Privacy Policy

1. Who we are

This Privacy Policy explains how personal data is processed when you visit omega3zoneb2b.sale/ (the Website), submit an enquiry, or contact us through a link on the Website.
The controller responsible for this processing is: OMEGA3ZONE GLOBAL LTD
Registered office: 9 Ellados Avenue, Stelmio Building, Office 301, 8020 Paphos, Cyprus
Company registration number: HE 440 393, Department of Registrar of Companies and Intellectual Property, Republic of Cyprus
VAT number: CY10440393P
Email: info@omega3zoneglobal.com
Telephone and WhatsApp Business: +357 96 640 117

In this Policy, we, us and our refer to the controller identified above.
Having assessed our processing activities against Article 37 GDPR, we have determined that our core activities do not involve regular and systematic monitoring of data subjects on a large scale, nor large-scale processing of special categories of data, and we have therefore not appointed a Data Protection Officer. We keep this assessment under periodic review and will appoint a DPO if our processing activities change materially. Privacy questions and rights requests may be sent to info@omega3zoneglobal.com.

2. Scope

The Website is intended for business customers, distributors, partners and their representatives. Business contact details that identify a natural person, such as a named work email address or a representative’s telephone number, are personal data.
This Policy covers processing through the Website, its enquiry forms, Google Analytics 4, Google Tag Manager and links to WhatsApp. It does not govern processing under a later distribution, supply or other commercial agreement where a separate privacy notice applies.

3. Personal data we collect

Depending on how you use the Website, we may process:
Contact and professional data: name, business email address, business telephone number, job title, company name, country or territory and other details you provide.
Enquiry and correspondence data: the content of your request, preferred contact method, attachments or other information you send, and our response history.
Technical and usage data: IP address, device and browser information, operating system, language, referring page, pages viewed, interaction events, approximate location derived from IP address, timestamps and cookie or similar identifiers.
Consent data: your cookie choices and the date, time and technical record of those choices.
WhatsApp data: telephone number, profile information made available through WhatsApp, message content, attachments, timestamps and related metadata when you choose to contact us through WhatsApp.
Compliance data: records reasonably required to establish, exercise or defend legal claims, respond to authorities, prevent misuse or demonstrate compliance.
Please do not send special-category data, government identifiers, payment-card data or information about other people unless we specifically request it and you have a lawful reason to provide it.

4. Purposes and legal bases

Where we rely on legitimate interests, we carry out and keep on file a Legitimate Interest Assessment (LIA) balancing those interests against your rights and reasonable expectations. You may request information about that assessment using the contact details in section 1.
We do not use Website enquiry data for email, telephone or messaging marketing unless the person has separately requested or validly consented to such communication. Every marketing message, if introduced in the future, will provide an effective opt-out.

5. Enquiry forms

Fields marked as required are needed to assess and respond to your request. If you do not provide them, we may be unable to respond. Optional fields may be left blank.
The form may request a name, business contact details, company name, country and enquiry text. No hidden marketing fields, CRM, automated lead scoring or automated decision system is used. Enquiries are reviewed by authorised personnel and may be manually recorded in an access-controlled internal spreadsheet for follow-up.

6. Cookies, Google Analytics 4 and Google Tag Manager

For full details of the cookies and similar technologies we use, see our Cookie Policy.
We use a consent-management mechanism to obtain and record choices for non-essential technologies. Google Analytics 4 must not store analytics cookies or process analytics data until you select Accept for analytics. You must be able to refuse analytics as easily as accepting it and to withdraw consent at any time through the Cookie Settings link.
Google Analytics 4 helps us understand aggregated Website use. Google Tag Manager is a tag-management system used to deploy and control Website tags. Google Tag Manager is not permission to activate a tag: every tag must follow the choice and legal basis applicable to that tag.
Google Analytics 4 is configured with an event-level retention period of 2 months. Google Signals, User-ID, collection of user-provided data, Google Ads links, remarketing and advertising personalisation are disabled. We use basic consent mode: Google Analytics and Google Tag Manager are blocked until the visitor grants analytics consent.

7. WhatsApp

The Website may contain a link that opens WhatsApp. Clicking the link takes you to a service provided by a company in the Meta group. WhatsApp processes data under its own terms and privacy notice. Depending on your location, account and the service configuration, data may be processed outside the European Economic Area (EEA).
Please note that WhatsApp/Meta may collect and retain metadata associated with your contact with us, such as your phone number, message timestamps and device information, independently of the content of any message and under WhatsApp’s own privacy notice, over which we have no control.
Using WhatsApp is optional. You may contact us by email instead at info@omega3zoneglobal.com. Do not send sensitive or confidential information through WhatsApp unless we have agreed an appropriate channel with you.
Our WhatsApp Business number is +357 96 640 117 and is operated through the standard WhatsApp Business application. We do not use the WhatsApp Cloud API, a chatbot or a CRM integration. Messages remain in the business account chat and may be manually recorded in our internal business records where needed to respond or manage a prospective relationship.

8. Recipients and processors

We may disclose personal data only as needed to:
●authorised personnel and contractors who need it for their work and are subject to confidentiality obligations;
●Tilda and its subprocessors, including infrastructure, storage, backup and security providers, for Website hosting and form processing;
●Name.com for domain registration and DNS-related services;
●Google entities and their subprocessors for Google Analytics 4 and Google Tag Manager, subject to your consent and the applicable configuration;
●Meta/WhatsApp entities and any WhatsApp business-solution provider when you choose that channel;
●professional advisers, auditors, insurers and prospective parties to a corporate transaction where appropriate safeguards apply;
●courts, regulators, law-enforcement bodies and other authorities where disclosure is required or legally justified.
The Website is built and hosted through Tilda. Tilda publicly identifies infrastructure and security subprocessors including Hetzner Online GmbH, G-Core Labs S.A. and Google Cloud EMEA Limited. Access to Website administration and enquiries is limited to our authorised personnel. We do not currently use a CRM.
We do not sell personal data.

9. International transfers

Cyprus is in the European Union. Some providers or their subprocessors may process data outside the EEA. Where personal data is transferred to a country not covered by an adequacy decision, we will use an appropriate transfer mechanism, such as the European Commission’s Standard Contractual Clauses, and supplementary safeguards where required. Where a recipient participates in the EU-US Data Privacy Framework, a transfer may rely on the European Commission’s adequacy decision to the extent that the recipient and relevant service are covered.
Tilda operates distributed infrastructure and may engage providers in more than one country. Google and Meta/WhatsApp may also process data outside the EEA. We rely, as applicable, on an adequacy decision, participation in the EU-US Data Privacy Framework, the European Commission’s Standard Contractual Clauses and supplementary safeguards. Information about the applicable safeguard may be requested using the contact details in section 1.

10. Retention

We retain personal data only for as long as needed for the purpose collected, including legal, accounting, security and dispute-resolution requirements, in line with our internal retention schedule summarised below. This schedule is reviewed periodically to ensure it continues to reflect our actual systems and practices.

When a period ends, data is deleted or irreversibly anonymised unless a lawful hold or other legal requirement applies.

11. Your rights

Subject to the GDPR and applicable conditions, you may:
●request access to your personal data and a copy of it;
●request correction of inaccurate or incomplete data;
●request erasure;
●request restriction of processing;
●object to processing based on legitimate interests, including profiling based on those interests;
●receive data you provided in a structured, commonly used and machine-readable format, and request transmission to another controller, where portability applies;
●withdraw consent at any time, without affecting processing carried out before withdrawal;
●lodge a complaint with a competent supervisory authority.

You may withdraw analytics consent through Cookie Settings. For other requests, contact info@omega3zoneglobal.com. We may need information to verify your identity. We normally respond within one month, subject to lawful extensions.
You may complain to the supervisory authority in the EEA country of your habitual residence, place of work or the alleged infringement. The supervisory authority in Cyprus is the Office of the Commissioner for Personal Data Protection, 15 Kypranoros Street, 1061 Nicosia, Cyprus; postal address: P.O. Box 23378, 1682 Nicosia, Cyprus; website: https://www.dataprotection.gov.cy.
If you are located outside the EEA, your ability to lodge a complaint with an EU supervisory authority may be limited, and you may also have rights under the data protection law applicable in your own jurisdiction.

12. Automated decisions

We do not use automated lead scoring, automated rejection or profiling, and we do not make decisions based solely on automated processing through the Website that produce legal or similarly significant effects on you.

13. Security and incident response

We use HTTPS encryption, access restrictions, individual account credentials, backups and security measures provided by Tilda and its infrastructure providers. Administrative access is limited to authorised personnel. No online transmission or storage method is completely secure.
If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will assess the incident and, where required by applicable law, notify the competent supervisory authority within the statutory timeframe and inform affected individuals without undue delay.

14. Third-party links

The Website may link to third-party websites or services. Their operators are responsible for their own processing. Review their privacy information before providing personal data.

15. Children

The Website is directed at business representatives acting in a professional capacity and is not intended for individuals under the age of 18. We do not knowingly collect personal data from children, and any such data identified will be deleted.

16. Changes to this Policy

We may update this Policy when our processing or legal requirements change. We will publish the revised version with a new “Last updated” date and provide additional notice where required.

17. Contact

Questions and rights requests may be sent to:
OMEGA3ZONE GLOBAL LTD
9 Ellados Avenue, Stelmio Building, Office 301, 8020 Paphos, Cyprus
Email: info@omega3zoneglobal.com
Telephone and WhatsApp Business: +357 96 640117

Omega 3 Global LTD