Last updated: 17 September 2026
Who handles your information
Marc Olivier Schwartz, trading as Oak & Vault (Carrer de Ramon Llull, 555, 6A, 08930 Sant Adria de Besos, Barcelona, Spain; VAT/NIF ESZ0491085V) is responsible for the customer information used to run this store. Contact oakandvault@cartkit.co about privacy or to exercise your rights.
What we collect and why
We collect the contact information, delivery and billing addresses, cart contents, order details and support correspondence you provide, in order to process your order and answer your questions. Payment status and transaction references are retained for accounting, refunds and fraud prevention.
Stripe collects your payment card details directly through its secure payment form. We do not receive or store full card numbers. Never send card details to us by email.
Our website and hosting services also process technical information such as IP addresses, browser information, request logs and session identifiers, to deliver the site, keep your cart working and protect against misuse. Your browser stores your cart and your privacy choice so that the store works across pages; avoid entering personal details on a shared device.
Where applicable, our legal bases are performing a contract or taking steps you requested before purchase, complying with legal obligations, and our legitimate interests in secure operation, fraud prevention and responding to enquiries. Optional advertising measurement relies on your consent, which you can withdraw at any time.
Advertising and your privacy choice
With your permission, given through the "Your privacy choices" banner, we load the Meta (Facebook) advertising pixel. It records page views, product views, additions to cart, checkout starts and completed purchases, and shares them with Meta so we can measure our advertising and show relevant ads. This involves Meta setting its own cookies and receiving your IP address and details of the pages you viewed on this store.
If you choose Decline, the pixel is not loaded. Your choice is stored in your browser and you can change it by clearing your browser storage for this site and choosing again. Declining does not affect your ability to browse or buy.
We do not sell your personal information for money. Sharing browsing activity with an advertising network may be treated as a "sale" or "sharing" for targeted advertising under some US state privacy laws; declining the banner, or sending us a request by email, opts you out.
Who receives information
Our store hosting and commerce services process site and order data. Stripe processes payments. Our fulfillment partner CJdropshipping and the delivery carriers receive the information needed to pick, pack and deliver your order, such as the products ordered, the recipient name, delivery address and contact details. Meta receives advertising measurement data if you allow it.
CJdropshipping is headquartered in China and operates the US warehouses that dispatch your order, so your delivery details are processed outside the United States and outside the European Economic Area. Information may also be shared with professional advisers or authorities where required for legal obligations or claims. Contact us for details of providers and any applicable international-transfer safeguards.
Retention
We keep order and payment records for the periods needed for accounting, tax, disputes and other legal requirements. Support messages are kept while needed to resolve your enquiry and any related claim. Technical and session records are kept as needed for site operation and security.
Your choices and rights
Depending on where you live, you may request access to, correction of, deletion of, or a copy of your personal information, object to or restrict certain processing, and opt out of targeted advertising. You may withdraw consent at any time without affecting processing that already took place. We will not discriminate against you for exercising these rights.
To make a request, email oakandvault@cartkit.co. We may ask for proportionate information to verify your identity; do not send identity documents unless we request them through an appropriate secure channel. You may also complain to your state attorney general or, in the EEA, to your data protection authority.
Children and changes
This store is intended for adult purchasers. If you believe a child has submitted personal information to us, contact us and we will delete it. We will update this page when our practices change and show the revision date above.