Oyster Elements LLC ("Company," "we," "us," or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit oysterelements.com or make a purchase. Please read it carefully. If you disagree with its terms, please discontinue use of our site.
1. Information We Collect
Information You Provide Directly
- Name, email address, shipping address, and billing information when placing an order or creating an account
- Account credentials (username and password)
- Communications you send via email, contact forms, or wholesale inquiry forms
- Health-related information you voluntarily provide in testimonials or support requests
- Professional credentials submitted as part of wholesale account applications (license numbers, NPI)
- Preferences, feedback, and survey responses
Information Collected Automatically
- IP address, browser type, device type, and operating system
- Pages visited, time spent on site, referring URL, and click-stream data
- Cookies, pixel tags, web beacons, and similar tracking technologies (see our Cookie Policy)
- Purchase history and browsing behavior on our site
- Geolocation data (city/state level, not precise location)
Information From Third Parties
- Payment processors (Stripe, PayPal) — we do not store full payment card numbers on our servers
- Shipping carriers for order fulfillment and tracking
- Analytics providers (Google Analytics)
- Advertising partners (Meta Pixel, Google Ads)
- Email marketing platforms (Klaviyo)
2. How We Use Your Information
- To process, fulfill, and communicate the status of your orders
- To create and manage your account
- To send transactional emails (order confirmations, shipping notifications, refund confirmations)
- To send marketing communications where you have opted in — you may opt out at any time
- To verify wholesale account credentials and professional licensure
- To detect, investigate, and prevent fraudulent transactions and other illegal activities
- To analyze site usage, improve user experience, and develop new features
- To respond to customer service requests and support tickets
- To comply with applicable legal obligations
- To enforce our Terms of Service and other agreements
3. Legal Bases for Processing
Where applicable law requires a legal basis for processing personal data, we rely on the following:
- Contract performance: Processing necessary to fulfill your order or provide services you requested
- Legitimate interests: Fraud prevention, security, analytics, and improving our services, where not overridden by your rights
- Legal compliance: Processing required by applicable law (tax records, consumer protection obligations)
- Consent: Marketing communications and non-essential cookies, where you have given explicit consent
4. Sharing Your Information
We do not sell your personal information to third parties for their own marketing purposes. We may share your information with:
- Service providers: Payment processors, shipping carriers, email platforms, and analytics services operating under confidentiality agreements and our instructions
- Legal authorities: When required by law, subpoena, court order, or government regulation, or to protect the rights, property, or safety of our company, customers, or the public
- Business transfers: In connection with a merger, acquisition, financing, or sale of all or a portion of our assets — you will be notified of any change in ownership and your choices
- Advertising partners: Aggregated, de-identified data or hashed email addresses for targeted advertising (you may opt out — see Section 5)
- With your consent: For any other purpose with your explicit prior permission
5. California Consumer Privacy Act (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA), grants you the following rights:
- Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months, including the categories of sources, business purposes, and third parties with whom we shared it
- Right to Delete: Request deletion of your personal information, subject to certain exceptions (e.g., legal compliance, completing a transaction)
- Right to Correct: Request correction of inaccurate personal information we hold about you
- Right to Opt-Out of Sale/Sharing: Opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising. We do not sell personal information in exchange for money, but we do share data with advertising partners which may constitute "sharing" under the CPRA. To opt out, click "Decline Non-Essential" on our cookie banner or email us at privacy@oysterelements.com
- Right to Limit Use of Sensitive Personal Information: Request that we limit use of sensitive personal information to what is necessary to perform the services you requested
- Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights — we will not deny goods, charge different prices, or provide a different level of quality
To submit a verifiable consumer request, contact us at privacy@oysterelements.com, call +1 (310) 000-0000, or use our contact form. We will respond within 45 days. You may make up to two requests per 12-month period. You may designate an authorized agent to submit requests on your behalf.
We will verify your identity before fulfilling a request by matching information you provide against records we maintain.
6. Other State Privacy Rights
Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and other states with comprehensive privacy laws have similar rights to access, correct, delete, and opt out of certain processing of their personal data. To exercise these rights, please contact us using the information in Section 12. We will respond within the timeframe required by applicable state law.
7. Data Retention
We retain personal information for as long as necessary to fulfill the purposes outlined in this policy, comply with our legal obligations (including tax and accounting requirements for 7 years), resolve disputes, and enforce our agreements. When we no longer need your personal information, we securely delete or anonymize it.
8. Security
We implement industry-standard administrative, technical, and physical safeguards to protect your personal information, including SSL/TLS encryption for data in transit, PCI-DSS compliant payment processing, access controls and role-based permissions, and regular security assessments. However, no method of Internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to use strong passwords and not share them.
9. Children's Privacy
Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we learn that we have inadvertently collected such information, we will delete it promptly. If you believe we may have information from or about a child under 18, please contact us at privacy@oysterelements.com.
10. Third-Party Links
Our website may contain links to third-party websites, social media platforms, or services. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party site you visit. The inclusion of a link does not imply endorsement by Oyster Elements LLC.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. We will notify you of material changes by posting the updated policy on our website with a revised effective date, and where required by law, by email notification. Your continued use of our services after the effective date constitutes acceptance of the updated policy.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Oyster Elements LLC
Attn: Privacy Officer
Los Angeles, CA 90001
Email: privacy@oysterelements.com
Phone: +1 (310) 000-0000
Hours: Monday–Friday, 9am–5pm PST