Privacy Policy
Last Updated: Aug 1, 2025
This section provides additional information for people in the European Economic Area (EEA), United Kingdom (UK), or Switzerland (CH). The terms used in this section have the same meaning as in the General Data Protection Regulation, the UK Data Protection Act, and the Swiss Federal Act on Data Protection (collectively, “European Privacy Laws”). The term “personal information” as used in this notice has the same meaning as “personal data” in the European Privacy Laws.
Collection and Disclosure of Personal Data
The personal data we collect and how we share it is described above in our Privacy Policy.
We may disclose your personal information to the following third party controllers for business purposes:Google Pay, Microsoft Ads, DHL, Klarna, Apple Pay, Taboola, Google Ads, Shopify, PayPal - Pay with PayPal, Venmo, Pay Later, Shop Pay, Microsoft Clarity. To understand how these parties handle your data, please refer to their respectiveprivacy policies.
Cookie Notice
We use cookies to improve your experience on our site and to allow us and third parties to personalize the marketing content you see on other websites and social media. Website visitors from European Privacy Law regions can control cookie settings. Manage your region specific consent settings here.
Essential Cookies
We use these cookies for things like security, logins, site errors, and processing payments. We can't turn these necessary cookies off, but you can control them in your browser.
| Cookie Name | Provider | Duration |
|---|---|---|
| _shop_app_essential | Shopify | 1 Year |
| _shopify_essential | Shopify | 1 Year |
| _tracking_consent | Shopify | 1 Year |
| cart_currency | Shopify | 14 Days |
| keep_alive | Shopify | Session |
| localization | Shopify | 1 Year |
| polaris_consent_settings | TrueVault | 5 Months 27 Days |
| shopify_pay_redirect | Shopify | 1 Hour |
| us_privacy | TrueVault | 5 Months 27 Days |
Analytics Cookies
These cookies tell us how you use our sites and apps, and provide information to help us improve your experience.
| Cookie Name | Provider | Duration |
|---|---|---|
| _hjSession_585999 | Hotjar | 30 Mins |
| _hjSessionUser_585999 | Hotjar | 1 Year |
| _landing_page | Shopify | 14 Days |
| _orig_referrer | Shopify | 14 Days |
| _shopify_s | Shopify | 30 Mins |
| _shopify_y | Shopify | 1 Year |
Personalization Cookies
We do not use cookies to personalize content for you.Advertising Cookies
These cookies help us decide which products, services and offers may be relevant for you. We use this data to customize the marketing content you see on websites, apps and social media, and to measure your interactions with that content. We might use these cookies to advertise our products to you when you visit other websites.
| Cookie Name | Provider | Duration |
|---|---|---|
| __kla_id | Klaviyo | 1 Year 1 Month 4 Days |
| _gcl_au | Google Ads | 2 Months 28 Days |
| t_gid | Taboola | 1 Year |
| t_pt_gid | Taboola | 1 Year |
| taboola_session_id_1790798 | Taboola | Session |
| test_cookie | Google Ads | 15 Mins |
Lawful Bases and Legitimate Interests
We process personal data on the following lawful bases:
- Complying with legal obligations
- Fulfilling contracts
- Consent
- Legitimate interests
Where we process personal data on the basis of our legitimate interests, we pursue the following interests: Analyzing Data, Creating Customer Profiles, Delivering Targeted Ads, Fulfilling Customer Orders, Improving our Products & Services, Meeting Compliance & Legal Requirements, Operating Our Website or Mobile Apps, Preventing Fraud, Processing Payments, Providing Customer Support, Sending Promotional Communications, Storing and Managing Data, Tracking Purchases & Customer Data, and Conducting Surveys.
International Data Transfers
We may send the personal data of individuals in the EEA/UK/CH to third countries, including the United States, where it may be stored or processed, for example on our service providers’ cloud servers. When we transfer personal data, we endeavor to do so on the basis of Adequacy Decisions as adopted by the European Commission (EC), the UK Information Commissioner's Office (ICO), or the Swiss Federal Data Protection and Information Commissioner (FDPIC), the EU-US Data Privacy Framework, UK-US Data Bridge, and Swiss-U.S. Data Privacy Framework agreements, Standard Contractual Clauses (SCCs) issued by the EC or the FDPIC, International Data Transfer Agreements (IDTAs) approved by the ICO, and as otherwise allowed by law. Data protection authorities have determined that the SCCs and IDTAs provide sufficient safeguards to protect personal data transferred outside the EEA/UK/CH. To request copies of our international data transfer safeguards, please contact us at moc.teefohtro@ycavirpue. You may read more about international data transfer mechanisms at the following links:
- https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en
- https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/international-data-transfer-agreement-and-guidance/
- https://www.edoeb.admin.ch/edoeb/en/home/datenschutz/arbeit_wirtschaft/datenuebermittlung_ausland.html
Privacy Rights
Individuals in the EEA/UK/CH have the following rights regarding their personal data.Make a Privacy Request by clicking here. Once you submit a request, we will verify your identity and process your request in most cases within 30 days.
Right to access. You have the right to request a copy of the personal data we hold about you.
Right of portability. You have the right to ask us to transfer your data to another party.
Right to rectification. You have the right to request that we rectify any incorrect information we have about you.
Right of erasure. You have the right to request that we erase (delete) any personal information we hold about you.
Right to withdraw consent. You have the right to withdraw your consent at any time when we rely on your permission to process your personal data.
Right to object. You have the right to object to our use of data about you.
Right to restrict processing. In certain circumstances, you have the right to restrict our processing of your personal data to storage only, subject to some exceptions. This right applies when:
- You have contested the accuracy of your personal data and we are still verifying its accuracy.
- Your personal data has been unlawfully processed under the GDPR.
- You need for us to keep your data in order to establish, exercise, or defend a legal claim.
- You have previously objected to our processing of your personal data and the status of that review is still pending.
Right to lodge a complaint with a supervisory authority. You have a right to lodge a complaint with a supervisory authority. For more information, you can visit theInformation Commissioner’s Office website at https://ico.org.uk/, the Federal Data Protection and InformationCommissioner’s website at https://www.edoeb.admin.ch/, or see a list of EU Data Protection Authorities athttps://www.gdprregister.eu/gdpr/dpa-gdpr/.
Inquiries
Controller contact information
Orthofeet EEA/UK/CH
