A data controller is an organisation that collects and uses personal data and decides how that personal data is used and managed.
Ouxuan Technic is the Controller of the personal data you (data subject) provide us.
When do we collect your personal data?
- When you visit our website, which uses cookies and similar technologies;
- When you register an online account with us;
- When you make an online purchase;
- When you subscribe to our newsletter service;
- When you contact us (e.g. by sending an email to our customer service);
- When you enter our promotions (such as competitions, prize draws);
What kind of personal data do we collect?
- Data relating to your navigation on our website and certain technical information related to your device and access.
- Data identifying you, necessary for us to complete your order, deliver it to you, or manage your account in our store;
- Your correspondence and communication with us;
- Your orders placed with us;
Our websites are not intended for children and we do not knowingly collect data relating to children.
The provision of all personal information is voluntary, but may be necessary in order to use our services for example to conclude a transaction.
Some of the above personal data is collected directly (for example when you register an account with us, change any of your details via Your Account, make a purchase or send an email to our customer service). Other personal data is collected indirectly, for example your browsing or shopping activity.
We offer you the option to sign up and sign in using a third party social networking or integrated service (Facebook, Google+, LinkedIn, PayPal account). If you choose to do so (and authorize such access request), we will collect certain personal data (such as your name and surname, email address) stored on these accounts for registration or identification purposes. Using this option speeds up registration (no additional passwords to remember). We do not publish on your behalf on any of those social accounts. You can disconnect the accounts at any time and revoke the transfer of the data with future effect by changing your settings of respective services.
How do we use your personal data?
We need to process your personal data for a number of different reasons. The following is a summary of how and according to which legal bases we use your personal data:
- To perform our contract with you or for any pre-contractual obligations:
- to provide goods and services to you;
- provide you customer support;
- for proper functioning of the website (for example to store how many items are in your shopping bag);
- to manage your registered online account;
- to process your returns, refunds, complaints etc.;
- send you service messages by e-mail (so that you are updated about your order/account);
- to administer any promotions that you choose to enter and get prizes to the winners.
- To fulfil our legitimate interests or the legitimate interests of a third party:
- handling customer queries not strictly related to our contract with you or pre-contractual obligations;
- analysis and statistical purposes;
- to send you an email invitation to review our service in a third party on-line review community (no promotional content);
- maintaining the integrity of our IT systems;
- business management and business optimisation;
- training our staff for better customer service
- To comply with legal obligations:
- to which our business is subject as well as to keep records of our compliance processes or tax records;
- where, we are legally obliged, to disclose your information to relevant authorities;
- Your consent
- to contact you via email (with your prior agreement, you are free to opt out at any time) about our new arrivals, promotional offers, discounts and so on;
- to provide you personalized offers on third party websites, based on your browsing history (when you accept advertising/tracking cookies);
- to evaluate and improve effectiveness of our marketing campaigns (when you accept performance related cookies);
- to monitor the performance of our website and to constantly look to improve our site and user experience (when you accept performance related cookies).
When we are relying on consent as our legal basis to process your personal data, you have the right to withdraw consent at any time.
How long will the data be stored for?
We will keep your personal information for the purposes set out in this privacy policy and in accordance with the law and relevant regulations. In most cases we are required by law to process your data even if you no longer use our services as such obligations arise for example from tax or accounting regulations. For that reason, even if you close your account with us, we will process some of your personal data for the period indicated in the aforementioned regulations.
Who do we share your personal data with?
We sometimes share your personal data with trusted third parties in order to make certain services available to you. These third parties process your personal information on our behalf and are required to meet high standards of security before doing so.
These companies may belong the following categories:
- Technology providers – partners that provide IT, website/webstore services, deploy our email campaigns for us; send invitations to review our service;
- Payment providers (such as Paypal);
- Customer service providers – partners who work with us to provide you with help;
- Distributors and manufacturers of goods – partners who fulfil orders and deliver products to you, who may also manage your returns on our behalf;
- Delivery companies – couriers, postal companies and other firms that help us deliver your goods to you;
- Returns centers – companies that accept returns from our international customers in countries other than your own so your return is quicker, easier and cheaper for you;
- Marketing service providers – marketing agencies, advertising partners (including social networks) that help us deliver our marketing and advertising to you; partners that assist in management of our promotions. Our advertising may include interest based advertising (also known as online behavioral advertising), contextual advertising. We and our advertising partners may process certain personal data to help us understand your interests or preferences so that we can deliver advertisements that are more relevant to you;
- Consultants, auditors and other similar partners that help us in various ways get better;
- Regulators and other governmental agencies or law enforcement agencies, in response to a verified requests or legal processes. We also share your personal data where we in good faith believe that it is necessary for the purpose of our own, or a third party's legitimate interest relating to national security, law enforcement, litigation, criminal investigation, protecting the safety of any person, or to prevent death or imminent bodily harm, provided that we deem that such interest is not overridden by your interests or fundamental rights and freedoms requiring the protection of your personal data.
- In case of merger, acquisition or sale of part of our business – your personal data may be shared with such third parties as part of this process. We will require that the new owner follows this privacy policy with respect to your personal information. You will be notified of change of ownership.
- Companies approved by you, such as social media sites (if you choose to link your accounts to us).
Transferring personal data outside of the EEA (European Economic Area)
From time to time we may transfer your personal information to a third party data processors located outside of the European Economic Area (‘EEA’) for the purposes described in this privacy policy. We can only transfer your personal information to those third parties where we can be sure that your privacy and your rights are protected, for example when that third party is located in a country which the EU has approved as having adequate data protection laws or when we have a contract in place in a form approved by regulators (the European Commission's standard data protection clauses). Recipients located in countries outside the European Economic Area have implemented and maintain adequate safeguards for the personal data processed.
What are your rights relating to your personal data?
If you reside in certain territories, including the EU, you have a number of rights in relation to your personal information. While some of these rights apply generally, certain rights apply only in certain limited cases. Your rights include:
- Right to be informed about collection and use of your personal data.
- Right to access personal data we hold about you. This is known as a Subject Access Request.
- Right to correct your personal data when incorrect or incomplete (if you have an account with us you can also correct your data yourself in Your Account).
- Right to withdraw your consent at any time.
- Right, under certain circumstances, to object to processing of your personal data (for example when we are processing your data for the purpose of our legitimate interest).
- Right, under certain circumstances, to restrict processing of your personal data (in this case we will not process your data for any other purpose than storage).
- Right under certain circumstances, to have your personal data erased, where we no longer have any legal reason to retain them.
- Right to request that we provide to you your personal data in a commonly used format, and if technically possible, that we transfer them to another data controller. This is applicable provided that your data is processed by automated means and that processing is based on your consent, on a contract which you are a part of or on pre-contractual obligations.
How to exercise your rights
Any requests to exercise your rights can be made in writing. We recommend writing to us at oustrong@yeah.com. We will respond as soon as possible within one calendar month at the latest. That period may be extended by two further months where necessary, taking into account the complexity and number of the requests.
To protect your information, we will seek to verify your identity before proceeding with any request you make under this Privacy Policy.
Complaint with a data protection supervisory authority
You also have the right to make a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.
More about your right to object
You may object to processing of your personal data when:
- they are processed for the purpose of direct marketing, you can object at any time without providing any justification;
- they are processed under the following purposes: legitimate interest or statistical purpose; you must provide a specific reason and tell us why you are objecting to processing of your data (your grounds should be related to your particular situation).
How to stop marketing messages from us:
At any time you can stop receiving marketing messages from us by:
- clicking the 'unsubscribe' link at the end of any marketing email from us;
- using the unsubscribe option available on our main website next to the SUBSCRIBE TO OUR NEWSLETTER section;
- contacting our customer service.
Please note it might take a short period for all our systems to be updated, so you might get messages from us while we process your request.
Security of your data and what you can do to help
We acknowledge the importance of responsible use of your personal data, please be assured that we do not sell collected data to any third parties.
We use Internet standard encryption technology ("SSL" or "Secure Socket Layer" technology) to encode personal data that you send to us. When signing in, logging in or placing your order in your browser you will see an image of a closed padlock or an unbroken key, which means that encryption is used.
We also recommend that you enhance your online safety by following these guidelines:
- Keep your account passwords private. Do not share it.
- Your password must be at least 10 characters long, contain at least 1 capital letter, and 1 digit or 1 special character. Do not use dictionary words, your name, email address, or your other personal data that can be easily accessed. We also recommend that you frequently change your password. You can do this in Your Account-> Customer Details-> Change your password (don't forget to save the changes).
- Avoid using the same password for multiple online accounts.
- If you use our website in a public location, we recommend that you always log out of your account and close the website browser for your security reasons.
Do not track (DNT) feature
Some browsers offer Do not track future (DNT). Once enabled your browsing isn't tracked, for example by third party advertisers, social networks, or analytic companies. Our website doesn't currently respond to DNT requests as there in no agreed-upon standard that determines how such request should be managed. We'll monitor if any such standard is adopted, but for now we won't be able to respond to DNT requests.
Changes to this Privacy Policy
We reserve the right to update and change this Privacy Policy from time to time, to reflect any changes in legal requirements or the way we process your personal data. Please check back frequently to see any. If we make significant changes, we will try to make it clear to you also by other means (for example email). The revised Privacy Policy will be effective as of the published effective date.
Questions? Contact us
If you have any questions, concerns or comments about our Privacy & Cookie policy or our use of your personal information please contact us: