Privacy policy

This Privacy Policy carries out the legal requirement between Three Stones Clothing Ltd, operating as Osuso Project, “We” and the Customer “you” and sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. We are committed to protecting your privacy. This Privacy Policy (together with our Terms of Service) describes how your information is collected, used, and shared when you visit or make a purchase from osusoproject.com (the “site”) or engage with us in other ways such as sales, marketing and social media.

By accessing this site or allowing someone to access this site on your behalf, you are consenting to our use of your information in accordance with this Privacy Policy. Please read this Privacy Policy carefully to understand how we collect, use and store your personal data. We reserve the right to update and amend our Privacy Policy for operational, legal or regulatory reasons. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Information We Collect

We may collect some of your information using automatic data collection technologies as you visit, use or navigate the site. This may include certain information about your equipment/device, browsing action and patterns, including:

• IP address
• web browser type and device characteristics
• operating system and platform
• referring URLs
• device name
• country and location
• how you use our service

This information is used to maintain the security and operation of the site for internal analytics and reporting purposes.

In addition, we collect Personal Information that you voluntarily provide. When you make a purchase or attempt to make a purchase through the site we may collect and use your personal data to provide the service that you have ordered or requested, to process and ship orders, to send order and shipping confirmations and/or to provide customer service and/or other promotional material through the site. The information provided by you that we may collect includes: name, billing address, shipping address, phone number, email address, payment information (including credit card) and purchase history.

How do we use your Personal Information

We use your information to provide, improve and administer our services, communicate with you, for security and fraud prevention and to comply with the law. We may also use you your personal information for other purposes with your consent.

We use your data for reasons including:

• To fulfill and manage your orders, returns and payments.
• To communicate with you.
• To provide you with a better shopping experience.
• To screen orders for potential risk or fraud.
• To identify usage trends.
• To request feedback.
• To send marketing and promotional material.
• To improve and optimize our site to improve our service.

We only process your personal information when we believe that it is necessary and we have a legal reason to do so under applicable law, with your consent, to comply with laws, to provide you with services to enter into our contractual obligations, to protect your rights, or to fulfill our business interests.

Your Information and Third Parties

We share your Personal Information with third parties to help us use your Personal Information, as described above. For example, we use Shopify to power our site. They provide us with the online e-commerce platform that allows us to sell our products and services to you. Your data is stored through Shopify’s data storage and the general Shopify application. They store your data on a secure server behind a firewall. For more insight you may want to read Shopify’s Terms of Service (https://www.shopify.com/legal/terms) or Privacy Statement (https://www.shopify.com/legal/privacy).

We also use Google Analytics to help us understand how our customers use the site -- you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

Behavioral Advertising

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.
You can opt out of targeted advertising by using the links below:

•  Facebook: https://www.facebook.com/settings/?tab=ads
• Google: https://www.google.com/settings/ads/anonymous
• Bing: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/

Data Protection Rights

You reserve the right to access, rectify or delete any personal data in our system at any time.

Tracking Technologies and Cookies

We use cookies and other tracking technologies to track the activity on our site. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyze Our Service. The technologies we use may include:

• “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org
• “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
• “Web beacons”, “tags”, and “pixels” are electronic files used to record information about how you browse the Site.

Do Not Track

Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.

Changes

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.

Age of Consent

The Site is not intended for individuals under the age of 18. We do not intentionally collect Personal Information from children. If you are the parent or guardian and believe your child has provided us with Personal Information, please contact us at the email address below to request deletion.

Data Retention

We will store your personal information when you place an order or request/sign up to receive more information or other marketing/promotional material about us or our products/activities through our site. The information you have provided to us is saved into our system to provide our services to you and support related activities. In certain cases, we may hold some of your information after closing your account to meet legal or regulatory requirements, resolve disputes, prevent fraud and abuse, or enforce our terms and conditions.

Opting Out of Marketing and Promotional Communications

You may unsubscribe from our marketing and promotional emails at any time by clicking on the unsubscribe link in the emails we sent to you or by contacting us at support@osusoproject.com. This will remove you from the marketing lists although we may communicate with you, for example, to send you service-related messages necessary for administration and use of your account and other non-marketing purposes.

Keeping Your Information Safe

We highly value our customer's privacy and do everything we can to protect and secure your information. We implement a system of organizational and technical security measures to safeguard your information. Your personal information is contained behind secured networks and is only accessible by a limited number of parties who have special access rights to such systems and are required to keep the information confidential.
All credit card information and payments are encrypted using secure socket layer technology (SSL) and stored with an AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.

Third Party Links

We will include third party links on our site as a convenience to you or to support our charity partners. These third party websites are not operated by us and have their own privacy policies and terms of use policies. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Canadian Consumer Privacy Protection Act - CCPPA

We may process your information if you have provided us with permission to use your information for specific purposes. You can withdraw consent at any time.

In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent including:

• If collection is clearly in the interest of the individual and consent cannot be obtained in a timely manner.
• For investigations, fraud detection and prevention.
• For business transactions provided certain conditions are met.
• If it is contained in a witness statement and the collection is necessary to settle claim.
• For identifying injured, ill or deceased persons and communicating with next of kin.
• If we have reasonable grounds to believe an individual has been, or may be a victim of financial abuse.
• If it is reasonable to expect collection and use with consent would compromise the availability or accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or contravention of the laws of Canada or a Canadian province.
• If it was produced by an individual in the course of their employment, business or profession and the collection is consistent with the purposes for which information was produced.
• If the collection is solely for journalistic, artistic or literary purposes.
• If the information is publicly available and is specified by the regulations.

California Consumer Privacy Act - CCPA

If you are a resident of California, you have the right to access the Personal Information we hold about you (also known as the ‘Right to Know’), to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information below. If you would like to designate an authorized agent to submit these requests on your behalf, please contact us at the address below.

 

General Data Protection Regulation - GDPR

If you are a resident European Economic Area (“EEA”), you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information below.

Your Personal Information will be initially processed in Ireland and then will be transferred outside of Europe for storage and further processing, including to Canada and the United States. For more information on how data transfers comply with the GDPR, see Shopify’s GDPR Whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR

Pursuant to the GDPR, if you are a resident of the EEA, we process your personal information under the following lawful bases:

• Your consent.
• The performance of the contract between you and the site.
• Compliance with our legal obligations.
• To protect your vital interests
• To perform a task carried out in the public interest.
• For our legitimate interests, which do not override your fundamental rights and freedoms.

Contact

If you have any comments or questions about this Privacy Policy or your personal information, please contact us at: support@osusoproject.com.