personal Information

We may use personal information for the following purposes:

Providing Products and Services

To operate our website, manage customer accounts, process orders and payments, arrange shipping, fulfill purchases, and provide customer support.

Business and Project Development

To review inquiries, evaluate product development opportunities, prepare quotations and proposals, communicate about project requirements, and support product development, testing, manufacturing, packaging, and fulfillment.

Account and Transaction Management

To maintain account records, process transactions, provide order updates, manage returns or cancellations, and maintain relevant business records.

Marketing and Communications

To send newsletters, product updates, promotional communications, and other information where permitted by applicable law and your communication preferences.

Website Improvement and Personalization

To understand how visitors use our website, improve our products and Services, personalize the shopping experience, and support relevant advertising activities.

Security and Fraud Prevention

To authenticate accounts and transactions, detect suspicious activity, prevent fraud, protect our website, and maintain the security of our Services.

Legal and Regulatory Compliance

To comply with applicable laws, regulations, legal requests, accounting requirements, and other legitimate legal obligations.

06 — Business and Project Information

Because OAKAURA LAB provides product development, private label, and OEM/ODM-related services, information submitted through our website may include commercially sensitive business and project information.

This may include:

• Product concepts and development briefs;
• Formula requirements and ingredient preferences;
• Product references and technical specifications;
• Packaging requirements and artwork;
• Brand information and target market details;
• Quotation requests and commercial requirements;
• Other materials submitted for project evaluation or development.

We use this information as reasonably necessary to evaluate, develop, manufacture, package, fulfill, communicate about, and support the relevant project or business relationship.

We take reasonable measures to handle such information appropriately and limit access to individuals and service providers who need it for legitimate business purposes.

07 — Project Confidentiality and Formula Ownership

Submitting project information to OAKAURA LAB does not, by itself, transfer ownership of any formula, intellectual property, proprietary information, artwork, or other rights to either party.

Confidentiality obligations, formula ownership, intellectual property rights, formula transfer, and permitted use of project information may be governed by separate non-disclosure agreements, project agreements, formula purchase or transfer terms, or other written agreements, where applicable.

We do not intentionally publish or publicly disclose client-provided confidential project information for unrelated marketing purposes without appropriate authorization, except where disclosure is required by law or otherwise permitted under an applicable agreement.

This Privacy Policy governs the handling of personal information. It does not replace, create, or independently establish a non-disclosure agreement, formula ownership arrangement, or intellectual property agreement.

08 — How We Share Personal Information

We may disclose personal and business information to third parties when reasonably necessary to operate our business, provide our Services, or meet applicable legal requirements.

Shopify and Technology Providers

Shopify and other providers supporting our website, hosting, customer accounts, data storage, analytics, and technical operations.

Payment Providers

Payment processors and financial service providers that facilitate payment processing, transaction verification, and fraud prevention.

Shipping and Fulfillment Providers

Shipping carriers, logistics providers, fulfillment partners, and other parties involved in delivering products.

Manufacturing and Project Service Providers

Manufacturers, packaging suppliers, testing laboratories, regulatory service providers, and other professional providers involved in a specific product development or commercial project, where necessary.

Marketing and Analytics Providers

Marketing platforms, analytics providers, and advertising partners that help us understand website activity, communicate with customers, and support relevant advertising, subject to applicable law and privacy choices.

Legal and Professional Advisors

Lawyers, accountants, consultants, and other professional advisors where reasonably necessary.

Legal and Business Transactions

Government authorities, regulators, or other parties when required by law, or in connection with a merger, acquisition, restructuring, financing, or sale of business assets.

We do not sell personal information for monetary consideration. However, certain disclosures or uses of personal information for targeted advertising may be considered "sharing," "selling," or similar activities under specific privacy laws, even when no money is exchanged.

Applicable opt-out rights are described in the sections below.

09 — Relationship with Shopify and Third-Party Services

Our online store is hosted by Shopify. Shopify collects and processes personal information about your access to and use of our store to provide and improve its services.

Information submitted through our store may be transmitted to and processed by Shopify and other service providers, including providers located in countries other than your own.

Shopify Network Intelligence

Our store uses Shopify Network Intelligence. As described by Shopify, this feature allows customer data to be securely used together with other Shopify data to help improve products, advertising targeting, and personalization.

Shopify states that other merchants cannot see our store's customer data through this feature.

Depending on your location and applicable privacy laws, certain uses of personal information for advertising or personalization may be subject to opt-out rights.

Shopify may be independently responsible for certain processing activities associated with its enhanced services and for responding to applicable privacy requests relating to those activities.

You can learn more about Shopify's privacy practices through:

• Shopify Consumer Privacy Policy
• Shopify Privacy Portal

Third-party providers may also process personal information according to their own privacy notices, contractual obligations, and applicable laws.

10 — Cookies and Tracking Technologies

Our website may use cookies, pixels, log files, and similar technologies for purposes including:

• Essential website and shopping cart functions;
• Customer preferences and website settings;
• Website analytics and performance measurement;
• Security and fraud prevention;
• Marketing and advertising;
• Personalization of website content and Services.

Depending on your location, you may be able to manage certain cookie and tracking preferences through our website's available privacy tools or your browser settings.

Disabling certain cookies may affect the availability or functionality of some website features.

11 — Marketing and Business Communications

If you subscribe to our communications or otherwise provide permission where required, we may send you:

• Product updates and new arrivals;
• Product catalogs and brand inspiration;
• Formulation and product development insights;
• Promotional offers and announcements;
• Other relevant business or marketing communications.

You may unsubscribe from marketing emails at any time by using the unsubscribe link provided in the email.

Even if you opt out of marketing communications, we may continue to send non-promotional messages relating to your account, orders, transactions, or ongoing projects.

12 — International Data Transfers

OAKAURA LAB serves customers internationally. As a result, personal information may be transferred to, stored in, or accessed from countries other than the country in which you reside.

These countries may have data protection laws that differ from those in your jurisdiction.

Where required by applicable law, we use appropriate safeguards for international transfers of personal information, including recognized contractual transfer mechanisms or other legally accepted protections, as applicable.

13 — Data Retention and Security

Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

• Providing products and Services;
• Maintaining customer accounts and business records;
• Managing orders, payments, and project relationships;
• Meeting legal, regulatory, tax, and accounting requirements;
• Resolving disputes;
• Protecting our legitimate business interests.

When information is no longer reasonably required, we may delete, anonymize, or securely dispose of it, subject to applicable legal and business requirements.

Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, or loss.

However, no method of electronic transmission or storage can be guaranteed to be completely secure. We cannot guarantee absolute security of information transmitted through the internet.

14 — Your Privacy Rights and Choices

Depending on your location and applicable privacy laws, you may have some or all of the following rights:

• Right to Access or Know: Request access to personal information we hold about you.
• Right to Delete: Request deletion of personal information, subject to applicable exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Data Portability: Request a copy of certain personal information or its transfer to another service provider, where applicable.
• Right to Restrict or Object: Request restriction of or object to certain processing activities, where applicable.
• Right to Withdraw Consent: Withdraw consent where processing is based on your consent.
• Right to Opt Out: Opt out of certain uses or disclosures of personal information for targeted advertising, sale, or sharing, where applicable.
• Marketing Preferences: Unsubscribe from promotional communications at any time.

You may exercise applicable privacy rights through available privacy tools on our website or by contacting us at info@oakauralab.com .

To learn more about privacy choices relating to Shopify's processing, you may also visit the Shopify Privacy Portal .

We may need to verify your identity before processing certain requests. Where permitted by applicable law, you may authorize another person to submit a privacy request on your behalf.

We will not discriminate against you for exercising privacy rights protected by applicable law.

Where legally applicable, we recognize Global Privacy Control signals as requests to opt out of relevant sale or sharing activities for the browser or device sending the signal.

15 — California Privacy Rights

If you are a California resident and applicable California privacy laws apply to our processing of your personal information, you may have additional rights.

Depending on the circumstances, these rights may include:

• The right to know what categories of personal information we collect, use, disclose, or share;
• The right to request access to specific pieces of personal information;
• The right to request deletion of personal information;
• The right to request correction of inaccurate personal information;
• The right to opt out of the sale or sharing of personal information, including certain processing for cross-context behavioral advertising;
• The right to limit certain uses and disclosures of sensitive personal information, where applicable;
• The right not to receive discriminatory treatment for exercising your privacy rights.

We do not sell personal information for monetary consideration. However, certain data uses or disclosures for targeted advertising may fall within the legal definition of "sharing" under California law.

You may exercise applicable rights through the privacy tools available on our website or by contacting info@oakauralab.com .

You may also use the Shopify Privacy Portal for applicable Shopify-related privacy choices.

Business and Professional Contacts

If you interact with OAKAURA LAB in a business or professional capacity, such as a brand owner, purchasing representative, supplier, or service provider, we may collect and use business contact information and project-related information to communicate with you, evaluate business opportunities, prepare quotations, support product development, and maintain our business relationship.

The application of specific California privacy rights may depend on the nature of the information and applicable legal requirements.

16 — European Economic Area, United Kingdom, and Switzerland

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, additional data protection rights may apply under the GDPR and other applicable local laws.

Where required, we process personal information based on one or more applicable legal grounds:

• Contractual Necessity: Processing necessary to perform a contract or take steps requested by you before entering into a contract.
• Consent: Processing based on your freely given consent.
• Legitimate Interests: Processing necessary for our legitimate business interests, where those interests are not overridden by your rights and freedoms.
• Legal Obligations: Processing necessary to comply with applicable legal or regulatory requirements.

Depending on the circumstances, you may have rights to access, correct, delete, restrict, or object to the processing of your personal information, request data portability, and withdraw consent.

You may also have the right to lodge a complaint with the relevant data protection supervisory authority in your country or region.

Where personal information is transferred outside the EEA, UK, or Switzerland, appropriate transfer safeguards will be used where required by applicable law.

17 — Children's Privacy

Our website and Services are primarily intended for businesses, professionals, and individuals who are legally able to enter into applicable agreements.

Our Services are not directed to children, and we do not knowingly collect personal information from children where such collection is prohibited by applicable law.

If you believe a child has provided personal information to us in circumstances where collection is not permitted, please contact us so that we can review the matter and take appropriate action.

18 — Business Transfers

If OAKAURA LLC or substantially all of its assets are involved in a merger, acquisition, restructuring, financing, sale, or other business transaction, personal information may be transferred as part of that transaction, subject to applicable privacy laws and any required protections.

19 — Complaints

If you have concerns or complaints about how we collect, use, or disclose personal information, please contact us using the details in the Contact Us section below.

Depending on your location, you may have the right to request a review of our response or lodge a complaint with your local data protection authority.

20 — Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business practices, website, Services, technology, or applicable legal and regulatory requirements.

When changes are made, we will update the "Last Updated" date at the top of this page.

Where required by law, we may provide additional notice of material changes.

21 — Contact Us

If you have questions about this Privacy Policy, our privacy practices, or would like to submit a privacy-related request, please contact us:

OAKAURA LLC

Doing business as OAKAURA LAB

Email: info@oakauralab.com

Mailing Address:
732 S 6th St #4761
Las Vegas, NV 89101
United States

You may also reach us through the Contact Us page on our website.

For privacy-related requests, please include sufficient information for us to understand and respond to your request. We may request additional information to verify your identity where permitted or required by applicable law.

For the purposes of applicable data protection laws, OAKAURA LLC acts as the data controller where it determines the purposes and means of processing personal information.

Shopify and other service providers may separately process personal information in accordance with their own roles and responsibilities under applicable law.