Privacy policy

Who we are

The controller of your personal data is [to be completed: legal entity name], [to be completed: address]. Contact: support@omgfits.com.

What we collect and why

• Orders: name, email, addresses, phone and order contents, to perform the contract (GDPR art. 6(1)(b)) and to meet bookkeeping obligations (art. 6(1)(c)).
• Account: email, name, hashed password, saved addresses and wishlist, to provide your account (art. 6(1)(b)).
• Newsletter: your email and the consent you gave, only with your consent (art. 6(1)(a)). Every email contains an unsubscribe link.
• Checkout reminders: only if you tick the box at checkout (consent).
• Security: IP address in rate-limiting and audit logs, for our legitimate interest in protecting the shop (art. 6(1)(f)).
• Statistics: anonymous daily counters (e.g. number of product views). No tracking cookies, no profiles.

Payments

Card and payment details are entered on the hosted page of our payment provider and never reach our servers.

Cookies

We only use strictly necessary cookies: your session, your bag and your wishlist. See Cookies.

Processors

Hosting, database, payment and email providers process data on our behalf: [to be completed: list of processors and locations].

Retention

Order data is retained for the statutory bookkeeping period: [to be completed: retention period per your jurisdiction]. Account data is kept until you delete your account.

Your rights

You can access, correct, export and delete your data at any time. Signed-in customers can download their data and delete their account under My account → Details & privacy. You also have the right to lodge a complaint with your data protection authority.