PRIVACY

1. OXYGNIS
2. PRIVACY POLICY

This Privacy Policy ("Policy") describes how you collect, protect and use the oxygnis.com website ("Site") and any of their related products and Services (collectively, the "Services"). It also describes the choices available regarding our use of your personal information and how you can access and update this information. This Policy is a legally binding agreement between you (“User”, “you” or “your”) and OXYGNIS CO., LIMITED (“OXYGNIS CO., LIMITED”, “we” or “our”). By accessing and using the Services, you acknowledge that you have read, understood and agree to be bound by the terms of this Policy. This policy does not apply to the practices of companies we do not own or control, or to individuals we do not employ or manage.

The Most Important Commitment to User Privacy

We will only collect your personal information when users voluntarily provide it. For example, when you fill out a contact form on a website or subscribe to our newsletter, we may ask you for your name, email address, phone number or other contact details.

Our main purpose is not to collect your information, but to use them to serve you better.

We will not sell your personal information to third parties or use it for any other purpose unless required by law or with your express consent.

Automatic Collection of Information

When you open a website or use a mobile application, our servers automatically record information sent by your browser or device. This data may include your device's IP address and location, browser and device name and version, operating system type and version, language preference, web pages you visited before using the Services, pages of the Services you visit, time spent on these pages, information you search for on the Services, access times and dates, and other statistics.

Information collected automatically is used only to identify potential cases of abuse and to establish statistics about service usage and traffic. This statistical information is not otherwise aggregated to identify any particular user of the system.

Collection of Personal Information

You may access and use the Services without telling us who you are or revealing any information that would allow others to identify you as a specific, identifiable individual. However, if you wish to use certain features of the Services, you may be asked to provide certain personal information (for example, your name and email address). When you create an account on the Services, make a purchase, or fill out any online form, we receive and store any information that you knowingly provide to us. Where necessary, this information may include the following:

• Personal details such as name, country of residence, etc.
• Contact information such as email address, address, etc.
• Account details such as username, unique user ID, password, etc.
• Geolocation data, such as latitude and longitude.

Some of the information we collect is collected directly from you through the Services. However, we may also collect personal information about you from other sources, such as public databases, social media platforms, third-party data providers and our joint marketing partners. Personal information we collect from other sources may include demographic information such as age and gender, device information (such as IP address), location (such as city and state), and online behavioral data (such as information about your use of social media sites), Page view information and search results and links. You may choose not to provide us with your personal information, but you may not be able to take advantage of certain features of the Services. Users who are not sure which information is mandatory are welcome to contact us.

Use and Processing of Collected Information

In order to provide services to you or comply with legal obligations, we may need to collect and use certain personal information. If you do not provide the information we request, we may not be able to provide you with the product or service you have requested. Any information we collect from you may be used for the following purposes:

• Create and manage user accounts
• Fulfill and manage orders
• deliver a product or service
• Improve products and services
• Send management information
• Send marketing and promotional communications
• respond to inquiries and provide support
• request user feedback
• Improve user experience
• post a customer testimonial
• Enforce terms and conditions and policies
• Protection against abuse and malicious users
• Respond to legal requests and prevent harm
• Run and Operate Services

The processing of your personal information depends on how you interact with the Services, your location in the world and whether one of the following applies: (i) the provision of the information is necessary for the performance of the agreement with you and/or any pre-contractual obligations; (ii) the processing is necessary to comply with a legal obligation to which you are subject; (iii) processing in connection with tasks performed in the public interest or in the exercise of official powers vested in us; (iv) the processing is necessary for legitimate interests pursued by us or by a third party.

Please note that under certain laws we may be permitted to process information until you object to such processing (by opting out), without relying on consent or any other legal basis below. In any case, we are happy to clarify the specific legal basis applicable to the processing, in particular whether the provision of personal data is a statutory or contractual requirement, or is necessary to enter into a contract.

Billing and Payment

If payment is required for the Services, we will ask for credit card or other payment account information, which will be used only to process payment. Your purchase transaction data is only stored for the time required to complete the purchase transaction. Once complete, your purchase transaction information will be deleted. All direct payment gateways adhere to the latest security standards managed by the PCI Security Standards Council, a joint effort of brands like Visa, MasterCard, American Express, and Discover. Sensitive and private data exchange takes place over SSL secure communication channels, encrypted and protected using digital signatures, and the service is also PCI vulnerability compliant in order to create the safest possible environment for users. Perform regular malware scans for extra security and protection.

Management Information

You can delete certain personal information we have about you. The personal information you can delete may change from service to service. However, when you delete personal information, we may retain an unmodified copy of the personal information in our records. The retention period is for the period necessary to fulfill our obligations to our affiliates and partners and for the purposes described below. If you want to delete your personal information or permanently delete your account, you can do so on the service account's settings page.

Information Disclosure

Depending on the requested Services or as necessary to complete any transaction or provide any service you have requested, we may share your information with your consent with our trusted third parties that work with us, any other affiliates and subsidiaries we rely upon to assist in the operation of the Services available to you. We do not share personal information with unaffiliated third parties. These service providers are not authorized to use or disclose your information except as necessary to provide services on our behalf or to comply with legal requirements. For these purposes, we may only share your personal information with third parties whose privacy policies are consistent with ours or have agreed to abide by our personal information policy. Provide these third parties with the personal information they need only to perform their specified functions, and we do not authorize them to use or disclose personal information for their own marketing or other purposes.

We will disclose any Personal Information we collect, use or receive if required or permitted by law, such as to comply with a subpoena, or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

Information Retention

We will retain and use your personal information for as long as necessary to comply with our legal obligations, resolve disputes and enforce our agreements, unless a longer retention period is required or permitted by law. After you update or delete your personal information, we may use any aggregated data derived from or containing your personal information, but not in a manner that personally identifies you. Once the retention period expires, personal information will be deleted. Therefore, the rights of access, deletion, rectification and data portability cannot be exercised after the expiration of the retention period.

User's Rights

You can exercise certain rights with respect to your information that we process. In particular, you have the right to: (i) withdraw your consent if you have previously given your consent to the processing of your information; (ii) you have the right to object to the processing of your information if the processing is carried out on a legal basis other than consent; (iii) you have the right to find out whether we are processing the information, to obtain information about certain aspects of the processing and to obtain a copy of the information being processed; (iv) you have the right to verify the accuracy of your information and to request that it be updated or corrected; (v) you have the right to restrict the processing of your information in certain circumstances, in which case we will not process your information for any purpose other than storing it; (vi) you have the right to ask us to delete your personal information in certain circumstances; (vii) You have the right to receive your information in a structured, commonly used and machine-readable format and, where technically feasible, to have it transmitted to another controller without hindrance. This clause applies if your information is processed by automated means and the processing is based on your consent, a contract in which you are a party or pre-contractual obligations.

Children's Privacy

We do not knowingly collect any personal information from children under the age of 18. If you are under the age of 18, please do not submit any personal information through the Services. We encourage parents and legal guardians to monitor their children's Internet usage and help enforce this policy by instructing their children never to provide personal information through the Services without their permission. If you have reason to believe that a child under the age of 18 has provided us with personal information through the Services, please contact us. You must also be of age to consent to the processing of your personal information in your country (in some countries we may allow your parent or guardian to do so on your behalf).

Do not Track Signal

Some browsers include a "Do Not Track" feature, which signals to the websites you visit that you do not want your online activities tracked. Tracking is distinct from using or collecting information about the Site. For these purposes, tracking refers to the collection of personally identifiable information from consumers who use or visit a website or online service as they move between websites over time. The Service does not track its visitors over time and across third-party websites. However, some third-party websites may keep you active while serving content to you, which enables them to customize the content presented to you.

Email Marketing

We offer an electronic newsletter, which you can voluntarily subscribe to at any time. We are committed to keeping your email address confidential and will not disclose your email address to any third party except as permitted by the Information Use and Processing section or in order to utilize a third party provider for sending such emails. We will maintain information sent by email in accordance with applicable laws and regulations.

In compliance with the CAN-SPAM Act, all emails we send will clearly state who the email is from and provide clear information on how to contact the sender. You may choose to stop receiving our newsletters or marketing emails by following the unsubscribe instructions contained in those emails or by contacting us. However, you will continue to receive important transactional emails.

Links to Other Resources

The Services contain links to other resources that we do not own or control. Please note that we are not responsible for the privacy practices of such other resources or third parties. We encourage you to be vigilant when leaving the Services and to read the privacy statement of each resource that may collect personal information.

Information Security

We protect the information you provide on computer servers in a controlled, secure environment from unauthorized access, use or disclosure. We maintain reasonable administrative, technical and physical safeguards to prevent unauthorized access, use, modification and disclosure of personal information in our control and custody. However, data transmission over the Internet or wireless networks cannot be guaranteed. Therefore, while we strive to protect your personal information, you acknowledge that: (i) the Internet has security and privacy restrictions beyond our control; (ii) cannot guarantee the security, integrity and privacy of any and all information and data exchanged between you and the Services; (iii) Any such information and data may be viewed or altered in transit by third parties despite best efforts.

Data Breach

If we find that the security of the service has been compromised or users' personal information has been leaked to unrelated third parties due to external activities (including but not limited to security attacks or fraud), we reserve the following rights: Take reasonable and appropriate steps, including but not limited to investigation and reporting, and notifying and cooperating with law enforcement authorities. In the event of a data breach, we will use reasonable efforts to notify affected individuals if we believe there is a reasonable risk of harm to users as a result of the breach, or if otherwise required by law. When we do so, we will send you an email.

Changes and Corrections

We reserve the right, in our sole discretion, to modify this Policy or its terms relating to the Services from time to time and will notify you of any material changes in the way we process personal information. When we do so, we will revise the updated date at the bottom of this page. We may also, at our sole discretion, notify you in other ways, such as through the contact information you provide. Any updated version of this policy will be effective immediately upon posting of the revised policy, unless otherwise stated. Your continued use of the Services after the effective date of the revised Policy (or such other conduct as then specified) constitutes your agreement to those changes. However, we will not use your personal information in a manner materially different from that described when we collected your personal information without your consent.

How We Protect Your Personal Information

In order to prevent unauthorized access, maintain data accuracy and promote the proper use of personal information obtained through our website, we have put in place appropriate physical, technical and operational measures to safeguard and secure the personal information we collect online from unauthorized Authorized access, unauthorized access use, accidental loss, damage or destruction.

We also use operational measures to protect your personal information, such as by limiting the number of people who can access your membership information. Access to personal information is limited to OXYGNIS employees and third-party service providers who need access to the information for a specific purpose, such as to help us provide services to you.

We use technical measures such as password protection to protect your data and the systems on which it is stored. However, messages you send to us via the Internet or other electronic means may not be secure. We advise you not to send us any confidential information by e-mail. If you choose to send us confidential information, you accept the risk that third parties may intercept that information.

We will use reasonable efforts to keep your information safe while shopping. We use Secure Sockets Layer (SSL) technology to protect your online orders and personal information. All data transmitted between your computer and our servers is SSL encrypted and then stored on computers not connected to the web. To make sure you are accessing a secure server, look in the lower left or right corner of your browser window after accessing the server. An unbroken key or closed lock (depending on your browser) indicates that SSL is active in your window. Certain versions of browsers and firewalls do not allow communication through secure servers. In this case, you will not be able to connect to the server, so you don't have to worry about placing an order by mistake through an insecure connection.

Accept this Policy

You acknowledge that you have read this policy and agree to all its terms and conditions. By accessing and using the Services, you agree to be bound by this Policy. If you do not agree to be bound by the terms of this Policy, you are not authorized to access or use the Services.

Contact Us

If you would like to contact us to learn more about this policy, or wish to contact us regarding any matter relating to individual rights and your personal information, you may email sales@oxygnis.com.

This document was last updated on March 3, 2023