Privacy Policy

1. Introduction

This privacy notice explains how O&M STRATEGIC CONSULTING LATIN AMERICA SCLA SA DE CV. and its subsidiaries and affiliates (collectively "O&M," "we," "us," "our") collects, uses, shares, and protects personal information of customers and merchants (to the extent the merchant is a natural person) through the O&M websites and mobile applications and related services (collectively, the "Services").

If you do not want your information handled as described in this Privacy Notice, please do not provide us with your information or interact with the Services.


1. How We Collect Personal Information

O&M may collect personal information about you from a variety of sources, including:

From you: Information may be collected when you submit it to O&M or otherwise interact with us. For example, O&M collects the information you provide when you make a purchase, create an account and profile, write a product review, or submit a request for O&M to contact you. O&M may also request optional information from you to support your use of the products and services.

From your devices: The devices you use to access the Services may provide information to us, including the device model, operating system and version, the name of the domain from which you access the Internet, your Internet Protocol ("IP") address, and other unique device identifiers. O&M also collects device information like the date and time you access the Services, which pages or portions of the Services you visit, the search terms you use, the links you click on, the browser you use, and your language preference. To collect much of this information, we use cookies, web beacons, and other similar technologies. For more information on how we use cookies and similar technologies, please read our Cookie Policy.

From third parties & service providers: Our vendors and service providers, such as our web hosting providers, analytics providers, and advertisers, may provide us information about you or your use of the Services. You may also give us permission to access your information from services offered by third parties, including social media networks. The information we obtain from third parties depends on your relationship with those third parties and the third parties' privacy policies.


1. How We Use Personal Information

O&M may use the personal information we have for a variety of purposes, including but not limited to:

To set up and manage accounts, including identification and authentication.

To collect or make a payment.

To process or support fulfillment of orders.

To find or recommend a local feature or service, such as a pickup location.

To communicate with you using email, SMS, push notifications, or platform messaging about your account or about market product listings, features, or events.

To provide you with marketing, communications, and offers for products and services from O&M and third parties.

To detect bugs, report errors, and identify potential improvements in the Services, including to test changes in the Services and develop new features.

To measure and analyze use of the Services and personalize content, including advertisements.

To provide support, including addressing questions and problems users, merchants, or pickup locations may have with the Services.

To enter and fulfill business agreements with you.

To manage investor relations and O&M securities.

To prevent, detect, investigate, and respond to fraud and unauthorized access or use of the Services, including breaches of terms and policies or other wrongful behavior.

To comply with any procedures, laws, and regulations which apply to us, including those that set retention periods.

To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations, including our transparency reporting obligations.

As otherwise described to you at the time your personal information is collected, or with your consent, if not listed here.


1. Types of Personal Information O&MCollects & Processes


O&M may collect and process the following categories of personal information from and about you depending on the circumstances of your relationship with us:

Identifiers such as your name, your O&M Account ID number, email address, shipping address, phone number, social network accounts and credentials, advertising ID, device identifiers such as MAC address and device attributes, and (where required for identity verification) government identifiers.

Commercial information such as transaction data, customer information including Personal Customs Clearance Codes (PCCC) for residents of South Korea, and information related to your purchasing habits.

Financial data such as payment method or payment accounts and VAT and sales tax information.

Contact information such as postal addresses, email addresses, social networking website user account names, telephone numbers, or other addresses at which you are able to receive communications or shipments.

Internet or other similar network and device activity such as information about your browsing behavior, app activity, search history, clickstream data, and other usage data; IP addresses; device identifiers; and interactions with our websites, emails, and advertisements, including data from cookies, pixel tags, and web beacons.

Location information such as general location and, if you provide permission, precise GPS location.

Inferences regarding preferences and other characteristics such as our assessment of the types of products or services you may have an interest in, language preferences from your browser, or mobile device settings.

User generated content such as product or merchant reviews you create or profile pictures that you upload.


1. How We Share Personal Information


O&M may share your personal data among its affiliates and subsidiaries. O&M may share your personal information with other companies for the following purposes:

With service providers who perform a variety of services and functions for O&M, such as data storage, order fulfillment, payment processing, and marketing services. Your information will only be shared on the condition that the service providers use your information only to fulfill the agreed services on our behalf.

With other users of the Services, such as merchants and consumers. For example, merchant information is shared with potential customers, and customer reviews (including associated photos and videos) of merchants are shared with other potential customers and merchants. To fulfill orders, information such as shipping address, phone number, and customs information is shared with merchants or their service providers. Additionally, certain user profile information, including your name, photo, location, items on your O&Mlist (unless you make the O&Mlist private), and the list of people you follow or that follow you may be displayed to other users.

In the event we go through a business transition such as a merger, acquisition by another company, bankruptcy, reorganization, or sale of all or a portion of O&M's assets.

With our online advertising partners, such as Facebook and Google, for the purpose of advertising to you.

With law enforcement or governmental agencies to comply with any court order, law, or legal process, including to respond to any government or regulatory request.

If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of O&M, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

O&M may also reveal your personal information to unrelated third parties for their independent use if: (1) you request or authorize it; (2) the information is provided to comply with the law; or (3) the information is provided to protect O&M's rights or safety, or the rights or safety of O&M employees or others.


1. Third-Party Plugins & Links to Third-Party Websites


The Services may contain links to external websites. The Services interface with social media sites such as Instagram, Facebook, LinkedIn, Twitter, YouTube, and others. A link to such sites does not imply endorsement by O&M of such sites. This Privacy Notice does not apply to those external websites, and you should review the privacy policies of these external sites.

Services may also offer you the ability to interact with plug-ins from social media sites and others, which may allow us or the social media site to receive data from or about you. If you have previously provided personal information to a third party operating a plug-in on the Services, then that third party may recognize you on the Services. Your use of social network plug-ins is subject to the privacy policy of the company that operates the plug-in, which may be different from ours, so please read these policies carefully to understand their policies and your options.


1. Cookies & Related Technologies


Cookies are text files stored on your web browser and are used by O&M to remember you for various purposes. Additionally, we use related tracking technologies, such as web beacons, local shared objects, and tracking pixels. To learn more about the cookies & related technologies used on our websites, please read our Cookie Policy, and to change or withdraw your consent at any time, please click the Cookie Settings link in the cookie notice banner or in the footer of our websites.

You may also alter your browser settings to block cookies. Browsers are different, so refer to instructions related to your browser to learn about cookie-related and other privacy and security settings that may be available.


1. Google Analytics


We use Google Analytics to understand how users interact with our websites and to improve how our business communicates its commercial message online. Google Analytics is a service provided by Google LLC in the United States. Google Analytics uses cookies, which transmit anonymized or truncated personal data to a Google server. The information about our websites generated by a Google Analytics cookie helps us evaluate the use of the websites, compile reports on website activity, and provide us with other services relating to website activity and internet usage.

You can find more information about Google's data protection practices and terms of use by visiting Google's websites at and

You can prevent Google from collecting and processing cookie-generated data relating to your use of a website by downloading and installing the browser plug-in available at the following link:


1. Legal Basis for Processing


O&M will only process your personal data when allowed by law; that is, we will only process your personal data when we have a legal basis for processing. For the purposes of European data protection law, we process personal data when one of the following legal bases applies:

Performance of a Contract: Where necessary to perform a contract with you or to take steps at your request before entering into a contract, such as processing a payment and fulfilling an order.

Legal or Regulatory Obligation: Where necessary for compliance with a legal or regulatory obligation that we are subject to.

Legitimate Interests: Where necessary for our interests, provided that your fundamental rights do not override such interests. We consider and balance the potential impact on you and your rights (both positive and negative) before we process your personal data for our legitimate interests.

Consent: Where you have provided your consent for processing your personal data. Where O&M relies on your consent as the legal basis for processing, you have the right to withdraw your consent at any time.


1. Purpose Limitation


O&M will only process personal information in a way that is compatible with and relevant to the purpose for which it was collected or authorized by you, or as we notify you if the purposes change. You have the right to object to or request that we restrict the processing of your personal data for such additional purposes.


1. Data Security


O&M will take reasonable steps to ensure that personal information is accurate, complete, current, secure, and reliable for its intended uses. We employ procedural and technological security measures that are designed to protect your personal information from loss, unauthorized access, disclosure, alteration, or destruction.


1. Data Retention


O&M will retain your personal information for as long as reasonably necessary for legitimate business purposes or as required by law. Personal information will be kept until it is no longer necessary to provide our products and services, to fulfill our contractual agreements with you, to comply with applicable law, to protect O&M's rights and interests (e.g., where the retention is necessary for the establishment, exercise, or defense of legal claims), or as otherwise needed for the purposes for which it was collected or processed. We specify the retention periods for your personal data in our data retention policy.


1. Data Transfers


At times, personal data may be transferred to service providers or systems in countries that may not offer a level of data protection equivalent to that in your country, including the United States. Where such transfers occur, O&M complies with the cross-border data transfer and export control laws of the countries in which it operates.

For personal data exports out of the European Union ("EU") or European Economic Area ("EEA"), O&M enters into the European Commission's Standard Contractual Clauses with the recipient to ensure compliance with the special requirements on transfers of personal data out of such countries. Where necessary, O&M will take appropriate supplementary measures to ensure an essentially equivalent level of data protection to that guaranteed in the EEA, in accordance with European Data Protection Board ("EDPB") recommendations.


1. Privacy Statement for Children


The Services are not intended to be directed to children that are younger than eighteen. O&M does not knowingly collect or intend to collect personal information from children that are younger than eighteen. If you believe we might have any information from or about a child under eighteen, please contact us at


1. Your Privacy Rights


Some privacy laws, including the EU General Data Protection Regulation ("GDPR") and California Consumer Privacy Act ("CCPA"), provide certain privacy and data protection rights for individuals. You may have the following rights, in accordance with applicable laws and subject to necessary validation of your identity and your location:

Request to access or obtain a copy of your personal data being processed.

Request correction of inaccurate personal data relating to you.

Object to O&M's processing of your personal data. Please note that we may continue to process your personal data, even if you have objected to the processing, if we have compelling legitimate grounds for the processing which overrides your privacy interests.

Request the deletion or restriction of the processing of your personal data

Request the categories of personal information we have collected or disclosed about you in the last twelve months, the categories of sources of such information, the business or commercial purpose for collecting or disclosing your information, and the categories of third parties with which we shared your personal information.

Request a list of third parties that have received your information for direct marketing purposes during the previous calendar year.

Lodge a complaint with a Data Protection Authority if you have concerns about our practices regarding the processing of personal data.

To edit or delete information you've provided to us (including name, password, user ID, email address, physical address, location, phone number, gender, payment method, payment service providers, and other profile information), you may go to your account "Settings" and modify or delete the information directly.

To exercise your rights, please send an email to with the details of your request.


1. Your Rights to Opt-out of Advertising (i.e., Restrict Sharing or Selling Data)


O&M does not sell (as "sell" is traditionally defined) your personal information. That is, we do not provide your name, email address, or other personally identifiable information to third parties in exchange for money.

O&M uses third-party cookies and tracking technologies, such as Facebook Pixels, to identify and place advertisements targeted to users who use the Services. The California Consumer Privacy Act ("CCPA") defines the use of such cookies and tracking technologies as "selling" and "sharing" personal data.

The CCPA and various other laws give you the right to opt-out of the selling or sharing of your personal data as well as to opt-out of targeted advertising generally. You may exercise these rights through This Portal or by using Global Privacy Control.


1. Your Marketing Choices


You can limit the information you provide to O&M, and you can limit the communications that O&M sends to you.

Marketing Emails: You may choose not to receive marketing emails from us by following the instructions contained in any of the marketing emails we send or by changing your account settings. Please note that even if you unsubscribe from marketing email messages, we may still send you non-marketing emails.

Cookies: Please refer to our Cookie Policy for information about your choices regarding the cookies on our websites.

Mobile Promotional Offers: If you no longer O&M to receive mobile alerts from O&M via SMS text, you can follow the instructions provided in those messages or otherwise reply STOP to any alert we send.

Push Notifications: If you prefer not to receive push notifications, you may adjust your settings on your mobile device to control whether you receive these alerts.

Global Privacy Control: O&M does respond to Global Privacy Control ("GPC") signals.


1. Merchants


The Merchant Terms of Service and Agreement governs O&M's relationship with merchants. If there is any conflict between the terms of that Agreement and this Privacy Notice, the Agreement controls.

Moreover, most merchants are corporate legal entities and are not individuals or natural persons. If you are not a natural person, this Privacy Notice does not apply to you. However, if you are a merchant and a natural person, the representations in this Privacy Notice apply to you, subject to the Agreement and various legal exceptions based on your residency.


1. Employees & Job Applicants


If you are a current or former O&M employee or job applicant, information about how O&M handles your data is provided in the O&M Employee & Job Applicant Privacy Notice.


1. Supplemental Privacy Notice for South Korean Residents


This Supplemental Privacy Notice is in addition to the information in this Privacy Notice and applies solely to residents of South Korea.

When destroying personal information, we take commercially reasonable and technically feasible measures to make the personal information irrecoverable or irreproducible. Electronic documents or files containing personal information will permanently be deleted using a technical method that makes recovery or retrieval of such information impossible. Non-electronic documents or files containing personal information will be shredded or incinerated. In case any personal information is required to be retained for a period beyond the period of retention and use as prescribed by applicable law, to the extent technically possible, such information will be stored or maintained separately from other items of personal information.


1. Privacy Notice Changes and Update


This Privacy Notice may be amended at any time. If material changes are made in how personal information is collected, used, disclosed, or otherwise processed, this Privacy Notice will be updated, including the "Effective Date" at the bottom of this Privacy Notice. Any changes will be effective when we post the updated Privacy Notice.


1. Contact Information


All questions, complaints, or comments about this Privacy Notice or O&M's data protection practices can be emailed to O&M's Data Protection Officer at Other concerns, such as about an order placed, should be sent through the standard support channels.