Effective date: March 15th, 2025

OMI SAS (hereinafter "OMI"), whose head office is located at 45 rue de la Chaussée d'Antin 75009 Paris France, is committed to respecting the privacy of any person providing them with personal data.

As part of the operation of the OMI Application distributed via the Shopify platform (hereinafter, the "Application") and this website (together, our “Services”), OMI acts as data controller. The use of the terms "we" or "our" hereinafter refers to OMI.

This privacy and cookies policy (the "Privacy Policy") describes how we collect and use personal data relating to users of our Services (together "you", "your") in accordance with the EU Regulation 2016/679 (General Data Protection Regulation) (“EU GDPR”); the EU GDPR as it forms part of the law of England and Wales by virtue of section 3 of the European Union (Withdrawal) Act 2018 (the "UK GDPR") (together, the “GDPR”), the UK Data Protection Act 2018 and the law known as "Informatique et Libertés" of January 6, 1978 as amended (together the "Applicable Legislation").

This Privacy Policy also describes the legal bases on which we process personal data, who we share it with and how it is processed.

It is important that you read this Privacy Policy, as well as any other notices of information we may provide on specific occasions when we collect or process your personal data, so that you know how and why we use this data.

How is your personal data collected by OMI?

We collect a variety of information from or about you from various sources, as described below.

• Registration information. When you sign up to create an account with us, you provide us with information such as your name, email address and place of work. You may also choose to provide us with your profile photo, which we will store on your account.  

• Demo requests. When you request to schedule a demo, you provide us with information such as your name, email address, phone number, country and details about your work such as the company name and industry type. 

• Questionnaires. When you answer our questionnaires and surveys, we will collect personal data from you relating to your experience with our Services.

Information collected from cookies and similar technologies. We and our third party advertising partners, such as Google Analytics, collect personal data about you via "cookies" or similar tracers within the meaning of the Applicable Legislation in the Application (to be precise, via HTTP request headers) and our website. Cookies are small text files containing a string of alphanumeric characters. We may use both session cookies and persistent cookies. A session cookie disappears after you close your browser. A persistent cookie remains after you close your browser and may be used by your browser on subsequent visits to our website.

What type of cookies are used?

Below is an overview of the types of cookies we use:

• Strictly necessary cookies. These cookies are strictly necessary for our Services to function and cannot be switched off in our systems. They are used to protect our Services against unauthorized access, combat fraud and other activity that violates our policies or otherwise impairs our ability to provide our services. We use third party cookies such as Pinterest to track unauthenticated user activities for fraud prevention. 

• Analytical or performance cookies. We also use third party cookies such as Google Analytics and Facebook Pixel for analytics purposes to better understand how you use our website, to measure the effectiveness of our customer communications, to diagnose and fix technology problems, and otherwise enhance our Services. These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our Services. They help us to know which pages are the most and least popular and see how visitors interact with our Services.

• Functionality cookies. These cookies enable us to provide enhanced functionality and personalization. If you do not allow these cookies then some or all of these services may not function properly. These cookies allow us to operate certain functions of our Services according to your preferences. For example, when you continue to use or return to the website, we will remember your privacy settings and preferred language. Deletion of these types of cookies will result in limited functionality of the website and a less personalized experience. We use third party cookies such as HubSpot, Intercom and Stripe for these purposes. 

• Advertising cookies. These cookies may be set through our website by third parties such as Google. They may be used by Google and other third parties to build a profile of your interests and show you relevant adverts on other sites. They do not store directly identifiable personal data but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

If you choose not to enable these cookies, we may not be able to provide you with the best user experience.

What lawful basis do we rely on to process your personal data?

By personal data we mean any information about a person from which that person can be identified directly or indirectly.

The legal basis for which we collect and use the information described above depends on what the information is and why we collected it. The bases upon which we rely include:

• Contract. If you decide to use our Application, we will process your personal data to perform our contract with you. 

• Legitimate interests. This means we have a legitimate interest that does not outweigh your privacy rights. When we collect and process information based on our legitimate interests, we consider how we can accomplish what we need to in a way that is the least obtrusive on your privacy. For example, it is in our legitimate interest to provide and improve services requested by the user; to enable us to fight against fraud; and to respond to your inquiries about our Services. We also have a legitimate interest to use your personal data to improve algorithms used in our services such as the Application.  

• Legal obligations. We may need to use your personal data to comply with our legal obligations or to protect the rights of other users, for example to comply with regulatory reporting, tax and accounting obligations.

• Consent. We may also collect other data using non-essential cookies as set out above via Google Analytics. Where we do so, we will always rely on your consent. You have the right to withdraw your consent at any time by setting your preferences using the toggles by clicking on the green tick in the bottom left corner of our page. 

Recipients of your personal data

We may share your personal data with third parties when required by law, in particular to judicial authorities, public administration and any other third party if we are obliged to disclose or share your personal data in order to comply with any legal obligation, to protect the rights, property and/or safety of our company or our personnel.

Your data may also be processed by our hosting service providers, payment processors, analytics partners and other service providers such as those we engage for customer management purposes. We carefully selected these service providers and have taken measures to ensure adequate protection of your personal data. All of our service providers are required by written contract to comply with Applicable Legislation including to process the personal data provided to them solely for the purpose of providing a specific service to us and to maintain appropriate security measures to protect your personal data.

Where is your personal data located? Is the data subject to international transfer?

Your personal data is located on our servers in Ireland and France or those of our hosting providers located within the European Union. We will notify you if this changes and implement appropriate safeguards to enable such transfers.

How long do we keep your personal data?

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting or tax requirements..

Generally, for Application data, we delete your data within 13 months of collection and within 48 hours of uninstalling the Application, where applicable.

What do we do to ensure the security of your personal data?

OMI is committed to protecting personal data against loss, misuse, disclosure, alteration, unavailability, unauthorized access and destruction, and takes all reasonable precautions to protect the confidentiality of personal data, including by taking organizational and technical measures appropriate.

We have adopted physical, electronic and administrative security measures including the use of extensive firewalls and passwords to secure access to personal data. In addition, we limit access to personal data to employees who need to know this information in the course of their duties within OMI.

Your rights

Under Applicable Legislation, you have various rights as a data subject. These rights are not absolute and each of these rights is subject to certain conditions in accordance with Applicable Legislation.

• The right of access -- you have the right to access your personal data, by requesting a copy of the personal data concerning you. We may refuse to provide information where it may reveal personal data about another person or adversely affect the rights of another person and we may ask you for further information if it is necessary to be able to respond to your request.

• The right to rectification -- you can ask us to take steps to correct your personal data if it is inaccurate or incomplete.

• The right to erasure -- also known as the 'right to be forgotten', this right allows you, in simple terms, to request the erasure or deletion of your personal data where, for example, there is no compelling reason for us to continue using them or their use is illegal. However, this is not a general right to erasure and there are some exceptions, for example where we need to use the information to defend a legal claim or to be able to comply with a legal obligation.

• The right to restrict processing -- you have the right to "block" or prevent further use of your personal data by us. Where processing is restricted, we may still retain your personal data, but we cannot use it further.

• The right to object -- you have the right to object to certain types of processing, for reasons relating to your particular situation, at any time, to the extent that such processing takes place for the purposes of the legitimate interests pursued by OMI. We will be allowed to continue processing personal data if we can demonstrate that the processing is justified by compelling legitimate reasons which override your interests, rights and freedoms or if we need it for the establishment, the exercise or defense of legal actions. 

• The right to provide us with instructions on how we use your personal data after your death -- you have the right to provide us with instructions on how to manage (e.g. retention, erasure and disclosure) your data after your death. death. You can change or revoke your instructions at any time. To exercise these rights, please contact us at the address in paragraph I below, specifying the right you wish to exercise and attaching proof of identity to your request.

Users may exercise their rights regarding their personal data by sending a request by email to privacy@omi.so.

How to contact us?

We will occasionally update this Privacy Policy to reflect changes in our practices and services. When we post changes to this Privacy Policy, we will revise the "Effective Date" at the top of this Privacy Policy. If you have any questions regarding this privacy policy or the use of your personal data, or would like to exercise your data subject rights, please contact us by email at the following address:

OMI SAS 45 rue de la Chaussée d'Antin 75009 Paris or by email at privacy@omi.so

Before evaluating your request, we may ask you for additional information to identify you. If you do not provide the requested information and, as a result, we are unable to identify you, we may refuse to comply with your request.

If you are not satisfied with our response to your complaint or if you believe that the processing of your personal data does not comply with data protection laws, you can lodge a complaint with the competent supervisory authority regarding data protection. The Commission Informatique et Libertés (CNIL) is the data protection authority in France (www.cnil.fr).