Privacy Policy

Last Updated: August 2024

At Rōe & Co. (hereinafter referred to as “we,” “our,” or “us”), we are committed to protecting your personal data and your privacy. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Swiss privacy laws.

1. Who We Are

Rōe & Co. is a Geneva-based company specializing in premium insoles for heels, designed to provide unparalleled comfort and style. We aim to redefine comfort in women’s footwear. Our website address is https://roeandcobrand.com. We are the data controller responsible for processing your personal data.

1. What Data We Collect

We may collect and process the following types of personal data:

• Contact Information: Name, email address, phone number, and postal address.
• Account Information: Username and password for any accounts you create on our website.
• Transaction Data: Payment information, order details, and transaction history.
• Technical Data: IP address, browser type, operating system, and device information.
• Usage Data: Information about how you use our website, including pages viewed and links clicked.
• Marketing Data: Preferences for receiving marketing communications and your communication preferences.

1. How We Collect Your Data

We collect data in the following ways:

• Direct Interactions: When you fill out forms, register for an account, make a purchase, or contact us via email or phone.
• Automated Technologies: As you interact with our website, we automatically collect technical data using cookies, server logs, and similar technologies.
• Third Parties: We may receive data about you from third-party service providers, such as payment processors and analytics providers.

1. How We Use Your Data

We use your personal data for the following purposes:

• To Provide Services: To process and deliver your orders, manage your account, and provide customer support.
• To Improve Our Website: To analyze how users interact with our website and improve its functionality.
• To Communicate with You: To send you updates, marketing communications (if you have opted in), and respond to your inquiries.
• To Comply with Legal Obligations: To comply with laws, regulations, and requests from law enforcement or other government agencies.
• For Security: To protect our website, business, and users from fraud and other malicious activities.

1. Legal Basis for Processing Your Data

We process your personal data based on the following legal grounds:

• Consent: Where you have given explicit consent to the processing of your personal data for specific purposes.
• Contractual Necessity: Where processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract.
• Legal Obligation: Where we need to comply with a legal or regulatory obligation.
• Legitimate Interests: Where processing is necessary for our legitimate interests, provided that your rights and interests do not override those interests.

1. Sharing Your Data

We may share your personal data with:

• Service Providers: Third parties that provide services on our behalf, such as payment processing, website hosting, and marketing services.
• Legal Authorities: Government authorities or other third parties if required by law or to protect our legal rights.
• Business Transfers: In the event of a merger, sale, or acquisition, your personal data may be transferred to the new entity.

1. International Data Transfers

As a company based in Switzerland, your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure that such transfers are conducted in compliance with GDPR and other relevant data protection laws by implementing appropriate safeguards, such as Standard Contractual Clauses (SCCs).

1. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. When your data is no longer needed, we will securely delete or anonymize it.

1. Your Rights

You have the following rights under GDPR:

• Right to Access: You can request access to the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete data.
• Right to Erasure: You can request that we delete your personal data, subject to certain conditions.
• Right to Restrict Processing: You can request that we limit the processing of your personal data.
• Right to Data Portability: You can request a copy of your data in a structured, commonly used format.
• Right to Object: You can object to the processing of your personal data for certain purposes, such as direct marketing.
• Right to Withdraw Consent: You can withdraw your consent to the processing of your data at any time.
• Right to Lodge a Complaint: You can lodge a complaint with the relevant supervisory authority if you believe your rights have been violated.

1. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction.

1. Cookies

Our website uses cookies and similar technologies to enhance your user experience. You can manage your cookie preferences through your browser settings. For more information, please see our Cookie Policy.

1. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to review the privacy policies of these websites before providing any personal data.

1. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and the date of the latest revision will be indicated at the top. We encourage you to review this policy periodically.

1. Contact Us

If you have any questions or concerns about this Privacy Policy or our data processing practices, please contact us.