Privacy Policy

OSM is the data controller for personal data collected through this website and through our support channels. Questions about this policy, or any request about your data, go to support@osmx1.com.

We are a small company and we do not sell data. We collect what is needed to sell you a product, deliver it, support it, and run the site — and we would rather hold less of it than more.

Order data

Name, delivery and billing address, email address, telephone number, order contents and order history.

Payment data

Entered on our payment provider's secure form and handled by that provider. We receive a payment confirmation and a transaction reference — never your card number.

Support data

The messages you send us, your order reference, and any photographs or diagnostics you choose to attach.

Newsletter data

Email address and the fact that you subscribed, with a timestamp, so we can evidence consent.

Preferences

The country we detected and the language and currency you chose, so prices and shipping are shown correctly. See the cookie policy.

Account data

If you create an account: your email address, a securely hashed password, and saved addresses.

Where we rely on legitimate interests, we have weighed them against your rights and use the least intrusive option that achieves the purpose. You can object to that processing at any time.

We share personal data only with processors who need it to do a job for us, under a contract that binds them to use it for nothing else.

• Payment provider — to take and refund payments.
• Carriers — name, address and telephone number, so a parcel can be delivered.
• Customs brokers — for shipments that cross a customs border.
• Email and newsletter provider — to send order and subscription email.
• Hosting and infrastructure providers — who store the data the site runs on.
• Our accountants and auditors, where required for statutory records.

We do not sell personal data, and we do not share it with advertising networks. If we are ever legally compelled to disclose data, we will tell you unless the law forbids it.

Some of the providers we use store or process data outside the European Economic Area: the database behind this site is hosted in Singapore, and the site itself runs on a global hosting network. Where personal data is transferred outside the EEA, the transfer is covered by an adequacy decision or by standard contractual clauses, and we can provide a copy of the safeguards on request.

When a retention period ends, data is deleted or irreversibly anonymised.

Under the GDPR and equivalent laws you may exercise all of the following. We answer within one month and we do not charge for it.

• Access — a copy of the personal data we hold about you.
• Rectification — correction of anything inaccurate.
• Erasure — deletion, where we have no overriding legal reason to keep it.
• Restriction — a pause on processing while a dispute is resolved.
• Portability — your data in a machine-readable format.
• Objection — to processing based on legitimate interests, including profiling.
• Withdrawal of consent — at any time, without affecting what was lawful before.

To exercise any of these, email support@osmx1.com from the address on your order. If you are unhappy with how we handle it, you may complain to the data protection authority in the country where you live or work.

• All traffic to this site is encrypted in transit.
• Access to order and support data is limited to the people who need it to serve you.
• Payment card data never reaches our systems.
• Passwords are stored only as secure hashes.

This site is not directed at children and we do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.

When this policy changes we update the date at the top. If a change materially affects how we use data you have already given us, we will tell subscribers and customers by email rather than relying on you to re-read the page.