As used in this Privacy Notice, "Personal Information" means information that specifically identifies an individual (e.g. a name, address, telephone number, e-mail address, username, or credit card number), or information about that individual that is directly linked to personally identifiable information. Personal Information does not include (a) aggregate information, meaning data we collect about your use of the Website or about a group or category of services or users, from which individual identities or other Personal Information has been removed or (b) de-identified information that cannot be easily linked back to the individual.
This Privacy Notice describes our practices for collecting, using, maintaining, protecting, and disclosing your Personal Information, as well as your interactions with OchriO via telephone, through mail or in person at our physical locations.
Please read this notice carefully to understand our policies and practices regarding your information and how we will treat it.
By accessing the Website, creating a user profile on the Website, visiting our studio, or submitting Personal Information to OchriO, you consent to this Privacy Notice and the collection and use of your Personal Information as described below. We will take steps to notify you and confirm that you agree at different stages of collecting Personal Information from you. If you do not agree with our policies and practices, you may not be able to access or benefit from certain portions of this Website.
Please be advised that this Privacy Notice applies to information that we collect:
when you visit this Website.
when you visit our studio.
when you submit your information to us.
when you create or use a user profile.
when we communicate with you through email and other means.
through third parties that we work with to provide our services.
by any other means over the course of your use of our services.
This Notice does not apply to information collected about you in any other way, including through mobile applications, content, or websites not operated by OchriO.
We will only collect your Personal Information (a) when applicable, with your consent or (b) if we have a legitimate interest in doing so. If we collect or use your Personal Information based on your consent, we will also notify you of any changes and request your further consent as needed.
OchriO recognizes the need to provide further privacy protections with respect to the Personal Information of children. We do not knowingly collect any Personal Information from children under 16 without obtaining consent from the child's parent or guardian. If a child under age 16 wishes to register on the Website, OchriO requires the child's parent or guardian to provide consent for the registration via our email confirmation process before we activate the child's registration. If OchriO does not receive parent or guardian consent within 24 hours of the child's registration request, we will delete any Personal Information the child may have provided to us as part of their registration request. If you are under 16 and your parent or guardian has not completed our Website registration and consent process, OchriO instructs you to not use this Website, make purchases or donations through the Website, use the Website's interactive or public comment features, or provide OchriO with any Personal Information.
OchriO is a nonprofit corporation and therefore is exempt from the Children's Online Privacy Protection Act. Nevertheless, OchriO values the privacy of children who may find our content informational. All the provisions of this Privacy Notice apply to all users of the site, including children. Younger visitors should always check with their parents or guardians before sharing information on any website or mobile application, and we encourage families to discuss their household guidelines regarding the online sharing of Personal Information.
If you believe that OchriO may have information from or about a child under 16 without a parent or guardian consent, or if you wish to review or request deletion of the Personal Information OchriO has about your child, please contact us at email@example.com or call us at (+27) 63 106 7210.
How We Collect and Use Your Personal Information
When you visit our Website or studio, we collect certain Personal Information from you. We collect this information:
Directly from you when you provide it to us.
Automatically as you navigate the Website.
From third parties, including third-party websites.
Please note that some offers, services and portions of our Website may only be accessible to you if you register with us. You are welcome to limit the information you provide to us to the minimum necessary to receive our services, and you can contact OchriO at any time to edit the information we have about you. Please note, however, that if you refuse to give us your Personal Information, or later withdraw your consent, we most likely will not be able to communicate with you or provide you with our services.
Information You Provide to Us
We collect Personal Information directly from you with your consent when you visit our studio in person or interact with us on the Website. The Personal Information you provide to us may include:
Contact Information- We collect your name, telephone number, e-mail address and address when you fill out and submit electronic forms on our Website. We use this information to register you to use our Website, send you newsletters, and provide you with the information, products and services. We may also ask you for information when you report a problem with our Website.
Payment Information- We accept payments and donations through our Website. We use a third-party payment processor, Stripe, to handle payment transactions. When you make a payment online, the Website will redirect you to OchriO's Stripe payment portal. Stripe provides PCI compliant online payment processing services. OchriO does not collect, process or store payment information, but we may keep a record of transactions you carry out through our Website and of the fulfilment of your orders. If we have trouble processing an order, we will use your contact information to contact you.
In-Person Information- When you visit OchriO's studio, we will also ask you to complete a visitor intake form and we may capture your image using onsite cameras when you enter or exit the building or the studio space. We collect this information to ensure the security of our staff and visitors. Also, depending on the purpose of your visit, we may ask you to complete additional forms. We will notify you of our purpose for these forms at the time of collection.
Information We Collect Through Automatic Data Collection Technologies.
As you navigate and interact with our Website, we may use automatic data collection technologies like website analytics to collect certain information about your equipment, browsing actions, and patterns. We collect this information to achieve our legitimate interests of maintaining and improving the Website and measuring our outreach and marketing efforts. The information we collect through automatic data collection technologies includes:
Log Files- We collect anonymous and technical information from your computer, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Website. We also collect information about your computer, device, and internet connection, including your IP address, operating system, device type, and browser type. We anonymize this information so it does not identify you and use it to monitor user behaviour. We also use this information to estimate our audience size and usage patterns, store information about your preferences, customize your user experience, speed up search response times and recognize you when you return to our Website. These analytics help us to improve our Website and to deliver a better and more personalized service
Emails- Our emails contain an embedded tracking code to keep track of when the recipient receives and opens the email and when the recipient visits our Website via a link in the email.
The information we collect automatically may include Personal Information, or we may maintain the information or associate it with Personal Information we collect in other ways or receive from third parties. This information may also be merged into aggregate information about site visitors and traffic. If you do not wish to have OchriO collect and use your anonymous and technical information as described in this paragraph, immediately stop using the Website, or contact us as described under "Controlling Your Personal Information" below.
Information We Collect from Other Websites
OchriO tracks the number of users who come to our Website from social networking sites (e.g., Facebook, YouTube or Twitter) to achieve our legitimate interest in measuring the effectiveness of our social media ads and posts. If you access our Website from a social networking site, or if you otherwise agree to associate your account with us with a social networking site, we may also receive Personal Information about you from such social networking site. Please note that social media sites from which we may receive your Personal Information are not controlled or supervised by BP. Any questions regarding how the social media site collects or processes your Personal Information should be directed to the social media site provider. We may retain this information with the information we collect from you directly.
Other Ways We May Use Your Information
We may also use Personal Information that we collect from you or about you:
To develop and improve our products and services.
To present our Website and its contents to you.
To provide you with information, products, or services that you request from us.
To fulfil any other purpose for which you provide it.
To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
To notify you about changes to our Website or any products or services we offer or provide through it.
To allow you to participate in interactive features on our Website.
To protect your privacy and enforce this Privacy Notice.
To protect our rights and property.
If we believe it is necessary to identify, contact or bring legal action against persons or entities who may be causing injury to you, to OchriO, or others, or to comply with a law, regulation, legal process or court order.
In any other way, we may describe when you provide the information.
For any other purpose with your consent.
OchriO may use a cookie or third party web beacon to collect and analyze your Personal Information or your activities on the Website (e.g., click stream information, browser type, time and date, subject clicked or scrolled over) to help identify advertisements or offers that may be of interest to you. If you prefer OchriO does not use information based on your online behaviour to provide you with tailored content and advertising, you may opt-out of online behavioural advertising by following the instructions in Opting Out of Communications.
We may combine information we collect about you through the Services with other information that we receive from third-party sources. By way of example and not limitation, we may use a change of address or another list service to ensure that our records for your account are accurate.
Disclosure of Your Information
OchriO will not sell your Personal Information to any third parties. We may disclose Personal Information that we collect or you provide as described in this Privacy Notice:
To our subsidiaries and affiliates
To contractors, payment processors, service providers, and other third parties we use to support our business.
To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of OchriO's assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by OchriO about our Website users is among the assets transferred.
To our advertising and analytics partners, such as Google Analytics. The privacy notice of these third-party companies applies to their collection, use and disclosure of your information. These third parties may combine your information with the information of other consumers for purposes of conducting these studies and/or analytics. For more information, please visit Google Analytics Opt-out Browser Add-on.
To fulfil the purpose for which you provide it. For example, if you give us an email address to use the "email a friend" feature of our Website, we will transmit the contents of that email and your email address to the recipients.
For any other purpose disclosed by us when you provide the information.
With your consent.
We may also disclose your Personal Information:
To comply with any court order, law, or legal process, including responding to any government or regulatory request.
If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of OchriO, our customers, or others.
We may share aggregate or de-identified information without restriction. The information we share will not identify you personally. However, this is possible that third parties may be able to combine this aggregate information with other data they have about you, or that they receive from other third parties, in a manner that allows them to identify you personally.
Controlling Your Personal Information
If you are a resident of the European Union, you have certain additional rights in relation to your Personal Information. You can exercise these rights, express concerns, or obtain additional information about the use of your Personal Information by contacting us at (+27) 63 106 7210 or by email at firstname.lastname@example.org
Your Rights - What It Means For You - What You Can Do
Be informed about how your Personal Information will be processed. We will inform you via this Privacy Notice about how we will use your Personal Information, for what purposes and who else might have access to it. Please read this Privacy Notice carefully and contact us if you have any questions.
Access your Personal Information. Upon request, we will provide you with access to the Personal Information we have about you, meaning the categories of information we have about you, how we collect it, how we use it, and who has access to it. You can request that we provide you with a copy of the Personal Information that we process about you. In some cases, we may be legally permitted or required to refuse part or all of a request for access.
Prevent the processing of your Personal Information in certain circumstances. We will, in certain circumstances and to the extent required by law, restrict our processing of your Personal Information. You can request that we restrict processing of your Personal Information if (i) the Personal Information is inaccurate, (ii) the processing is unlawful, (iii) we no longer need the Personal Information, or (iv) you exercise your right to object (see below).
Rectify the Personal Information we have about you. We are required to take steps to ensure the accuracy of the Personal Information that we process. If you discover that the Personal Information that we hold about you is incorrect or if your Personal Information changes (e.g. a name or address change), please let us know and we will update our records.
Data portability. In some circumstances, we will be required to transfer your Personal Information to another organization at your request. You have the right to request that we transfer the Personal Information we have about you to another organization in a structured, commonly used machine-readable format.
Erasure of your Personal Information (aka "right to be forgotten"). In certain circumstances and where we are required to do so by law, we must delete the Personal Information we hold about you at your request. This right is not absolute. It is likely that there will be scenarios where we are not obligated to comply with your request. You have the right to request that we delete your Personal Information. If you make this request, we will need to balance certain legal, contractual and business interests against your right to request the deletion of the relevant Personal Information.
Object to certain processing of your Personal Information. If you object to our processing of your Personal Information, we will consider certain legal, contractual and business interests and obligations and balance these against your right to object to the processing. You may object to the processing of your Personal Information in certain circumstances. You can also object to our use of your Personal Information for direct marketing purposes.
Not to be subject to decisions made solely via automated processing (i.e. a decision made about you by a computer or algorithm without human intervention). In certain circumstances, we must give you the right to object to decisions we make by automated processing. We are also required to keep records of our automated data processing practices and provide information about the way that these decisions are made. You may object to a decision made by automated processing if it was made wholly by a computer or algorithm without human input.
We will fulfil your request to exercise any of these rights within 30 days of receiving a complete request. You also have the right to correct any errors contained in that information. Please note that OchriO is required by law to verify your identity before fulfilling your request, which may include collecting additional Personal Information from you.
By mail at OchriO House, 6616 Brilwewer Cresent, 13 Wentwood, Centurion, Pretoria, Gauteng, South Africa, 0157
Opting Out of Communications
We want to communicate with you only if you want to hear from us. You can modify or limit the communications OchriO sends to you by clicking the "unsubscribe" link at the bottom of any of our emails. You may also contact us directly at (+27) 63 106 7210 or by email at email@example.com. Please be sure to include your full name, email address, mailing address, and specifically what information you do not want to receive. If you like, you may use one of the following statements in your message to us:
I prefer not to receive email advertisements, such as updates regarding products and services, special promotions, or upcoming events.
I prefer not to receive direct mail advertisements, such as periodic catalogues and mailings regarding products and services, special promotions, or upcoming events.
Do Not Track Signals
Do Not Track is a privacy preference that users can set in their web browsers. When a user turns on the Do Not Track signal, the browser sends a message to websites requesting them not to track the user. For information about Do Not Track, visit www.allaboutdnt.org. At this time, ochrio.org does not respond to Do Not Track browser settings or signals. In addition, we may use other technology that is standard to the internet to track visitors to our websites. Those tools may be used by us and by third parties to collect information about you and your internet activity, even if you have turned on the Do Not Track signal.
R.S.A Privacy Laws
This Website is owned and operated in the Republic of South Africa. If you access this Website from outside of the Republic of South Africa, any information that we collect about you will be transferred to servers inside the Republic of South Africa. The privacy laws in the Republic of South Africa may not be as protective as those in your jurisdiction. By allowing us to collect Personal Information about you, you consent to such transfer and processing of your Personal Information as described in this Privacy Notice.
We have implemented commercially reasonable measures both online and offline to secure your Personal Information from accidental loss and from unauthorized access, use, alteration, and disclosure. We maintain physical, electronic and procedural security measures to safeguard your non-public Personal Information. These safeguards include limiting our in-house storage of your Personal Information to Contact Information and securing that data with industry-standard encryption. Payment and financial information are hosted on a Payment Card Industry Data Security Standard compliant hosting provider. We transmit all other Personal Information to a service provider that meets international security standards via secure token for that service provider to store and maintain. We update and test our technology to improve the protection of our information about you and to assure the integrity of that information.
The safety and security of your information also depend on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. Also, remember to log off your account and close your browser window when you have finished your visit. This is to ensure that others cannot access your account, especially if you are sharing a computer with someone else or are using a computer in a public place. All Internet users should take care of how they handle and disclose their Personal Information. The User-Generated Content and other information you share in public areas may be viewed by any user of the Website.
Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your Personal Information, we cannot guarantee the security of your Personal Information transmitted to our Website or that unauthorized third parties will not defeat our security measures or use nonpublic Personal Information for improper purposes. Any transmission of Personal Information is at your own risk. We are not responsible for the circumvention of any privacy settings or security measures contained on the Website. Please refer to the Federal Trade Commission's website for information about how to help protect yourself against identity theft.
Third-Party Websites & Advertising
This Privacy Notice applies only to information collected by OchriO. We may provide links to third-party websites from our Website as a service to our users, but we have no ability to control, and we are not responsible for, the privacy and data collection, use, and disclosure practices of third party websites. When you click on links that take you to external websites, you will be subject to their privacy notices and practices and not ours. We encourage you to review and understand the privacy notices of such websites before providing them with any information.
We may change this Privacy Notice from time to time to ensure its accuracy. If we make changes, the revised notice will be posted on this page. Your continued use of our Website or other services after the posting of changes to this Privacy Notice will mean you accept these changes. In some cases, we may attempt to contact you using the contact information you have provided, in order to give you choices about our using your information in a manner different from that stated at the time of collection. Please check back frequently, especially before you provide us with Personal Information, to determine the current scope of the notice.
If you become aware of any unauthorized submission of information to OchriO, including children's information, please inform us by contacting us at the contact information listed below so that we may delete it.
To exercise any of your rights over your Personal Information, ask questions about our collection and use of your Personal Information or comment about this Privacy Notice and our privacy practices, contact us at:
(+27) 63 106 7210