Privacy policy
Effective Date: [July 23, 2026]
At OAS Mobility, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website, use our online store, purchase our products, or communicate with us.
This Privacy Policy applies to:
Website: https://oasmobility.eu
Brand: OAS Mobility
1. Data Controller
The controller responsible for processing personal data collected through this website and our online store is:
Xinhai International Trade Co., Limited
Address:
16 Shing Yip Street
RM C20, BLK C, 3/F
Kwun Tong
Kowloon
Hong Kong
Email:
Website:
For questions regarding personal data processing or exercising your privacy rights, please contact us using the email address above.
Important notice:
Our warehouse, return, and repair address in Germany is used only for logistics, returns, repairs, and after-sales services. It is not our registered company address and is not the address for privacy-related requests.
Return and repair location:
Schillerstraße 76
Einfahrt Tor 4
64625 Bensheim
Germany
2. Scope of This Privacy Policy
This Privacy Policy explains:
- What personal data we collect;
- Why we process personal data;
- The legal basis for processing;
- Who may receive personal data;
- How long we retain personal data;
- Your rights under applicable data protection laws, including the General Data Protection Regulation (GDPR), where applicable.
Personal data means any information relating to an identified or identifiable individual.
Data that has been permanently anonymized so that it can no longer be linked to an identifiable person is not considered personal data.
3. Personal Data We Collect
Depending on how you use our website and services, we may collect and process the following categories of personal data:
3.1 Information You Provide to Us
When you place an order, contact us, subscribe to our newsletter, or interact with our services, we may collect:
- Name;
- Email address;
- Phone number;
- Billing address;
- Shipping address;
- Order details;
- Purchased products;
- Product options or selections;
- Payment status;
- Customer account information;
- Communication records with our customer support team;
- Information submitted through contact forms, emails, or chat tools.
3.2 Order and Transaction Information
When you purchase products from our store, we may process:
- Order number;
- Product information;
- Order amount;
- Currency;
- Payment method;
- Payment status;
- Shipping information;
- Return, refund, or warranty information.
Payment details are processed by third-party payment providers. We do not store your complete credit card number or full payment credentials.
3.3 Device and Website Usage Information
When you visit our website, we may automatically collect certain technical information, including:
- IP address;
- Browser type;
- Operating system;
- Device information;
- Language settings;
- Pages visited;
- Referral URLs;
- Date and time of visits;
- Website interaction data;
- Cookie identifiers;
- Marketing preferences;
- Security and diagnostic information.
This information helps us operate, secure, analyze, and improve our website and services.
4. Special Categories of Personal Data
OAS Mobility sells electric wheelchairs. However, we do not actively request or require health information, medical information, or information about specific diseases in order to purchase our products.
Please do not send unnecessary health-related information unless it is required for a specific customer service request.
If you voluntarily provide information related to:
- Mobility limitations;
- Physical conditions;
- Accessibility requirements;
during product inquiries, warranty requests, repairs, or customer support communication, we will only use such information for handling your specific request.
Such information will only be processed where permitted under applicable data protection laws.
5. Purposes and Legal Bases for Processing Personal Data
We process personal data for the following purposes:
5.1 Order Processing and Contract Fulfillment
We process personal data to:
- Receive and process orders;
- Complete payments;
- Arrange shipping;
- Provide order confirmations;
- Provide shipment updates;
- Process returns, refunds, and exchanges;
- Provide warranty and after-sales support.
Legal basis:
Performance of a contract or steps taken before entering into a contract.
(GDPR Article 6(1)(b), where applicable)
5.2 Customer Service and Communication
When you contact us through email, contact forms, or customer support channels, we process your information to:
- Respond to inquiries;
- Provide assistance;
- Resolve issues;
- Communicate regarding orders or services.
Legal basis:
- Contract-related communication: GDPR Article 6(1)(b)
- General inquiries: GDPR Article 6(1)(f), based on our legitimate interest in providing effective customer support.
5.3 Payment Processing and Fraud Prevention
We process transaction-related information to:
- Complete payments;
- Verify transactions;
- Prevent fraud;
- Protect our customers and business.
Depending on the payment method selected, information may be shared with payment providers, including:
- PayPal;
- Klarna;
- Credit and debit card payment providers;
- Apple Pay;
- Google Pay.
Legal basis:
- Contract fulfillment: GDPR Article 6(1)(b)
- Fraud prevention and security protection: GDPR Article 6(1)(f)
Payment providers may process personal data as independent data controllers according to their own privacy policies.
5.4 Shipping and Delivery
To fulfill your order, we share necessary information with shipping and logistics providers.
This may include:
- Name;
- Shipping address;
- Contact information;
- Order details.
Our shipping providers may include:
- DHL;
- DPD;
- GLS;
- UPS.
Legal basis:
Performance of a contract.
(GDPR Article 6(1)(b), where applicable)
6. Shopify
Our online store is operated using the Shopify e-commerce platform.
Shopify processes personal data required to provide our online store functions, including:
- Website hosting;
- Shopping cart functionality;
- Checkout processing;
- Order management;
- Customer account features;
- Payment-related processes;
- Security and fraud prevention.
The personal data processed by Shopify may include:
- Name;
- Email address;
- Shipping and billing information;
- Order information;
- Device and technical information;
- Website usage information.
Shopify generally processes customer data on our behalf as a service provider. Depending on the service used, Shopify may also process certain information as an independent data controller.
More information:
Shopify Privacy Policy:
https://www.shopify.com/legal/privacy
Shopify and its affiliated companies may process personal data outside the European Economic Area (EEA). Where required, such transfers are carried out using appropriate safeguards, including applicable data transfer mechanisms such as standard contractual clauses approved by the European Commission.
7. Customer Service, Contact Forms and Communication Tools
When you contact us through:
- Email;
- Contact forms;
- Customer support channels;
we process the information you provide to respond to your request and provide customer assistance.
The information may include:
- Name;
- Email address;
- Contact details;
- Order information;
- Communication content.
Please do not send:
- Full payment card details;
- Passwords;
- Sensitive personal information unrelated to your request.
Legal basis:
- Contract-related requests: GDPR Article 6(1)(b), where applicable;
- General customer inquiries: GDPR Article 6(1)(f), based on our legitimate interest in providing customer support.
8. Newsletter and Marketing Emails
If you subscribe to our newsletter or provide consent to receive marketing communications, we may use your email address to send:
- Product updates;
- Promotional offers;
- Brand news;
- Special campaigns;
- Information about OAS Mobility products.
The legal basis for this processing is your consent:
GDPR Article 6(1)(a), where applicable.
You may withdraw your consent at any time by:
- Clicking the unsubscribe link included in our emails;
- Contacting us at:
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Transactional communications, such as:
- Order confirmations;
- Shipping notifications;
- Security messages;
- Customer service responses;
are not marketing emails and may still be sent when necessary to fulfill our contractual obligations.
9. Klaviyo Newsletter Service
We use Klaviyo to manage newsletter subscriptions and send marketing communications.
Klaviyo may process:
- Name;
- Email address;
- Newsletter subscription status;
- Email interaction data;
- Marketing preferences;
- Engagement information.
This allows us to send relevant communications and measure the effectiveness of our email campaigns.
The processing is based on your consent:
GDPR Article 6(1)(a), where applicable.
Klaviyo may process personal data outside the European Economic Area. Appropriate safeguards may be used for international data transfers, including standard contractual clauses where applicable.
More information:
Klaviyo Privacy Policy:
https://www.klaviyo.com/legal/privacy
10. Cookies and Similar Technologies
We use cookies and similar technologies to:
- Provide website functionality;
- Enable shopping cart and checkout features;
- Remember language and regional settings;
- Improve website security;
- Analyze website usage;
- Measure advertising performance;
- Provide personalized advertising where consent has been provided.
Cookies are small text files stored on your device or browser that help websites remember information about your visit.
10.1 Necessary Cookies
Certain cookies are required for essential website functions, including:
- Shopping cart operation;
- Checkout functionality;
- Security features;
- Cookie preference settings.
These cookies may be used without consent where they are strictly necessary to provide services requested by the user.
Legal basis:
- GDPR Article 6(1)(b), where related to requested services;
- GDPR Article 6(1)(f), where related to website security and operation.
10.2 Analytics, Functional and Marketing Cookies
Non-essential cookies used for:
- Website analytics;
- Advertising measurement;
- Marketing;
- Personalized advertising;
will only be activated after you provide consent through our cookie consent management system.
Legal basis:
GDPR Article 6(1)(a), where applicable.
You can change or withdraw your cookie preferences at any time through the cookie settings available on our website.
Withdrawal applies only to future processing and does not affect processing that occurred before withdrawal.
11. Cookie Consent Management and Google Consent Mode v2
We use a consent management system to record, store, and apply your cookie preferences.
When using Google services, your consent choices may be communicated to Google through Google Consent Mode v2.
The consent signals may include:
- ad_storage;
- analytics_storage;
- ad_user_data;
- ad_personalization.
Non-essential analytics and marketing technologies will not be activated before the required consent has been provided.
We may store consent records to demonstrate compliance with applicable legal requirements.
Legal basis:
GDPR Article 6(1)(c), where applicable, for compliance and proof of consent obligations.
12. Analytics and Advertising Services
The following services are only used where they are activated on our website.
12.1 Google Analytics
With your consent, we may use Google Analytics to understand how visitors use our website.
Google Analytics may process information such as:
- IP address;
- Device information;
- Browser information;
- Pages visited;
- Website interactions;
- Referral sources;
- Approximate location;
- Purchase and event data.
For users in the European Economic Area, the relevant service provider is generally:
Google Ireland Limited
Legal basis:
GDPR Article 6(1)(a), where applicable.
Google may process data outside the EEA using appropriate safeguards.
More information:
Google Privacy Policy:
https://policies.google.com/privacy
12.2 Google Ads
With your consent, we may use Google Ads services, including:
- Conversion tracking;
- Remarketing;
- Advertising measurement features.
These tools help us understand whether users who interact with advertisements complete actions on our website and help us improve advertising performance.
Legal basis:
GDPR Article 6(1)(a), where applicable.
12.3 Meta Services
With your consent, we may use Meta services, including:
- Meta Pixel;
- Meta Conversion API.
These technologies help us:
- Measure website activity;
- Understand advertising performance;
- Improve Facebook and Instagram advertising;
- Create relevant advertising audiences where permitted.
For European Economic Area users, the relevant service provider is generally:
Meta Platforms Ireland Limited
Legal basis:
GDPR Article 6(1)(a), where applicable.
More information:
Meta Privacy Policy:
https://www.facebook.com/privacy/policy
13. Language, Media and Embedded Content
We may use third-party services to provide certain website functions, including:
- Language translation services;
- Embedded videos;
- Social media content;
- Product reviews;
- User-generated content;
- Technical website features.
When embedded content or third-party services are loaded, information may be transferred to the relevant service providers.
Where required by law, such content and related tracking technologies will only be activated after you provide consent.
The legal basis depends on the specific service:
- GDPR Article 6(1)(a) — consent;
- GDPR Article 6(1)(f) — legitimate interest.
14. Recipients of Personal Data
We only share personal data where necessary for:
- Fulfilling contracts;
- Meeting legal obligations;
- Protecting legitimate interests;
- Providing services requested by users;
- Obtaining user consent.
Recipients may include:
E-commerce and Technology Providers
- Shopify;
- Website hosting and technical service providers.
Payment Providers
Depending on your selected payment method:
- PayPal;
- Klarna;
- Credit and debit card payment providers;
- Apple Pay;
- Google Pay;
- Banks or financial institutions involved in payment processing.
Shipping and Logistics Providers
For order fulfillment and delivery:
- DHL;
- DPD;
- GLS;
- UPS.
Warehouse, Returns and Repair Services
For:
- Order fulfillment;
- Returns processing;
- Repairs;
- Warranty services.
Our German return and repair location:
Schillerstraße 76
Einfahrt Tor 4
64625 Bensheim
Germany
Marketing and Communication Providers
Including:
- Klaviyo;
- Email service providers;
- Customer communication tools.
Analytics and Advertising Providers
Including:
- Google Analytics;
- Google Ads;
- Meta services.
Professional and Legal Service Providers
Including:
- Tax advisors;
- Auditors;
- Legal advisors;
- Insurance providers.
Authorities and Public Institutions
Where required by law:
- Government authorities;
- Courts;
- Law enforcement agencies.
Service providers may only process personal data within the agreed scope and according to applicable data protection requirements.
15. International Data Transfers
Because our company is located outside the European Economic Area (EEA) and because we use international service providers, personal data may be processed or transferred outside your country of residence.
Such transfers are only carried out where permitted under applicable data protection laws.
Possible safeguards include:
- Adequacy decisions issued by the European Commission;
- Standard Contractual Clauses approved by the European Commission;
- Appropriate technical and organizational safeguards;
- Other lawful transfer mechanisms permitted under applicable data protection regulations.
International processing does not remove or limit your rights under applicable data protection laws.
If you require further information regarding applicable safeguards for international transfers, please contact:
16. Data Retention Period
We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy or to comply with legal obligations.
Retention periods depend on the type of data and purpose of processing.
Examples:
Orders, Payments and Accounting Data
Order, invoice, and payment-related information may be retained according to applicable commercial and tax regulations.
Customer Service, Returns and Warranty Information
Customer service records, repair information, return requests, and warranty-related information are retained for the period necessary to process requests and meet legal requirements.
Customer Accounts
Account information is generally retained until you request deletion, unless legal obligations require continued retention.
Newsletter Data
Newsletter information is retained until:
- You unsubscribe;
- You withdraw your consent;
- The information is no longer required for the purpose collected.
Consent Records
Cookie and marketing consent records may be stored to demonstrate compliance with applicable legal requirements.
Security and Technical Logs
Security and diagnostic logs are retained only for the period necessary to detect, investigate, and resolve security issues.
After the applicable retention period expires, personal data will be deleted or anonymized unless continued storage is legally required.
17. Your Data Protection Rights
Where applicable under data protection laws, including the GDPR, you have the following rights:
Right of Access
You may request information about the personal data we process about you.
Right to Rectification
You may request correction of inaccurate or incomplete personal data.
Right to Erasure
You may request deletion of your personal data where legal conditions are met.
Right to Restriction of Processing
You may request that processing of your personal data is restricted in certain circumstances.
Right to Data Portability
You may request your personal data in a structured, commonly used, and machine-readable format where applicable.
Right to Object
You may object to certain processing activities based on legitimate interests.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw your consent at any time.
Withdrawal does not affect the legality of processing performed before withdrawal.
Right to Lodge a Complaint
You have the right to submit a complaint to a competent data protection authority.
To exercise your rights, please contact:
Email:
To protect your privacy and prevent unauthorized access, we may request additional information to verify your identity.
We generally respond to valid requests within one month. In complex cases or where permitted by law, the response period may be extended.
18. Right to Lodge a Complaint
If you believe that our processing of your personal data violates applicable data protection laws, you have the right to lodge a complaint with a competent supervisory authority.
You may contact the authority responsible for:
- Your place of residence;
- Your place of work;
- The location where the alleged violation occurred.
19. Automated Decision-Making and Credit Checks
We do not generally make decisions based solely on automated processing that produce legal effects or similarly significant effects on individuals.
However, certain payment providers, including Klarna or financial institutions, may perform automated:
- Fraud prevention checks;
- Identity verification;
- Credit assessments.
Such processing is carried out under the responsibility of the respective payment provider and is governed by their own privacy policies.
20. Requirement to Provide Personal Data
Certain personal data is required to enter into a contract and complete an order.
For example:
- Without a delivery address, we cannot ship your order;
- Without necessary payment information, we cannot process payment.
Providing information for:
- Newsletter subscriptions;
- Analytics;
- Personalized advertising;
is voluntary.
You can use our online store even if you do not provide optional marketing consent.
21. Data Security
We implement appropriate technical and organizational measures to protect personal data against:
- Loss;
- Unauthorized access;
- Unauthorized modification;
- Disclosure;
- Misuse;
- Destruction.
However, no online system can guarantee absolute security.
For your protection, please do not send us:
- Passwords;
- Full payment card details;
- Unnecessary sensitive personal information.
22. Children’s Privacy
Our online store is not specifically designed for children under the age of 16.
We do not knowingly collect personal data from children without appropriate authorization.
If we become aware that personal data of a child has been collected without proper consent, we will take reasonable steps to delete such information.
Parents or legal guardians may contact us at:
23. Third-Party Links
Our website may contain links to third-party websites or services.
Once you leave our website, the privacy practices of those third parties apply.
We are not responsible for the privacy practices, content, or security of external websites.
24. Changes to This Privacy Policy
We may update this Privacy Policy from time to time due to:
- Changes in our services;
- Changes in technology;
- Changes in third-party providers;
- Changes in legal requirements.
The updated version will be published on this page.
Where required by law, we will provide additional notice regarding significant changes.
Contact Us
If you have questions about this Privacy Policy or your personal data, please contact:
OAS Mobility
Email:
Website: