Privacy Policy - OClassical

Oclassical (“we”, “us”, or “our”) is firmly committed to safeguarding the privacy and personal data of all users of our website, accessible at oclassical.com. This Privacy Policy outlines how we collect, use, disclose, and protect your personal data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). By using oclassical.com, you consent to the data practices described in this policy.

1. Commitment to Privacy and Data Protection

We recognize that privacy is a fundamental right and are fully committed to protecting the integrity, confidentiality, and security of your personal data. At oclassical.com, we adhere to privacy-by-design principles and employ appropriate technical and organizational measures to ensure that your data is processed lawfully, fairly, and transparently.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all personal data collected through oclassical.com and any related services. We act as the “data controller” with respect to your personal data under the GDPR. For residents of California, we are a “business” under the CCPA. This policy covers all users, including registered and unregistered visitors, who interact with our website or services.

3. Categories of Personal Data We Process

We may collect and process the following categories of personal data:

a. Usage Data
Includes your IP address, browser type and version, time zone setting, location data, language preferences, and browsing interactions. This data helps us understand how you use our site and improve the overall user experience.

b. Account Data
Includes your name, email address, phone number, mailing address, and login credentials, provided when you create an account or register for services.

c. Profile Data
Includes your purchase history, music preferences, playlist interactions, and behavioral information such as page engagement and session clicks.

d. Communication Data
Includes information such as support inquiries, contact form submissions, email correspondence, and call history, if applicable.

e. Technical Data
Includes data about your device, operating system, screen resolution, referring URLs, and system configuration details.

f. Transaction Data
Includes order details, billing address, shipping address, payment method, and confirmation status. We use authorized third-party processors for secure payment processing.

g. Preference Data
Includes your marketing and communication preferences, opt-in and opt-out history, and declared areas of interest.

4. Legal Bases for Processing Personal Data

We process your personal data only when we have a lawful basis to do so. These include:

– Consent: Where required, we obtain explicit consent for processing specific personal data categories (e.g., marketing preferences or cookies).
– Contract: Processing necessary to fulfill contractual obligations, such as delivering orders or providing registered services.
– Legal Obligation: Processing required to comply with applicable legal obligations.
– Legitimate Interests: Processing based on our legitimate interests, provided these do not override your rights and freedoms. This includes service improvement, fraud prevention, and user experience analytics.

5. Your Data Subject Rights

Under applicable laws, you have the following rights:

– Right of Access: Request confirmation and a copy of the personal data we hold about you.
– Right to Rectification: Request correction of inaccurate or incomplete data.
– Right to Erasure (“Right to Be Forgotten”): Request deletion of your data, subject to legal and contractual limitations.
– Right to Restriction: Request restriction of processing in accordance with specific conditions.
– Right to Data Portability: Receive your personal data in a structured, commonly used format and request we transfer it to another controller.
– Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.

To exercise any of these rights, please contact us at [email protected].

6. Security Measures

We take appropriate security measures to protect your personal data from unauthorized access, use, or disclosure. These include:

– End-to-end encryption of sensitive data in transit and at rest
– Access controls governed by role and authorization levels
– Secure servers and firewalls
– Regular data backups with redundancy protocols
– Periodic security audits and penetration testing
– Staff training on data privacy and information security

7. International Data Transfers

We may transfer your personal data outside your country of residence for purposes such as hosting or third-party processing. Where such transfers occur, we rely on appropriate safeguards, including the EU Standard Contractual Clauses and recognition of adequate jurisdictional protections.

8. Data Retention Policy

We retain personal data only as long as necessary to fulfill the purposes outlined above or as required by law. Retention timelines include:

– Account Data: Retained while your account is active and up to 3 years following termination
– Transaction Data: Retained for financial and legal compliance for up to 7 years
– Communication Data: Retained for 2 years from the last contact
– Usage and Technical Data: Aggregated and/or anonymized after 12 months
– Preference Data: Retained for 2 years or until user modifies consent

9. Cookie Policy

Oclassical.com uses cookies and similar technologies to enhance user experience, analyze traffic, and track marketing effectiveness. Categories include:

– Essential Cookies: Enable basic site functionalities such as login and navigation.
– Functional Cookies: Support personalization and user-preferred settings.
– Analytics Cookies: Collect data on user interactions to optimize performance.
– Performance Cookies: Monitor overall stability and page speed.

10. Cookie Management and Compliance

In accordance with GDPR and CCPA, we obtain consent where required before placing non-essential cookies on your device. You can manage your cookie preferences at any time via the website’s cookie settings panel or through your browser settings. California residents may also exercise their “Do Not Sell My Personal Information” right by adjusting these settings.

11. Children’s Privacy

Oclassical.com is not intended for use by individuals under the age of 13. We do not knowingly collect or process personal data from children. If we become aware that we have inadvertently gathered data from a child under 13, we will take prompt steps to delete such information in accordance with applicable laws.

12. Updates to This Privacy Policy

We reserve the right to modify this Privacy Policy to reflect changes in legal, regulatory, or operational requirements. Any material changes will be communicated through prominent notices on oclassical.com. Continued use of our site after such changes constitutes your acknowledgment and agreement to the revised policy.

13. Contact Us

If you have questions, concerns, or wish to exercise your data rights, please contact us:

Email: [email protected]
Website: https://oclassical.com

We are committed to full compliance with GDPR, CCPA, and all relevant data protection laws. Your privacy is central to everything we do, and we encourage you to reach out with any concerns regarding your personal data.