O’Milo celebrates the quiet strength that shapes a woman through every chapter of her journey. Crafted from ethically sourced precious metals, each piece is made to stay—a reminder that she is, always, worthy of beauty that lasts.
Privacy policy
Your privacy is important to us. O'Milo ("we", "our", "us") operates this store and website. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using our services or otherwise communicate with us.
We keep it simple, clear, and legally compliant with the General Data Protection Regulation (GDPR). By using our website or accessing any of our Services, you acknowledge that you have read and understood this Privacy Policy.
1. Who We Are (Data Controller)
For the purpose of applicable data protection laws, the data controller responsible for your personal information is:
O'Milo
Apartefacts GmbH
Genslerstr. 13
13055 Berlin
Germany
For any privacy-related question or to exercise your rights, contact us at hello@o-milo.com.
2. Personal Information We Collect
We collect your personal data to process your orders, improve your shopping experience, and meet our legal and tax obligations. This includes:
- Contact & Identity Details: Full name, billing address, shipping address, phone number, and email address.
- Financial & Payment Information: Credit card numbers, debit card numbers, financial account details, payment confirmations, and transaction forms. All payment transactions are securely handled directly via encrypted payment providers.
- Transaction & Order History: Details about items you view, put in your cart, add to your wishlist, purchase, return, exchange, or cancel.
- Technical & Device Information: Your IP address, browser type, network connection, device details, and unique identifiers.
- Usage Information: Information regarding how and when you navigate and interact with our store, collected automatically through cookies and similar tracking technologies.
3. How and Why We Use Your Personal Information
Depending on how you interact with us, we process your personal data under the legal bases provided by the GDPR (Performance of a contract, Legal obligation, or Legitimate interest):
- Providing and Fulfilling Services: To perform our contract with you, process payments, fulfill and ship orders, manage exchanges or returns, and create a customized shopping experience.
- Customer Communication: To provide customer support, respond to inquiries, send order confirmations, and maintain our business relationship.
- Marketing and Optimization (Consent-Based): To send marketing or promotional communications by email (only if you have explicitly opted in/subscribed). You can unsubscribe at any time using the link at the bottom of our emails.
- Security and Fraud Prevention: To authenticate your account, ensure secure payment pathways, and protect our services against malicious, unsafe, or fraudulent activity.
- Legal and Regulatory Reasons: To comply with applicable tax, corporate, accounting, and consumer protection laws (e.g., commercial and tax preservation obligations in Germany).
4. How We Disclose and Share Personal Information
We do not sell your personal data. We only share your data with trusted third parties necessary to perform our services:
- Shopify: Our website and store services are hosted by Shopify. Shopify processes personal information regarding your access to enable technology and improve store functionality.
- Payment Gateways: For secure payment processing (e.g., PayPal, Klarna, Shopify Payments).
- Fulfillment & Shipping Partners: To physically deliver your packages and process returns (e.g., DHL Premium Service, Transglobal Express, and respective national destination carriers like USPS or Royal Mail).
- Marketing & Analytics Vendors: Providers used to evaluate website traffic and manage targeted promotions (e.g., Google Analytics, Facebook Pixel, TikTok, Pinterest).
5. International Data Transfers
Our store infrastructure is powered by Shopify. Data you submit may be transmitted to, stored, and processed by Shopify or our analytics service providers outside the European Economic Area (EEA), including the United States.
Whenever we transfer your personal information out of the EEA, we rely on recognized legal transfer mechanisms approved by the European Commission, specifically Standard Contractual Clauses (SCCs), to guarantee that your data remains securely protected to EU privacy standards.
6. Cookies and Tracking Technologies
We use cookies to power, optimize, and protect our store:
- Essential Cookies: Strictly necessary to allow you to log in, add items to your cart, and check out securely.
- Analytics & Performance Cookies: Help us understand web traffic patterns to improve our collection offerings.
- Marketing Cookies: Used to serve relevant product ads based on your previous browsing choices.
You can adjust or disable cookies at any time via your individual browser settings, though doing so may limit access to certain features on our storefront.
7. Data Security and Retention Timeframes
- Security: We utilize industry-standard encryption, secure socket layers (SSL), and safe server frameworks to protect your data. Please understand that no data transmission over the internet can be guaranteed as 100% impenetrable. We strongly advise keeping your personal shop account login details private.
- Retention: How long we keep your information depends on legal requirements. Order and financial information related to client purchases is retained for up to 10 years to fulfill strict statutory German tax and commercial laws. Marketing parameters are dropped immediately once you choose to unsubscribe.
8. Your Legal Rights (Under GDPR)
Since you reside in the EEA or United Kingdom, you have the following absolute rights regarding the personal information we maintain:
- Right to Access / Know: Request a clear copy of the personal data we hold about you.
- Right to Correct: Request corrections to inaccurate or incomplete personal entries.
- Right to Delete: Request the deletion of your personal data (except where legal preservation rules force us to retain it).
- Right to Restrict or Object: Ask us to halt or restrict processing for specific tasks or marketing.
- Right to Data Portability: Receive your personal details in a standardized, machine-readable format.
- Right to Withdraw Consent: Revoke processing permissions at any time for consent-backed applications (like newsletters).
To exercise any of these rights, simply email us directly at hello@o-milo.com. We will verify your identity before processing the request in accordance with legal timelines.
9. Right to Lodge a Complaint
If you believe that our processing of your personal information violates European data protection regulations, you have the right to file a formal complaint with a supervisory authority. You may do this via your local authority or directly via our regional corporate regulator:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
(Berlin Commissioner for Data Protection and Freedom of Information)
Alt-Moabit 59-61, 10555 Berlin, Germany
Homepage: https://www.datenschutz-berlin.de
10. Policy Changes
We reserve the right to modify or refresh this Privacy Policy to reflect changing regulatory rules or operational workflows. Any updates will be updated right here on our page with a corrected "Last updated" timeline stamp.
If you have any remaining questions about our personal data processing setups, please contact us at: hello@o-milo.com.
Last updated: June 25, 2026