Privacy Policy
Last updated: April 4, 2025
This Privacy Policy describes how OmniRug (“we”, “us”, or “our”) collects, uses, discloses, and protects your personal data when you visit our website, place an order, or interact with our services. We are committed to complying with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable data protection laws.
By using our website or submitting personal data to us, you agree to the terms of this Privacy Policy.
1. Data Controller Contact Information
OmniRug
Email: omnirugg@gmail.com
2. Types of Personal Data Collected
We may collect the following categories of personal data:
• Identity data: full name
• Contact data: email address, phone number, messenger preferences
• Delivery data: shipping address, country of residence
• Order data: product preferences, sizes, uploaded references or files
• Communication data: your messages, inquiries, or feedback
• Payment data: only transaction confirmations (we do not store card details)
• Technical data: IP address, browser type, time zone, and cookies (see section 8)
3. Legal Basis for Processing
We process your personal data lawfully on one or more of the following legal bases:
• Consent – when you voluntarily submit data through forms or agree to cookies
• Contractual necessity – to process your orders and provide requested services
• Legal obligation – to comply with tax, accounting, or regulatory requirements
• Legitimate interest – to improve services, ensure security, and prevent fraud
4. Purpose of Data Processing
We use your personal data for the following purposes:
• To process, confirm, and fulfill your orders
• To communicate with you regarding your order or inquiry
• To respond to your messages and provide customer support
• To manage our relationship with you
• To comply with legal and tax obligations
• To improve and personalize the user experience on our website
5. Data Sharing and Third Parties
We only share your data when necessary and with trusted third parties, such as:
• Delivery services to ship your order
• Payment processors to complete your transactions
• IT and website providers who help maintain our platform
All third parties are required to comply with GDPR and are bound by confidentiality agreements. We do not sell or rent your data to third parties.
6. Data Retention
We retain your personal data only for as long as is necessary to:
• Fulfill the purposes outlined in this policy
• Comply with legal, regulatory, and accounting obligations (typically 5–10 years for invoicing)
When personal data is no longer needed, it will be securely deleted or anonymized.
7. Your Rights Under GDPR
As a data subject, you have the following rights:
• Right to access – obtain a copy of your personal data
• Right to rectification – correct inaccurate or incomplete data
• Right to erasure – request deletion (“right to be forgotten”)
• Right to restriction – request limitation of processing
• Right to data portability – receive your data in a structured, machine-readable format
• Right to object – object to processing for direct marketing or based on legitimate interests
• Right to withdraw consent – at any time, without affecting prior lawful processing
To exercise these rights, contact us at: omnirugg@gmail.com
If you believe your rights have been violated, you have the right to lodge a complaint with your local data protection authority.
8. Cookies and Tracking Technologies
We use cookies and similar technologies to improve site functionality and analyze traffic. Cookies may store information such as:
• Language and region preferences
• Session IDs
• Anonymous analytics data (via tools like Google Analytics)
You can disable cookies via your browser settings. By continuing to use the site, you consent to our cookie usage unless disabled.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
• SSL encryption (HTTPS)
• Secure servers and restricted access
• Internal policies to prevent unauthorized access, disclosure, or alteration
Despite our efforts, no method of data transmission is 100% secure. You use the website at your own risk.
10. International Transfers
If you are located outside the country where our operations are based and place an order or submit data, your personal data may be transferred and processed across borders. We ensure appropriate safeguards are in place in accordance with GDPR.
11. Policy Updates
We reserve the right to update this Privacy Policy at any time. The most current version will always be available on this page with the “Last updated” date. We encourage you to review it regularly.
12. Contact Us
If you have any questions, concerns, or data requests, please contact us:
omnirugg@gmail.com