Privacy Policy

Last Updated: November 26, 2024

1. Introduction

Oneuestudioer ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, use our services, or interact with us.

By using our website or services, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our website or services.

2. Information We Collect

We collect information that you provide directly to us and information that is automatically collected when you use our services.

Personal Information You Provide:

When you contact us, request a quote, place an order, or use our services, we may collect:

  • Name, email address, phone number, and mailing address
  • Window measurements and specifications
  • Product preferences and customization requests
  • Payment information (processed securely through third-party payment processors)
  • Installation address and scheduling preferences
  • Any other information you choose to provide

Automatically Collected Information:

When you visit our website, we automatically collect certain information about your device and browsing behavior, including:

  • IP address and location data
  • Browser type and version
  • Operating system
  • Pages visited and time spent on pages
  • Referring website addresses
  • Device identifiers and characteristics

3. How We Use Your Information

We use the information we collect for various purposes, including:

Service Delivery: To process orders, schedule installations, provide customer support, and fulfill your requests for products and services.

Communication: To respond to your inquiries, send order confirmations, provide updates on order status, and communicate about our services.

Business Operations: To manage our business operations, improve our website and services, conduct analytics, and prevent fraud.

Marketing: With your consent, to send you promotional materials, newsletters, and information about products and services that may interest you.

Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests.

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers: We share information with third-party service providers who perform services on our behalf, such as payment processing, shipping, installation, and website hosting. These providers are contractually obligated to protect your information.

Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Legal Requirements: We may disclose information if required by law, court order, or governmental authority, or to protect our rights, property, or safety, or that of others.

With Your Consent: We may share information with your explicit consent or at your direction.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of sensitive data in transit and at rest
  • Secure payment processing through PCI-compliant providers
  • Regular security assessments and updates
  • Access controls and employee training
  • Secure data storage and backup procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

Order and transaction records are typically retained for at least 7 years to comply with accounting and tax requirements. Marketing consent information is retained until you withdraw consent or request deletion.

When information is no longer needed, we securely delete or anonymize it in accordance with our data retention policies.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information, including:

Access: Request access to the personal information we hold about you.

Correction: Request correction of inaccurate or incomplete information.

Deletion: Request deletion of your personal information, subject to legal and contractual obligations.

Objection: Object to processing of your information for certain purposes.

Portability: Request transfer of your information to another service provider.

Withdraw Consent: Withdraw consent for processing based on consent, where applicable.

To exercise these rights, please contact us at info@oneuestudioer.cv. We will respond to your request within 30 days, subject to applicable law.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about your preferences and browsing behavior. For detailed information about our use of cookies, please see our Cookie Policy.

You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of our website.

9. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children's Privacy

Our services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete such information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

When we transfer information internationally, we implement appropriate safeguards to ensure your information is protected in accordance with this Privacy Policy and applicable data protection laws.

12. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

  • The right to know what personal information we collect, use, and disclose
  • The right to request deletion of your personal information
  • The right to opt-out of the sale of personal information (we do not sell personal information)
  • The right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us using the information provided in the Contact section.

13. European Privacy Rights

If you are located in the European Economic Area (EEA) or United Kingdom, you have rights under the General Data Protection Regulation (GDPR), including the rights described in Section 7. We process your information based on legitimate business interests, contractual necessity, legal obligations, or your consent.

If you have concerns about our data practices, you have the right to lodge a complaint with your local data protection authority.

14. Marketing Communications

If you have opted in to receive marketing communications, you can unsubscribe at any time by:

  • Clicking the unsubscribe link in any marketing email
  • Contacting us directly at info@oneuestudioer.cv
  • Updating your preferences in your account settings (if applicable)

Even if you opt out of marketing communications, we may still send you transactional messages related to your orders or account.

15. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

  • Posting the updated policy on this page with a new "Last Updated" date
  • Sending an email notification to registered users (if applicable)
  • Displaying a prominent notice on our website

We encourage you to review this policy periodically to stay informed about how we protect your information.

16. Data Breach Notification

In the unlikely event of a data breach that compromises your personal information, we will notify you and relevant authorities as required by applicable law. Our notification will include:

  • Description of the nature of the breach
  • Categories of personal information affected
  • Likely consequences of the breach
  • Measures taken or proposed to address the breach
  • Steps you can take to protect yourself
  • Contact information for further inquiries

We will make reasonable efforts to notify affected individuals within 72 hours of becoming aware of a breach, unless notification would impede a criminal investigation.

17. Data Processing Legal Basis

We process your personal information based on the following legal grounds:

Contractual Necessity: Processing necessary to fulfill our contract with you, including order processing, delivery, and customer service.

Legitimate Interests: Processing for our legitimate business interests, such as improving our services, fraud prevention, and direct marketing (where permitted by law).

Legal Obligations: Processing required to comply with legal obligations, such as tax reporting and regulatory compliance.

Consent: Processing based on your explicit consent, which you may withdraw at any time.

You have the right to object to processing based on legitimate interests. We will consider your objection and cease processing unless we have compelling legitimate grounds that override your interests.

18. Automated Decision Making

We do not use automated decision-making processes, including profiling, that produce legal effects or significantly affect you. If this changes in the future, we will notify you and provide information about the logic involved and the significance of such processing.

You have the right not to be subject to decisions based solely on automated processing, including profiling, where such decisions have legal or similarly significant effects.

19. Third-Party Data Sharing

We may share your information with the following categories of third parties:

Service Providers: Companies that provide services on our behalf, including payment processors, shipping companies, installation contractors, IT service providers, and marketing platforms.

Business Partners: Trusted partners who assist in delivering our services, subject to strict confidentiality agreements.

Legal and Regulatory Authorities: When required by law, court order, or regulatory request.

Business Transfers: In connection with mergers, acquisitions, or sale of business assets.

All third parties are contractually obligated to protect your information and use it only for specified purposes. We do not sell your personal information to third parties for their marketing purposes.

20. International Data Transfers Details

When we transfer your information internationally, we implement appropriate safeguards including:

  • Standard Contractual Clauses approved by data protection authorities
  • Binding Corporate Rules for multinational transfers
  • Certification schemes such as Privacy Shield (where applicable)
  • Explicit consent for transfers to countries without adequate protection

You may request information about the specific safeguards we use for international transfers by contacting us.

21. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: info@oneuestudioer.cv

Data Protection Inquiries: For specific data protection requests, please include "Data Protection Request" in your subject line to expedite processing.

We will respond to your inquiry within 30 days, as required by applicable law. For complex requests, we may extend this period by an additional 60 days, and we will notify you of any extension.

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.