Your Privacy Matters to Us

Additional Data Collection & Processing Scenarios

Third-Party Integrations

If you link, connect, or log in to OTAS consumer services through a third-party platform, we may receive personal information controlled by that third party, in accordance with their privacy policy and your account settings.

Email Integration & Shopping Services

We may receive information from emails associated with your shopping account, including messages you forward to our app. These messages are included in your personal order history. We do not use this information for advertising or marketing purposes.

As a Partner

We collect business and financial information including your name, company name, employee or team member names, email address, phone number, bank account details, business account credentials, financial assets, business type, and identifiers such as your national ID (for individuals), or government-issued documentation (e.g., residency permit, commercial registration, employer ID, tax ID).

We may also collect device and browser data, trusted connection information, and your IP address. This includes how you navigate our websites and platform. Some data is collected using cookies or other advanced technologies. For details, refer to our Cookie Policy.

As a Consumer

We collect communication and shipping information such as your name, physical address, payment details (including payment card numbers and validity), email address, profile picture, and any other information you provide during your registration or interaction with OTAS consumer services.

This includes interactions with OTAS merchants, stores you visit, items you’ve purchased, reviews you’ve posted, purchase requests, and participation in marketing campaigns. We may associate this information with your devices, account, browser, IP address, and behavioral data across sessions. Some of this data is gathered using cookies or similar tracking technologies.

You can manage your preferences and data collection through our Cookie Policy, browser/device settings, support inquiries, surveys, or research participation.

If you connect to OTAS services through a third-party identity provider, we may receive profile information from that service, in accordance with their policies and your preferences.

As a Visitor

We collect basic business and contact details such as name, company name, email, phone number, and banking information, in addition to data about how you browse our websites and platforms.

Some of this data is collected using cookies and advanced browser/device technologies. Please refer to our Cookie Policy for full details on data usage, your preferences, and how you can control or restrict data collection through browser/device privacy settings.

Data Processing and Usage

Your personal data will be processed lawfully, fairly, and transparently. We ensure that your data is accurate, relevant, up to date, and limited to the specific purposes for which it was collected.

We only process your data when necessary to:

• Fulfill a contract (e.g., to complete a purchase or provide a paid service),
• Serve our legitimate interests (e.g., authentication, platform improvement, support, research, or service optimiuiation),
• Or when legally required.

We may also process your personal data for additional purposes, but only with your explicit consent.

We collect your data directly from you unless:

1. You have given us explicit consent under applicable law;
2. The data is publicly available or obtained from public sources;
3. It is necessary to prevent harm or protect your vital interests;
4. It is needed to protect public health, safety, or the health of specific individuals;
5. The data is stored or recorded in a way that makes the subject unidentifiable (anonymized or pseudonymized data).
6. Legitimate Interest and Project-Based Data Use

We may collect personal data if it is necessary to operate or support a business initiative, provided this does not override your rights or interests and the data is not processed excessively or beyond what is necessary.

For the purposes of this Policy, "legitimate interests" include:

1. Preventing fraudulent activity and abuse of the platform
2. Responding to inquiries or providing customer support
3. Assisting with order tracking and fulfillment
4. Delivering our products and services
5. Generating reports and conducting analytics
6. Testing new features or services
7. Supporting marketing, advertising, and other communications

We rely on legitimate interest only after implementing robust privacy choices that respect your rights. These include: transparency about our privacy practices, control over your personal information, minimizing data collection and retention, and privacy-preserving technologies.

In addition, we request your explicit or implied consent for processing personal data in the following cases:

1. When no other legal basis for processing applies
2. When your information may be shared with third parties
3. Where required by law (e.g., for processing multi-party commercial or financial/shareholder data)

You may withdraw your consent at any time by updating your communication preferences, unsubscribing from our communications, or contacting us at: info@otas.net

Your Personal Data as Belonging to Merchants

If you register for services as a customer or consumer, your personal data will be processed by the merchants you interact with and their authorized partners. In this context, OTAS acts solely as a processor on behalf of the merchant, and the merchant’s Privacy Policy and Terms of Service apply—not OTAS's.

If you have questions about how your data is managed, please refer to the merchant’s individual privacy policy.

Some merchants may use your data for targeted advertising on third-party platforms. You can opt out of such advertising through the merchant’s website. OTAS also offers innovative tools to help you control how your visitor data is used for commercial or advertising purposes.

Partner Access to Merchant Data

As an OTAS partner, you provide services to merchants. When a merchant signs up for your app or service (e.g., installs your software or plugin), you may receive business information under the merchant’s instruction. In this role, you are solely responsible for protecting and lawfully processing the personal data shared with you.

You are required to publish a clear and transparent Privacy Policy for merchants explaining your data practices, including what you collect, how it is used, and whether it's shared.

If you are building an application for the OTAS App Marketplace, your app must include a privacy policy. To support your compliance, OTAS provides a Privacy Policy template that can help you disclose the types of data collected, how it is used, and under what conditions it may be shared.

Sharing of Information and Data

We may share your personal information with companies that assist us in delivering our services or with merchants who may be interested in your activity or offers. In addition, we may disclose your information under the following circumstances:

1. With third parties that support the maintenance and continuation of our services, including external service providers (such as fraud prevention, sanctions screening, and verification services), affiliated service processors, and entities involved in payment or fund transfer processes.
2. With third parties for commercial purposes, such as promotional campaigns, contests, special offers, or external business events.
3. In connection with corporate transactions, including but not limited to mergers, acquisitions, stock or asset sales, financings, public offerings, reorganizations, or complete or partial liquidation of our business.
4. Where legally required, such as when we believe disclosure is reasonably necessary to comply with a law, regulation, legal obligation, government request, contract, or medical agreement—or to protect the safety, integrity, or security of our services, our platform, our users, our partners, or our business.
5. With your explicit consent; we may also share aggregated, de-identified, or anonymized data with third parties for research, analysis, or commercial use.

Third-Party Services and Providers

Our platform may contain links to third-party services, which are not owned or controlled by OTAS. If you interact with such services (including visitors accessing third-party tools), we recommend that you review their respective privacy policies, as OTAS is not responsible for their data practices.

Your Rights Over Your Personal Data

As the owner of your personal data, you are entitled to the following rights under applicable privacy laws and regulations:

• Right to Know: Understand how your personal data is collected and used.
• Right to Access: Request access to the personal data we hold about you.
• Right to Receive: Request a copy of your personal data in a readable and understandable format.
• Right to Rectify: Request corrections, updates, or completion of inaccurate or incomplete data by contacting us at: info@otas.net
• Right to Erasure: Request deletion of personal data that is no longer needed for its original purpose.
• Right to Withdraw Consent: Withdraw your consent to the processing of your personal information at any time.

To exercise these rights, you may submit a request through our online portal or by emailing info@otas.net.

• If you are using the our service, please visit Data Protection Officer for instructions on how to request deletion of your information.
• If you made a purchase from a merchant’s store on the OTAS platform, please contact the merchant directly. You may also reach out to us, and we will assist in coordinating your request with the appropriate merchant.

In order to process your request, we may require verification of your identity, which could include additional details such as your email address or a national identification number.

We believe you should have access and control over your personal information—regardless of your location. When using OTAS, you may have the right to request access, correction, portability, deletion, suspension, or to object to specific uses of your personal data.

Exercising your rights will never result in a lower level of service or incur any additional fees. However, please note that some rights may apply only under specific legal circumstances and are not absolute under all applicable privacy laws and regulations.

Data and Information Security

We are committed to protecting the privacy and confidentiality of your personal data and will not disclose it without your explicit consent, except in cases where disclosure is required by applicable laws and regulations. We also employ independent auditors who review our data management and the systems used to process financial information.

However, it is important to acknowledge that no method of data transmission over the internet or electronic storage can be guaranteed to be 100% secure. As such, while we take robust steps to protect your personal information, we cannot guarantee absolute security.

For more details on our security practices, please visit the Security & Protection section on the OTAS website, including our Cookie Policy.

Cross-Border Data Transfers

In accordance with relevant laws and regulations, we may share or disclose your personal data with parties outside the jurisdiction in which it was originally collected. Such transfers will only occur where appropriate safeguards are in place to ensure that your data privacy rights remain protected under applicable data protection laws and regulations.

These safeguards ensure that:

• Your ability to exercise your privacy rights is not affected;
• The data controller remains compliant with obligations to notify you in the event of a data breach;
• Administrative and technical measures are taken to ensure the safety and confidentiality of your personal information.

Data Retention

We retain and use your personal data only for as long as is necessary to fulfill our core legal obligations. Once the data has fulfilled the purpose for which it was collected, it will be securely destroyed.

However, we may retain anonymized or de-identified data for longer periods as permitted under applicable regulations.

Personal data may only be retained beyond its original purpose under the following circumstances:

• If we are directed to retain the data for a specific purpose, in which case it will be deleted at the end of that retention period or when the purpose expires—whichever occurs first.
• If the personal data is directly related to an active legal case, it must be retained until the resolution of that case, after which it will be securely destroyed.

Disclosure of Information

Your personal data may be disclosed to authorized government entities when required by law. However, it will not be shared or made available for use by any third party without your prior consent.

Personal data will only be disclosed under the following circumstances:

1. If you have provided explicit consent to the disclosure, in accordance with applicable laws and regulations.
2. If your personal data has been collected from publicly available sources.
3. If a government authority requires disclosure for purposes of public security, national interest, law enforcement, or in accordance with regulatory mandates.
4. If disclosure is necessary to protect public health or safety, or the life or well-being of an individual or specific individuals.
5. If disclosure is restricted to anonymized or de-identified processing, such that the data subject or any other individual cannot be directly identified.

Contact Us

If you have any questions about how your personal data is collected, processed, stored, or disclosed, please contact the OTAS support team :

Email: info@otas.net