Privacy Policy

Effective Date: 18 June 2025

This Privacy Policy (“Policy”) explains how Octsource (“Octsource,” “we,” “us,” or “our”) collects, uses, processes, and discloses your personal information in connection with your use of our website located at www.octsource.com (the “Site”) and our related products and services (collectively, the “Services”).

By accessing or using the Services, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree, please discontinue your use of the Services.

1. Changes to This Policy

We may amend this Policy periodically to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. We will post the updated Policy on this page and revise the “Effective Date.” Where legally required, we will notify you or seek your consent before implementing material changes.

2. Information We Collect

We collect personal information about you as described below:

2.1 Information You Provide Directly

This includes:

• Identifiers and Contact Information: name, email, phone number, mailing and billing address.
• Account Credentials: username, password, security questions.
• Transaction Information: orders, payment confirmation, shipping details.
• Preferences and Communications: any content you submit in inquiries or customer service interactions.

2.2 Information Collected Automatically

Through cookies and similar technologies, we automatically collect:

• Device and browser type
• IP address
• Browsing and usage data
• Referring URLs
• Interaction information

2.3 Information from Third Parties

We may receive information about you from:

• Service Providers and Vendors: including Shopify and payment processors.
• Marketing Partners: advertising networks and analytics providers.

All data from third parties is processed in accordance with this Policy.

3. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, we process your personal information under the following legal bases:

• Performance of a contract: to provide and manage Services you request.
• Compliance with legal obligations: to meet legal and regulatory requirements.
• Legitimate interests: to maintain and improve our Services, prevent fraud, and secure our systems, unless overridden by your rights.
• Consent: where we rely on your consent, such as for certain marketing activities. You have the right to withdraw consent at any time.

4. How We Use Personal Information

We process your information for the following purposes:

• Service Delivery: fulfilling orders, processing payments, shipping products, managing accounts.
• Customer Support: responding to inquiries and resolving issues.
• Marketing: delivering newsletters, promotions, and tailored content, subject to applicable law.
• Security and Fraud Prevention: detecting and mitigating unauthorized activities.
• Legal Compliance: complying with laws, regulations, or lawful requests.
• Analytics: improving and optimizing our Services.

5. Cookies and Similar Technologies

We use cookies and similar technologies to:

• Enable core functionality of the Site.
• Remember your preferences.
• Conduct analytics.
• Deliver targeted advertising.

Managing Cookies:
You may disable cookies through your browser settings. For more information regarding cookies used by Shopify, see:
https://www.shopify.com/legal/cookies.

Note that disabling cookies may affect functionality.

6. Disclosure of Personal Information

We may disclose your information to:

• Service Providers: including payment processors, hosting providers, shipping partners, analytics and marketing services.
• Affiliates and Subsidiaries: within our corporate group.
• Advertising and Business Partners: subject to applicable law.
• Authorities and Regulators: to comply with legal obligations, enforce agreements, or protect rights.
• Third Parties with Your Consent: when you authorize sharing.
• Successors: in connection with a merger, acquisition, or sale of assets.

We do not sell your personal information in exchange for monetary consideration.

7. International Data Transfers

Your information may be transferred to, processed, and stored in countries outside your jurisdiction, including the United States.

If you are in the EEA, UK, or Switzerland:
We implement appropriate safeguards for cross-border transfers:

• We rely on the European Commission’s Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum, as applicable.
• Where required, we will implement supplementary measures to ensure data protection.

If you wish to receive a copy of these safeguards, you may contact us using the details below.

8. Your Rights

Depending on applicable laws, you may have rights that include:

You or your authorized agent may exercise these rights by contacting us (see “Contact Us” below). We may request verification of your identity before processing any request.

9. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, grants you the right to:

• Request to know categories and specific pieces of personal information we collect, use, disclose, or sell.
• Request deletion of personal information.
• Request correction of inaccurate personal information.
• Opt out of sharing personal information for cross-context behavioral advertising.
• Limit use and disclosure of sensitive personal information, if applicable.

Shine the Light: California residents may also request a list of third parties to whom personal information was disclosed for direct marketing purposes in the preceding calendar year.

Sales and Sharing: We do not sell personal information for monetary value. However, we may share information for cross-context behavioral advertising, which may be considered a “sale” or “sharing” under California law.

To exercise these rights or submit an authorized agent request, contact us at:

• Email: info@octsource.com
• Subject: “California Privacy Rights Request”

We will respond within the timeframes required by law.

10. User-Generated Content

Any content you submit to public portions of the Services (e.g., product reviews) is considered non-confidential and may be visible to others. We are not responsible for how third parties use such information.

11. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information. However, no system can be guaranteed completely secure, and we cannot ensure the security of your information during transmission.

12. Data Retention

We retain your personal information as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary depending on the nature of the information and our legal obligations.

13. Children’s Privacy

Our Services are not directed to children under 13 (or other age as required by local law), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us to request deletion.

14. Complaints

If you have concerns about our data practices, you may:

• Contact us (see below).
• If you are in the EEA, lodge a complaint with your local Data Protection Authority.
• If you are in the UK, contact the Information Commissioner’s Office (ICO).
• If you are in Switzerland, contact the Federal Data Protection and Information Commissioner.

15. Contact Us

For any questions, requests, or complaints regarding this Policy or our privacy practices, please contact:

Octsource
Email: info@octsource.com
Website: www.octsource.com