TABLE OF CONTENTS

ARTICLE 1: INTRODUCTION AND SCOPE

ARTICLE 2: GENERAL PRINCIPLES AND LEGAL BASES FOR PROCESSING

ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED

ARTICLE 4: DATA CONTROLLER AND SERVICE PROVIDERS

ARTICLE 5: USERS’ DATA PROTECTION RIGHTS

ARTICLE 6: AMENDMENTS TO THIS PRIVACY POLICY

ARTICLE 7: PERSONAL DATA SECURITY

ARTICLE 8: INTERNATIONAL TRANSFERS OF PERSONAL DATA

ARTICLE 9: CONTACT AND COMPLAINTS
-

ARTICLE 1: INTRODUCTION AND SCOPE

This Privacy Policy applies to the website oimprophetic.com, operated under the commercial name OIM PROPHETICby Lesdimensions.

The purpose of this Privacy Policy is to explain clearly and transparently:

• what personal data OIM PROPHETIC collects;

• how personal data is collected;

• why personal data is processed;

• the legal bases on which processing is carried out;

• how long personal data may be retained;

• which persons or organisations may receive personal data;

• whether personal data may be transferred outside the European Economic Area;

• what rights users and customers have in relation to their personal data;

• how users and customers may exercise those rights.

For the purposes of this Privacy Policy, “personal data” means any information relating to an identified or identifiable natural person.

Personal data may include, for example:

• a person’s first name and surname;

• email address;

• telephone number;

• postal address;

• billing or delivery information;

• account identifiers;

• order history;

• IP address;

• device information;

• online identifiers;

• and any other information that may directly or indirectly identify a person.

This Privacy Policy applies to personal data collected when a person:

• accesses or browses the website;

• creates a customer account;

• places or attempts to place an order;

• pays for an order;

• requests delivery;

• contacts customer support;

• submits a complaint;

• requests a return or refund;

• exercises a statutory guarantee;

• subscribes to marketing communications;

• uses a form available on the website;

• manages their cookie preferences;

• or otherwise communicates with OIM PROPHETIC.

This Privacy Policy supplements the following documents:

• the Legal Notice;

• the General Terms and Conditions of Sale and Use;

• the Cookie Policy or cookie management interface;

• the Delivery Policy;

• and the Returns and Refunds Policy.

Where a specific form, service or feature requires additional personal data, further information may be provided to the user at the time the information is collected.

ARTICLE 2: GENERAL PRINCIPLES AND LEGAL BASES FOR PROCESSING

2.1 Applicable legislation

Personal data is processed in accordance with applicable French and European data protection legislation, including:

• Regulation (EU) 2016/679, known as the General Data Protection Regulation or GDPR;

• the amended French Data Protection Act No. 78-17 of 6 January 1978;

• the applicable French rules concerning cookies and similar technologies;

• and any other mandatory data protection legislation applicable to OIM PROPHETIC.

2.2 General processing principles

OIM PROPHETIC processes personal data in accordance with the following principles:

Lawfulness, fairness and transparency

Personal data shall be processed lawfully, fairly and transparently.

Users shall be informed of the principal purposes for which their personal data is collected and processed.

Purpose limitation

Personal data shall be collected for specified, explicit and legitimate purposes.

It shall not be subsequently processed in a manner that is incompatible with those purposes, unless permitted by applicable law.

Data minimisation

Only personal data that is adequate, relevant and reasonably necessary for the intended purposes shall be collected and processed.

Accuracy

OIM PROPHETIC shall take reasonable measures to ensure that personal data is accurate and, where necessary, kept up to date.

Users are encouraged to inform OIM PROPHETIC where their personal information changes or becomes inaccurate.

Storage limitation

Personal data shall not be retained in an identifiable form for longer than is necessary for the purposes for which it was collected.

Certain information may be archived for longer periods where this is required by law or necessary to establish, exercise or defend legal claims.

Integrity and confidentiality

Appropriate technical and organisational measures shall be implemented to protect personal data against unauthorised access, unlawful processing, accidental loss, destruction, alteration or disclosure.

Accountability

OIM PROPHETIC is responsible for complying with the applicable data protection rules and for being able to demonstrate such compliance where required.

2.3 Legal bases for processing

Personal data shall only be processed where at least one valid legal basis applies.

Depending on the purpose concerned, OIM PROPHETIC may rely on the following legal bases:

Performance of a contract

Processing may be necessary to:

• create or manage a customer account;

• process an order;

• collect payment;

• prepare and deliver products;

• manage returns or refunds;

• provide customer support;

• apply contractual or statutory guarantees;

• or perform another obligation arising from the sales contract.

Pre-contractual measures

Processing may be necessary to respond to a request made by a person before entering into a contract, such as:

• answering a product-related question;

• providing information about delivery;

• responding to an availability enquiry;

• or assisting with the ordering process.

Compliance with a legal obligation

Processing may be necessary to comply with legal, regulatory, accounting, tax, consumer protection or administrative obligations.

This may include the retention of:

• invoices;

• accounting records;

• transaction information;

• evidence of orders;

• consumer complaints;

• and information required by competent public authorities.

Legitimate interests

OIM PROPHETIC may process personal data where this is necessary for a legitimate interest, provided that the interests, rights and freedoms of the individual do not override that interest.

Legitimate interests may include:

• protecting the website and information systems;

• preventing fraud and unauthorised transactions;

• improving the website and customer experience;

• managing and defending legal claims;

• protecting the rights and property of OIM PROPHETIC;

• maintaining evidence of communications;

• producing internal and aggregated business statistics;

• and ensuring the proper operation of the business.

Where processing is based on legitimate interests, OIM PROPHETIC shall assess the necessity and proportionality of the processing and its potential effect on the individuals concerned.

Consent

Consent may be requested where it is legally required, particularly for:

• certain marketing communications;

• non-essential cookies;

• advertising cookies;

• certain analytics technologies;

• or optional features involving personal data.

Where processing is based on consent, the user may withdraw their consent at any time.

Withdrawal of consent shall not affect the lawfulness of processing carried out before consent was withdrawn.

Establishment, exercise or defence of legal claims

Personal data may also be processed where necessary to establish, exercise or defend the rights of OIM PROPHETIC, a customer or another person before a court, mediator, insurer, administrative authority or other competent body.

ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED

3.1 Categories of personal data collected

Depending on how the website is used, OIM PROPHETIC may collect the following categories of personal data.

Identification information

This may include:

• first name;

• surname;

• title, where applicable;

• customer or account identifier.

Contact information

This may include:

• email address;

• telephone number;

• billing address;

• delivery address;

• postcode;

• city;

• country.

Customer account information

Where a customer account is created, the following information may be processed:

• login email address;

• encrypted or protected account credentials;

• account creation date;

• account preferences;

• order history;

• saved addresses;

• communication preferences;

• and account activity.

OIM PROPHETIC does not have access to a customer’s unencrypted password.

Order and transaction information

This may include:

• order number;

• order date;

• products ordered;

• quantities;

• prices;

• discounts and promotional codes;

• delivery charges;

• billing information;

• delivery information;

• payment status;

• refund status;

• transaction references;

• and communications concerning the order.

Payment information

Payments may be made using the methods offered during checkout, including:

• bank cards;

• Apple Pay;

• Google Pay.

Payment transactions are processed through secure payment services made available through the Wix website and the relevant payment providers.

OIM PROPHETIC does not ordinarily receive or retain the customer’s complete bank card number or security code.

OIM PROPHETIC may receive limited payment information, such as:

• the payment status;

• the payment method used;

• the last digits of a payment card, where supplied by the provider;

• the transaction reference;

• the payment date;

• and fraud-prevention or verification results.

Apple Pay, Google Pay, banks and payment service providers may process personal data under their own terms and privacy policies.

Delivery information

OIM PROPHETIC and its logistics providers may process:

• the recipient’s name;

• delivery address;

• telephone number;

• email address;

• delivery instructions;

• tracking information;

• proof of delivery;

• carrier communications;

• and information concerning failed or disputed deliveries.

Customer support information

When a user contacts OIM PROPHETIC, the following data may be processed:

• the sender’s identity and contact details;

• the content of the request;

• order information;

• attached documents;

• photographs or videos;

• complaints;

• return or refund requests;

• and subsequent correspondence.

Users are asked not to send personal data that is unnecessary for the handling of their request.

Technical and browsing information

When a user accesses the website, certain information may be collected automatically, including:

• IP address;

• date and time of access;

• browser type;

• device type;

• operating system;

• approximate geographical information derived from the IP address;

• pages viewed;

• actions performed on the website;

• referral source;

• session information;

• error and security logs;

• and cookie identifiers.

Marketing and preference information

Where applicable, OIM PROPHETIC may process:

• newsletter subscription status;

• marketing consent;

• communication preferences;

• preferred language;

• responses to promotional campaigns;

• and records of consent, refusal or withdrawal.

3.2 Methods of collection

Personal data may be collected:

Directly from the user

This occurs where the user:

• creates an account;

• completes a form;

• places an order;

• enters delivery information;

• contacts customer support;

• subscribes to a newsletter;

• submits a complaint;

• or exercises a legal right.

Automatically

Certain technical information may be collected automatically when a user accesses or interacts with the website through:

• server logs;

• essential cookies;

• analytics tools;

• security tools;

• fraud-prevention tools;

• and similar technologies.

From service providers

OIM PROPHETIC may receive information from:

• Wix;

• payment providers;

• banks;

• digital wallet providers;

• logistics and delivery providers;

• fraud-prevention providers;

• communication services;

• and other technical partners.

3.3 Mandatory and optional information

Certain personal information is required to process and deliver an order.

Mandatory information may include:

• the customer’s name;

• email address;

• billing address;

• delivery address;

• country;

• and payment-related information.

Mandatory fields are generally identified during the ordering or registration process.

Failure to provide required information may prevent OIM PROPHETIC from:

• creating an account;

• processing an order;

• accepting payment;

• delivering products;

• responding to a request;

• or complying with a legal obligation.

Optional information may be left blank without preventing access to essential website functions, unless otherwise indicated.

3.4 Purposes of processing

Personal data may be processed for the following purposes:

• operating and maintaining the website;

• creating and managing customer accounts;

• receiving and confirming orders;

• processing and securing payments;

• preparing, dispatching and delivering products;

• providing delivery tracking;

• issuing invoices;

• managing promotional codes and discounts;

• managing returns, refunds and withdrawals;

• applying the legal guarantees;

• responding to customer enquiries;

• managing complaints and disputes;

• preventing fraud and payment abuse;

• securing accounts and the website;

• complying with accounting and tax obligations;

• complying with consumer protection obligations;

• retaining evidence of contracts and transactions;

• establishing, exercising or defending legal claims;

• improving products, services and website performance;

• producing statistics and measuring website traffic;

• sending marketing communications where permitted;

• managing cookie and communication preferences;

• and responding to lawful requests from public authorities.

3.5 Retention periods

OIM PROPHETIC shall retain personal data only for as long as necessary for the relevant purpose and in accordance with applicable legal requirements.

The principal retention periods or criteria are as follows.

Customer account data

Customer account data may be retained for as long as the account remains active.

Where an account has been inactive for an extended period, OIM PROPHETIC may contact the customer, archive the account or delete data that is no longer required.

Certain information linked to completed transactions may continue to be retained separately after closure of the account where required by law.

Order and contractual information

Information relating to orders, contracts, deliveries, returns and customer communications may be retained for the duration of the commercial relationship and subsequently archived for up to five years where necessary to establish evidence of the contract, manage a dispute or comply with the applicable limitation periods.

A longer retention period may apply where required by a specific legal obligation.

Accounting and invoicing information

Invoices, accounting records and supporting documentation may be retained for a period of ten years in accordance with applicable accounting and tax obligations.

Payment information

OIM PROPHETIC does not ordinarily retain complete payment-card data.

Transaction references, payment status and limited payment information may be retained for the time necessary to process the transaction, manage refunds, prevent fraud and meet applicable legal obligations.

Payment providers may apply their own retention periods.

Customer support and complaints

Customer support messages may be retained for the time necessary to process the request and, where appropriate, for the applicable limitation period.

Information connected with a complaint, guarantee claim or dispute may be retained until the matter has been fully resolved and for any additional legally permitted period required to protect the rights of the parties.

Marketing information

Where marketing is based on consent, the relevant data may be retained until the user withdraws consent or unsubscribes.

Prospect information may generally be retained for up to three years from the most recent active contact with the person, subject to applicable law.

Information needed to record an objection or unsubscribe request may be retained for the purpose of ensuring that the request continues to be respected.

Website security logs

Technical and security logs may be retained for a limited period proportionate to the security purpose, unless an incident requires longer retention for investigation or legal proceedings.

Cookies

Cookie retention periods depend on the purpose and type of cookie concerned.

Strictly necessary cookies may be retained for the duration technically required for the relevant function.

Where applicable:

• cookie consent or refusal choices may be retained for approximately six months;

• certain audience-measurement cookie identifiers may be retained for up to thirteen months;

• associated audience-measurement data may be retained for a limited period appropriate to the relevant purpose.

More precise information may be displayed through the website’s cookie management interface or Cookie Policy.

Legal proceedings and investigations

Personal data may be retained for longer where necessary in connection with:

• legal proceedings;

• regulatory investigations;

• suspected fraud;

• enforcement of a judgment;

• or the establishment, exercise or defence of legal claims.

Once the relevant retention period has expired, personal data shall be deleted, anonymised or securely archived where continued retention is legally required.

3.6 Recipients of personal data

Personal data may be disclosed only to persons or organisations that require it for a legitimate and specified purpose.

Recipients may include:

• authorised personnel acting on behalf of OIM PROPHETIC;

• Wix and its relevant technical service providers;

• website hosting and information technology providers;

• payment service providers;

• Apple Pay and Google Pay, where selected by the customer;

• banks and financial institutions;

• logistics providers and carriers;

• email and customer support providers;

• website security and fraud-prevention providers;

• analytics or marketing providers, subject to the applicable consent requirements;

• accountants and administrative service providers;

• insurers;

• legal advisers;

• consumer mediators;

• courts, regulators and public authorities;

• and any other recipient where disclosure is required by law.

Service providers shall only receive personal data that is reasonably necessary for the service they perform.

Depending on the processing concerned, a recipient may act:

• as a processor acting on behalf of OIM PROPHETIC;

• as a joint controller;

• or as an independent data controller subject to its own legal obligations.

OIM PROPHETIC does not sell customers’ personal data.

3.7 Cookies and similar technologies

The website may use cookies and similar technologies to:

• ensure the proper functioning of the website;

• secure accounts and transactions;

• retain shopping basket contents;

• remember user preferences;

• facilitate checkout;

• measure traffic and performance;

• analyse website use;

• personalise content;

• support marketing campaigns;

• and integrate third-party services.

Cookies may include:

• strictly necessary cookies;

• security and authentication cookies;

• shopping basket cookies;

• preference cookies;

• audience-measurement cookies;

• advertising cookies;

• and social media or third-party cookies.

Strictly necessary cookies may be used without prior consent where permitted by law.

Cookies that are not strictly necessary shall only be activated after valid consent has been obtained, where required.

The user must be able to:

• accept non-essential cookies;

• refuse non-essential cookies;

• select categories of cookies;

• and change or withdraw their choices.

Refusing non-essential cookies shall not prevent the user from accessing the essential sections of the website.

However, certain optional or personalised functions may be limited.

The user may manage their choices through the website’s cookie management interface and, where applicable, through their browser settings.

3.8 Automated decision-making

OIM PROPHETIC does not intend to make decisions producing legal or similarly significant effects for users solely through automated processing without appropriate safeguards.

Payment providers, financial institutions and security providers may nevertheless use automated systems to:

• authorise or refuse a transaction;

• detect suspected fraud;

• assess security risks;

• or protect their services.

Such processing may be governed by the relevant provider’s own privacy policy and legal obligations.

Where OIM PROPHETIC implements automated decision-making that produces legal or similarly significant effects, the person concerned shall be provided with the information and rights required by applicable law.

ARTICLE 4: DATA CONTROLLER AND SERVICE PROVIDERS

4.1 Identity of the data controller

The data controller is:

Lesdimensions, operating under the commercial name OIM PROPHETIC

Registered office:

64 Boulevard National
13001 Marseille
France

SIREN: 903 260 719

SIRET: 903 260 719 00013

Email:

supportoimprophetic@gmail.com

The data controller determines the purposes and essential means of processing personal data carried out in connection with the website and OIM PROPHETIC’s commercial activities.

4.2 Website platform

The website is created and hosted using the services of Wix.

Wix may process certain personal data necessary to:

• host and operate the website;

• provide website functionality;

• manage customer accounts;

• process technical information;

• secure the platform;

• support payments;

• and provide other services selected by OIM PROPHETIC.

Depending on the particular processing operation, Wix or another service provider may act as a processor on behalf of OIM PROPHETIC or as an independent data controller for its own processing activities.

4.3 Obligations of the data controller

OIM PROPHETIC undertakes to:

• process personal data lawfully and transparently;

• collect only data that is reasonably necessary;

• use personal data only for specified purposes;

• implement appropriate security measures;

• restrict access to authorised persons;

• select service providers offering appropriate safeguards;

• respect the applicable retention periods;

• facilitate the exercise of data protection rights;

• and cooperate with the competent supervisory authorities where required.

Personal data shall not be disclosed to a third party for an unrelated purpose without an appropriate legal basis.

4.4 Processors and contractual safeguards

Where a service provider acts as a processor, OIM PROPHETIC shall take reasonable steps to ensure that the provider:

• processes personal data only on documented instructions;

• maintains appropriate confidentiality;

• implements suitable security measures;

• assists with the exercise of individual rights where required;

• informs OIM PROPHETIC of relevant data incidents;

• and complies with the applicable data protection rules.

4.5 Changes affecting personal data

Where personal data has been rectified, erased or restricted following a valid request, OIM PROPHETIC shall communicate the relevant change to recipients where required by law, unless this proves impossible or involves disproportionate effort.

At the individual’s request, OIM PROPHETIC may provide information concerning those recipients where applicable.

ARTICLE 5: USERS’ DATA PROTECTION RIGHTS

5.1 General principles

Subject to the conditions and limitations provided by applicable law, users may exercise rights concerning their personal data.

Requests may be sent to:

supportoimprophetic@gmail.com

The request should include:

• the applicant’s full name;

• the email address associated with the account or order;

• sufficient information to identify the relevant data;

• and a clear description of the right being exercised.

OIM PROPHETIC may request additional information where reasonably necessary to verify the applicant’s identity.

The applicant shall not ordinarily be required to provide a copy of an identity document unless there is a reasonable doubt concerning their identity and no less intrusive method is sufficient.

Requests are generally processed free of charge.

However, where a request is manifestly unfounded or excessive, particularly because of its repetitive nature, OIM PROPHETIC may charge a reasonable fee or refuse to act where permitted by law.

OIM PROPHETIC shall respond without undue delay and, in principle, within one month of receipt of the request.

That period may be extended by up to two additional months where permitted by law, taking into account the complexity and number of requests.

The applicant shall be informed of any extension and the reasons for it within the initial one-month period.

5.2 Right to information

Users have the right to receive clear information about:

• the identity of the data controller;

• the categories of personal data processed;

• the purposes of processing;

• the legal bases used;

• the recipients of the data;

• applicable retention periods;

• international transfers;

• and their data protection rights.

5.3 Right of access

Users may request confirmation as to whether OIM PROPHETIC processes personal data relating to them.

Where personal data is processed, users may request:

• access to that data;

• a copy of the personal data;

• information concerning the purposes of processing;

• the categories of data concerned;

• the recipients;

• the applicable retention period;

• and information about their other statutory rights.

The rights and freedoms of other persons shall be protected when responding to an access request.

5.4 Right to rectification

Users may request the correction of personal data that is inaccurate or incomplete.

Users with a customer account may also be able to update certain information directly through their account settings.

5.5 Right to erasure

Users may request the deletion of their personal data where the legal conditions are satisfied, including where:

• the data is no longer necessary for the purpose for which it was collected;

• consent has been withdrawn and no other legal basis applies;

• the user validly objects to the processing;

• the data has been unlawfully processed;

• or deletion is necessary to comply with a legal obligation.

The right to erasure is not absolute.

OIM PROPHETIC may retain certain data where necessary to:

• comply with a legal obligation;

• preserve accounting or transaction records;

• exercise freedom of expression or information;

• establish, exercise or defend legal claims;

• or meet another lawful retention requirement.

A customer may also request closure of their customer account by contacting:

supportoimprophetic@gmail.com

Closure of an account shall not require the deletion of information that OIM PROPHETIC must legally retain.

5.6 Right to restriction of processing

Users may request that the processing of their personal data be restricted where:

• the accuracy of the data is disputed;

• the processing is unlawful but the user does not want the data erased;

• OIM PROPHETIC no longer needs the data but the user requires it for a legal claim;

• or the user has objected to processing pending verification of the relevant interests.

Where processing is restricted, the data shall generally only be stored or processed with the user’s consent or for another legally permitted purpose.

5.7 Right to data portability

Where processing is based on consent or on a contract and is carried out by automated means, users may have the right to receive personal data they have provided in a structured, commonly used and machine-readable format.

Where technically feasible, the user may also request that the data be transmitted directly to another controller.

The right to portability does not apply to all personal data or processing operations and shall not adversely affect the rights and freedoms of other persons.

5.8 Right to object

Users may object, on grounds relating to their particular situation, to processing based on legitimate interests.

OIM PROPHETIC shall cease the processing unless it demonstrates compelling legitimate grounds that override the user’s interests, rights and freedoms, or unless processing remains necessary for a legal claim.

Users have the right to object at any time to the processing of their personal data for direct marketing purposes.

Where the objection concerns direct marketing, the relevant processing shall cease.

5.9 Right to withdraw consent

Where processing is based on consent, users may withdraw that consent at any time.

Consent may be withdrawn by:

• using the unsubscribe link included in a marketing email;

• changing cookie preferences;

• changing account preferences where available;

• or contacting OIM PROPHETIC.

Withdrawal of consent does not affect processing carried out lawfully before the withdrawal.

5.10 Rights concerning automated decisions

Users have the right not to be subject to a decision based solely on automated processing, including profiling, where that decision produces legal effects or similarly significantly affects them, except where an applicable legal exception and appropriate safeguards apply.

Where required by law, users may have the right to:

• obtain human intervention;

• express their point of view;

• and challenge the decision.

5.11 Rights concerning personal data after death

In accordance with applicable French legislation, users may define general or specific instructions concerning the retention, deletion and communication of their personal data after their death.

Such instructions may be modified or withdrawn in accordance with applicable law.

5.12 Right to submit a complaint

Users have the right to submit a complaint to the competent supervisory authority if they consider that their personal data has been processed in breach of applicable law.

In France, the competent supervisory authority is the:

Commission Nationale de l’Informatique et des Libertés – CNIL

Submitting a complaint does not prevent the person from exercising any other administrative or judicial remedy available to them.

5.13 Personal data relating to minors

The website and its products are not specifically directed at children.

A person placing an order must have the legal capacity to enter into a contract or act with the valid authorisation of their legal representative.

Where consent is relied upon for an online service offered directly to a child, French law may require authorisation from a parent or legal guardian where the child is under the applicable digital age of consent.

OIM PROPHETIC does not knowingly seek to collect unnecessary personal data from children.

Where OIM PROPHETIC becomes aware that personal data has been collected from a minor without the legally required authorisation, reasonable measures shall be taken to delete or appropriately process that data.

ARTICLE 6: AMENDMENTS TO THIS PRIVACY POLICY

This Privacy Policy may be consulted at any time on the website.

OIM PROPHETIC reserves the right to amend or update this Privacy Policy in order to reflect:

• changes to the website;

• changes to the products or services;

• changes to the personal data collected;

• the addition or removal of a service provider;

• changes to payment or delivery methods;

• changes to cookies or analytics tools;

• legal or regulatory developments;

• guidance from supervisory authorities;

• or changes to OIM PROPHETIC’s internal practices.

The date of the most recent update shall appear at the beginning of this Privacy Policy.

Where a change materially affects the way personal data is processed, users may be informed through an appropriate method, such as:

• a notice displayed on the website;

• an account notification;

• an email;

• or a new consent request where consent is legally required.

The version applicable is the version available on the website at the time of consultation, without prejudice to rights acquired under an earlier version or mandatory legal provisions.

Users are encouraged to review this Privacy Policy periodically.

ARTICLE 7: PERSONAL DATA SECURITY

7.1 Security measures

OIM PROPHETIC undertakes to implement appropriate technical and organisational measures designed to protect personal data against:

• accidental or unlawful destruction;

• loss;

• alteration;

• unauthorised disclosure;

• unauthorised access;

• fraudulent use;

• and any other unlawful processing.

Depending on the nature of the data and the risks involved, these measures may include:

• access restrictions;

• account authentication;

• secure payment services;

• encryption in transit where appropriate;

• passwords and access controls;

• technical monitoring;

• backups;

• updates and security maintenance;

• internal confidentiality requirements;

• and procedures for handling security incidents.

Access to personal data is restricted to authorised persons who require it for their duties or services.

7.2 User responsibilities

Users also contribute to the security of their personal data.

Users are responsible for:

• choosing an appropriate password;

• keeping their login details confidential;

• not sharing access to their account;

• logging out of shared devices;

• protecting their devices and email accounts;

• and informing OIM PROPHETIC promptly of any suspected unauthorised access.

OIM PROPHETIC shall never ask a customer to send their complete bank card number or security code by ordinary email.

7.3 Limits of security

Although reasonable security measures are implemented, no website, information system, internet transmission or storage system can guarantee absolute security.

OIM PROPHETIC cannot guarantee that every attempted cyberattack, technical failure or unauthorised act will be prevented.

This provision does not reduce the legal security obligations applicable to OIM PROPHETIC.

7.4 Personal data breaches

A personal data breach may involve:

• unauthorised access;

• accidental disclosure;

• loss of information;

• unlawful alteration;

• destruction;

• or unavailability of personal data.

Where OIM PROPHETIC becomes aware of a personal data breach, it shall assess the nature and potential consequences of the incident.

Where legally required, OIM PROPHETIC shall:

• document the breach;

• notify the competent supervisory authority within the applicable timeframe;

• cooperate with relevant service providers;

• take measures to limit the consequences;

• and inform affected individuals where the breach is likely to result in a high risk to their rights and freedoms.

Any communication to affected individuals shall describe, where required:

• the nature of the breach;

• the likely consequences;

• the measures taken or proposed;

• and the appropriate contact details.

ARTICLE 8: INTERNATIONAL TRANSFERS OF PERSONAL DATA

8.1 Principle

OIM PROPHETIC is established in France and offers its products to customers located in France and the European Union.

Certain website, payment, hosting, communication, analytics, security or support providers may nevertheless process personal data from countries located outside France or outside the European Economic Area.

The use of Wix and certain international technology providers may therefore involve international transfers or remote access to personal data.

8.2 Safeguards

Where personal data is transferred to a country outside the European Economic Area that has not been recognised as providing an adequate level of protection, OIM PROPHETIC shall take reasonable steps to ensure that an appropriate legal mechanism is used.

Such mechanisms may include:

• an adequacy decision adopted by the European Commission;

• standard contractual clauses approved by the European Commission;

• binding corporate rules;

• contractual, technical or organisational supplementary safeguards;

• or another transfer mechanism permitted by applicable law.

The safeguards applied may depend on:

• the service provider;

• the destination country;

• the nature of the personal data;

• and the processing activity concerned.

8.3 Information requests

Users may contact OIM PROPHETIC for further information concerning the applicable international transfer mechanisms and, where legally available, request information concerning the relevant safeguards.

Requests may be sent to:

supportoimprophetic@gmail.com

Certain details may be limited where necessary to protect confidential information, trade secrets or the security of the relevant systems.

ARTICLE 9: CONTACT AND COMPLAINTS

For any question concerning this Privacy Policy, the processing of personal data or the exercise of a data protection right, users may contact:

OIM PROPHETIC / Lesdimensions

Registered office:

64 Boulevard National
13001 Marseille
France

Email:

supportoimprophetic@gmail.com

The request should clearly indicate its purpose.

Suggested email subjects include:

• “Personal Data Access Request”;

• “Personal Data Rectification Request”;

• “Personal Data Erasure Request”;

• “Customer Account Deletion Request”;

• “Personal Data Portability Request”;

• “Objection to Processing”;

• “Marketing Unsubscribe Request”;

• or “Privacy Question”.

OIM PROPHETIC may request additional information where reasonably necessary to identify the applicant, locate the relevant personal data or prevent fraudulent requests.

If a user considers that OIM PROPHETIC has not adequately responded to their request, they may submit a complaint to the competent supervisory authority.

In France, the competent authority is:

Commission Nationale de l’Informatique et des Libertés – CNIL

The user may also seek any judicial remedy available under applicable law.