Legal
Privacy policy
On this page
This policy is based on the Swiss Federal Act on Data Protection (FADP, in force since 1 September 2023).
1. Controller
ORO, Route des Cerisiers 25, 3963 Crans-Montana, Switzerland, to be completed.
2. Data we process
- Orders: name, addresses, email, phone, order contents, purchase history.
- Payment: processed by Shopify and the payment providers you choose at checkout (for example PayPal, cards, TWINT); ORO does not see card data.
- Subscription: plan, delivery dates, saved payment method (held by the provider).
- Newsletter: email, sign-up date, consent.
- Contact: content of your messages.
- Browsing: technical data (IP address, device) and cookies, according to your choices in the cookie banner.
- Reviews: displayed name, rating, text and photos you publish (Judge.me).
3. Purposes
Processing orders and subscriptions; customer service; sending the newsletter and offers (with your consent, unsubscribe anytime); review requests after purchase; security and fraud prevention; legal obligations (accounting records kept 10 years).
Camo edition waitlist: if you sign up with “Notify me”, we use your email address for one email only, when the camo edition launches (no newsletter). We delete the address 30 days after that email, unless you have also subscribed to our newsletter. You can unsubscribe at any time (link in the email). If you also order from us, your order data is kept as described in section 6.
4. Recipients and processors
Shopify (store hosting, payments, emails via Shopify Messaging), Shopify Subscriptions (subscriptions), Swiss Post (delivery), Judge.me (reviews). Some are located outside Switzerland (EU, USA): transfers rely on countries with adequate protection or on standard contractual clauses.
5. Cookies
Cookies needed for the store to work (cart, checkout) are always active; analytics and marketing cookies only with your consent, which you can change anytime via the cookie banner.
6. Retention
For the duration of the customer relationship, then as required by law (10 years for accounting records). Newsletter: until you unsubscribe.
7. Your rights
Access, rectification, deletion, objection, data portability: write to to be completed. You may contact the Federal Data Protection and Information Commissioner (FDPIC), Bern.
8. Changes
Version of 1 October 2026. The version published on the website applies.