Privacy policy

Privacy Policy

This Privacy Policy explains how O3 processes personal data when you visit o3-performance.com, place an order, create a customer account, subscribe to emails, contact us, return an item, enter an O3 giveaway or interact with O3 on social media.

1. Who is responsible

O3 operates o3-performance.com and is responsible (the controller) for the processing described in this policy. Our postal address is shown in our Legal Notice.

For all privacy matters, contact privacy@o3-performance.com.

2. Personal data we process

  1. Contact and identity data: name, email address, and telephone number where you provide it.
  2. Order data: products, sizes, colours, prices, delivery and billing addresses, order history, payment status and delivery information. We do not receive your full card number.
  3. Customer account data: login details, saved addresses and account activity.
  4. Communications: messages you send us and our replies.
  5. Returns and after-sales data: returns, exchanges, withdrawals, store credit and faulty-product claims, including photographs you send.
  6. Marketing data: email subscription status, preferences, sign-up source and interactions with our emails.
  7. Giveaway data: your social media handle, entry comments and, if you win, your name, email and delivery address.
  8. Technical and usage data: device and browser information, IP address, approximate location, pages viewed, referring source, cookie identifiers and interactions with the website.
  9. Security data: information used to detect fraud and protect the store.

3. Where the data comes from

Most data comes directly from you. Technical data is collected automatically when you use the website. We also receive data from:

  • Shopify
  • payment providers
  • delivery carriers
  • social media platforms, when you interact with O3 there or enter a giveaway

4. Data needed to place an order

To place an order, you must provide your name, email address, delivery address and payment details. Payment details are processed by the payment provider. A telephone number is only required where checkout marks it as required for delivery.

Without this data we cannot accept, deliver or support your order. All other information is optional.

5. Purposes and legal bases

Where the EU GDPR or UK GDPR applies, we rely on the following legal bases:

  1. Processing orders, payment, delivery, returns, withdrawals, store credit and customer support: performance of a contract.
  2. Accounting, tax, customs and other legal duties: legal obligation.
  3. Operating, securing and improving the website, and preventing fraud: our legitimate interests in running a safe and functional store.
  4. Analytics and non-essential cookies: your consent, where required.
  5. Marketing emails: your consent.
  6. Running giveaways and contacting winners: performance of the giveaway terms.

Where Swiss law applies, we process personal data in line with the Swiss Federal Act on Data Protection (FADP).

6. Shopify

Our store runs on Shopify. Shopify processes personal data on our behalf to host the website, run checkout and manage orders. For merchants serving customers in Switzerland, the EEA and the UK, Shopify's contracting entity is Shopify International Limited in Ireland.

For some services, Shopify acts as an independent controller under its own privacy policy. Examples are Shop Pay (if you choose it) and certain fraud and security functions.

You can exercise certain choices directly with Shopify through the Shopify Privacy Portal.

7. Shopify Network Intelligence

Shopify Network Intelligence is enabled for our store. Shopify may use information about your interactions with O3 together with information about your interactions with Shopify and other Shopify merchants to provide Enhanced Services, including personalization, search, fraud prevention, store performance and marketing-related services.

Where required by law, non-essential processing and advertising-related uses take place only with your consent. You can withdraw or change your consent at any time through the privacy settings available on our website.
You can learn more about how Shopify processes personal data in the Shopify Consumer Privacy Policy and exercise applicable privacy choices through the Shopify Privacy Portal.

8. Payments

Payments are processed by Shopify Payments and the other payment providers shown at checkout. Depending on the method you choose, card networks, banks and wallet providers may also process your data.

Payment providers may act as independent controllers for fraud prevention and their own legal obligations.

9. Delivery and customs

We share your name, delivery address, email address and, where needed, telephone number with the carriers that deliver your order. For deliveries outside Switzerland, the data needed for customs clearance is also shared with carriers and customs authorities in the destination country.

10. Google Analytics 4

We use Google Analytics 4 to understand how visitors use our website. In Switzerland, the EEA and the UK, Google Analytics runs only if you consent through our cookie settings.

Analytics data can include device and browser information, approximate location, traffic source, pages viewed and interactions. Google states that Google Analytics 4 does not log or store IP addresses.

We do not send your name, email address or postal address to Google Analytics. Analytics data is kept for no longer than 14 months.

11. Cookies and similar technologies

We use:

  • essential technologies for the cart, checkout, security and your settings
  • analytics and other non-essential technologies only in line with your choices

In Switzerland, the EEA and the UK you can accept, reject or change your choices at any time through the privacy settings link in the website footer. Blocking essential cookies in your browser may stop the store from working.

12. Marketing emails

We send marketing emails, for example about launches, early access and new products, only if you have subscribed. Every email contains an unsubscribe link, and you can also unsubscribe by writing to privacy@o3-performance.com.

After you unsubscribe, we keep a minimal suppression record so that we do not email you again. Order-related service emails continue.

13. Giveaways and social media

When you interact with O3 on Instagram, TikTok or other platforms, the platform processes your data as an independent controller under its own privacy policy.

When you enter an O3 giveaway, we process your handle and entry to run the giveaway and choose winners. We contact winners only from our official account @o3.performance or from an official O3 email address. O3 will never ask a winner for payment or card details.

14. Who receives your data

We share personal data only as needed with:

  • Shopify
  • payment providers
  • carriers and customs authorities
  • analytics, email and IT service providers
  • accountants and professional advisers
  • authorities where required by law

If O3's business or its assets are transferred, data may be transferred to the acquirer under applicable law.

We do not sell your personal data.

15. International transfers

O3 is based in Switzerland. Your data may be processed in:

  • Ireland and other EEA countries
  • the United Kingdom
  • Canada
  • the United States
  • other countries where our service providers or their subprocessors operate
  • the destination country of your delivery

For transfers to countries without an adequate level of data protection, we rely on recognised safeguards. These include adequacy decisions, the EU-US, Swiss-US and UK-US data frameworks for certified recipients, and standard contractual clauses. Contact privacy@o3-performance.com for more information on these safeguards.

16. How long we keep data

  1. Order, payment and accounting records: 10 years, as required by Swiss law.
  2. Customer account data: until you delete your account. Order records are then kept as described in item 1.
  3. Customer service, returns and warranty records: until the matter is closed, then as long as needed to deal with possible legal claims, and no longer than the applicable limitation period.
  4. Marketing data: until you unsubscribe, followed by a suppression record.
  5. Giveaway entries: until 3 months after the giveaway closes. Winner records are kept as long as needed to deliver the prize and meet legal duties.
  6. Analytics data: no longer than 14 months.

After these periods, data is deleted or anonymised.

17. Security

We use appropriate technical and organisational measures to protect personal data. We also rely on the security controls of Shopify and our other providers. No method of transmission or storage is completely secure.

18. Your rights

Depending on the law that applies to you, you have the right to:

  • access your personal data
  • have it corrected
  • have it deleted
  • restrict or object to its processing
  • receive it in a portable format
  • withdraw consent at any time, without affecting processing carried out before the withdrawal

You can object to direct marketing at any time.

To exercise your rights, contact privacy@o3-performance.com. We may ask for information to verify your identity. We respond within the time limits set by law, normally within 30 days. Some data must be kept for legal reasons even after a deletion request.

19. Automated processing

We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.

Shopify and payment providers use automated tools to assess fraud risk. A flagged order is reviewed by a person before it is cancelled. You can contact us about any such decision.

20. Children

Our website is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact privacy@o3-performance.com.

21. Complaints

Please contact us first at privacy@o3-performance.com. You may also contact:

  • in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC)
  • in the EEA, the data protection authority in the country where you live or work
  • in the UK, the Information Commissioner's Office (ICO)

22. Changes to this policy

We update this policy when our processing or the law changes. The current version is always published on our website.

Last updated: 26 September 2026