Privacy Policy
Last Updated: April 15, 2026
This Privacy Policy describes how OttO (the “Site”, “we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit, use our website, or make a purchase from our services (collectively, the “Services”).
For the purposes of this Privacy Policy, “you” means any user of the Services, including customers, website visitors, or any individual whose information we collect.
By accessing or using our Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree, please do not use the Services.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time for operational, legal, or regulatory reasons.
When we do:
• We will post the updated version on this page
• We will update the “Last Updated” date
• We will take any additional steps required by applicable law
Your continued use of the Services means you accept the updated policy.
Information We Collect
We collect personal and non-personal information in several ways.
A. Information You Provide Directly
• Full name
• Phone number
• Email address
• Billing and shipping address
• Account details (username, password, security questions)
• Order details (purchases, returns, exchanges)
• Customer support messages
• Loyalty points, gift cards, referrals, reviews
You may choose not to provide some information, but this may limit access to certain features.
B. Information We Collect Automatically
We automatically collect usage data through cookies and similar technologies, including:
• Device type and browser information
• IP address and geolocation (approximate)
• Pages viewed and browsing behavior
• Interaction with emails or ads
• Network and usage data
C. Information from Third Parties
We may also collect data from:
• Shopify (our e-commerce platform)
• Payment processors (credit/debit card and billing data)
• Shipping and logistics providers
• Marketing and analytics providers
• Advertising partners and tracking tools (pixels, SDKs, cookies)
All third-party data is handled according to this Privacy Policy.
How We Use Your Information
A. Provide Services
• Process and fulfill orders
• Manage payments and transactions
• Arrange shipping and deliveries
• Handle returns and exchanges
• Maintain your account
B. Customer Support & Communication
• Respond to inquiries
• Provide updates on orders
• Improve customer service
C. Marketing & Advertising (with consent where required)
• Send promotional emails or messages
• Show personalized ads
• Improve marketing relevance
You may opt out of marketing communications at any time.
D. Security & Fraud Prevention
• Detect and prevent fraud or abuse
• Protect accounts and transactions
• Enforce terms and policies
E. Service Improvement & Analytics
• Improve website functionality
• Analyze user behavior
• Enhance product offerings
F. Legal Compliance
• Comply with legal obligations
• Respond to legal requests
• Enforce agreements and protect our rights
Legal Basis for Processing (Where Applicable)
We process your personal data based on:
• Contract fulfillment
• Legal obligations
• Legitimate business interests
• Your consent (e.g., marketing communications)
Cookies & Tracking Technologies
We use cookies, pixels, and similar technologies to:
• Improve user experience
• Analyze traffic and performance
• Personalize content and ads
• Remember preferences
For more details, see Shopify cookies:
https://www.shopify.com/legal/cookies
You can disable cookies in your browser, but some features may not work properly.
How We Share Your Information
We do not sell or rent your personal data.
We may share your information with:
• Shopify and platform providers
• Payment processors
• Shipping and fulfillment partners
• Marketing and analytics providers
• Customer support tools
• Business partners and affiliates (where necessary)
We may also share data:
• If required by law
• To protect our rights or prevent fraud
• During business transfers (mergers, acquisitions, bankruptcy)
• With your explicit consent
Categories of Data Shared
We may share the following categories:
• Identifiers (name, email, phone, address)
• Commercial information (orders, purchases, support history)
• Usage data (website activity)
• Geolocation data (IP-based location)
Recipients include vendors, analytics providers, marketing partners, and affiliates.
User-Generated Content
If you post reviews or public content:
• It becomes publicly accessible
• We cannot control how others use it
• You are responsible for what you share publicly
Third-Party Websites
Our website may include links to third-party sites.
We are not responsible for:
• Their privacy practices
• Their content
• Their data security
You should review their policies separately.
Children’s Privacy
Our Services are not intended for children under 16.
We do not knowingly collect data from children.
If you believe a child has provided us data, contact us for deletion.
Data Security
We implement reasonable security measures to protect your data.
However:
• No system is 100% secure
• We cannot guarantee absolute protection
• We recommend using secure communication methods when sharing sensitive data
Data Retention
We retain personal data only as long as necessary to:
• Fulfill orders
• Provide services
• Meet legal obligations
• Resolve disputes
• Improve operations
After that, data is deleted or anonymized.
Your Rights
Depending on your location, you may have the right to:
• Access your data
• Correct inaccurate data
• Delete your data
• Restrict processing
• Withdraw consent
• Data portability
• Opt out of marketing
We will not discriminate against you for exercising your rights.
We may require identity verification before processing requests.
You may also appoint an authorized agent to act on your behalf.
International Data Transfers
Your data may be transferred and processed outside your country.
If transferred from Europe or the UK, we use appropriate safeguards such as Standard Contractual Clauses or equivalent legal mechanisms.
Complaints
If you have concerns about how we process your data:
• Contact us first
• If unsatisfied, you may contact your local data protection authority
Business Transfers
In the event of a merger, acquisition, or restructuring, your data may be transferred as part of the business assets.