Privacy Policy

This Privacy Policy explains how personal information is handled when you visit olfay.com, contact us, request a sample or quotation, discuss a private-label project, or otherwise communicate with OLFAY.

The data controller for the relevant interaction is the OLFAY entity responsible for your inquiry or transaction, as identified in the relevant business correspondence or order documents. Its contact address is the business address stated in the relevant OLFAY commercial correspondence. Where a separate legal entity is identified in an accepted quotation, invoice, or contract, that document determines the entity responsible for information connected with that transaction.

This policy is written primarily for business contacts, including customers, prospective customers, suppliers, service providers, and their representatives.

Depending on how you interact with us, we may collect:

• business contact details, such as name, company, role, country, email address, telephone number, and messaging-account details;
• inquiry and project information, including product interests, specifications, quantities, target market, artwork, packaging requirements, samples, quotations, and order communications;
• transaction and logistics information needed for payment, invoicing, compliance, shipment, and after-sales support;
• website and device information, such as IP address, browser, device type, referring page, pages viewed, approximate location, and cookie or consent choices; and
• records of communications and files you choose to send to us.

Please avoid sending sensitive personal information or confidential formula and design files through a general website form unless we have requested them through an appropriate business channel.

We receive information directly from you when you complete a form, send an email or message, request a quotation or sample, place an order, provide project materials, or speak with our team.

Some technical information is collected automatically through hosting logs, security tools, cookies, and analytics technologies, subject to applicable consent requirements. We may also receive business contact information from your employer, a colleague, a referral partner, a trade-show interaction, a business directory, or a platform through which you contacted us.

Where another person gives us your details, we expect them to have an appropriate reason and authority to do so.

We use personal information to respond to inquiries, assess project feasibility, prepare samples and quotations, manage orders and supplier relationships, provide support, operate and secure the website, maintain business records, improve our services, and meet legal or regulatory obligations.

Where data-protection law requires a legal basis, processing may rely on steps requested before entering a contract, performance of a contract, compliance with legal obligations, our legitimate interests in conducting and protecting a business-to-business operation, or consent where consent is required. The appropriate basis depends on the context and applicable law.

You may contact us if you would like more information about the basis used for a particular activity.

Information submitted through inquiry forms or business communications is used to understand your requirements, identify suitable products and manufacturing options, prepare commercial documents, arrange samples, and follow up on the project.

Project records may be shared internally with staff who need them and with selected suppliers or service providers where this is reasonably necessary to evaluate or deliver the requested work. We seek to limit shared information to what is relevant for that purpose.

Submitting an inquiry does not create a contract, and we may retain a proportionate record of the communication for follow-up, continuity, fraud prevention, dispute handling, and business recordkeeping.

The website may use cookies or similar technologies that are necessary for core operation, security, preferences, form functionality, and traffic measurement. Non-essential technologies should be used in accordance with the consent choices available to you where consent is required.

Analytics and related providers currently identified by OLFAY are: the website analytics and security services disclosed through the site’s consent interface or technical notices. These services may receive technical and usage information under their own terms and privacy notices.

You can review or change available choices through the cookie or consent controls available on the website and through your browser settings. Blocking some technologies may affect website features. Browser “Do Not Track” signals are not interpreted uniformly; legally required preference signals will be handled where they apply.

We may send communications that are necessary to answer an inquiry, administer a quotation or order, provide service notices, or continue a business discussion you initiated.

Where permitted, we may also send relevant business-to-business updates about products, capabilities, or services. We will use consent where applicable law requires it. You may opt out of marketing at any time by using an unsubscribe method provided in the message or by contacting us. Opting out of marketing does not stop essential project, transaction, security, or legal communications.

We may disclose relevant personal information to hosting, website, form, email, cloud-storage, analytics, customer-management, payment, testing, certification, logistics, professional-adviser, and other service providers that help us operate the website or deliver a requested project.

Information may also be disclosed to affiliated operations, manufacturing or supply-chain partners, authorities, courts, insurers, advisers, or a party involved in a genuine business reorganization where there is an appropriate legal basis and suitable protections.

We do not intend to sell personal information for money. If an activity is treated as a “sale,” “sharing,” or targeted advertising under an applicable privacy law, we will provide the notices and choices required for that activity.

OLFAY works with international customers and service providers. Personal information may therefore be processed in countries other than the country where it was collected, including locations whose privacy laws may differ.

Where transfer restrictions apply, the safeguards used or assessed for the relevant transfer are measures appropriate to the applicable transfer, which may include contractual protections, vendor assessments, access controls, or a legally recognized transfer mechanism where required. The precise mechanism may depend on the parties, systems, destination, and applicable law. You may contact us for information about safeguards relevant to your data, subject to lawful confidentiality limits.

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, accounting, compliance, security, and dispute-resolution needs.

Retention periods vary according to the nature of the information and may reflect the duration of an inquiry or business relationship, manufacturing and quality records, warranty or claim periods, tax and accounting rules, customs or compliance obligations, limitation periods, security needs, and the need to establish or defend legal claims.

When information is no longer reasonably required, we will delete, anonymize, or securely isolate it as appropriate, subject to technical backup cycles and legal obligations.

We use administrative, technical, and organizational measures intended to protect personal information against unauthorized access, alteration, disclosure, loss, or misuse. Measures are selected in view of the information, systems, operational context, and reasonably foreseeable risks.

No website, email, transmission, or storage system can be guaranteed completely secure. Please use appropriate care when deciding what to send online and contact us promptly if you believe information connected with OLFAY may have been compromised.

Depending on where you live and the law that applies, you may have rights to request access, correction, deletion, restriction, portability, or information about processing; to object to certain processing; to withdraw consent without affecting earlier lawful processing; or to opt out of certain sales, sharing, targeted advertising, or marketing.

Individuals in the EEA or UK may also have the right to complain to their local data-protection authority. California residents may have additional rights under applicable California law, including rights relating to categories, sources, purposes, recipients, correction, deletion, and certain opt-outs. These rights are subject to definitions, exceptions, verification, and scope under the relevant law.

Send a request to sales@olfay.com or use the privacy-request contact option below. We may request information reasonably necessary to verify identity, authority, and the request. Authorized agents may be required to provide evidence of authorization. We will not unlawfully discriminate against you for exercising an applicable privacy right.

This website and OLFAY’s private-label services are intended for business users and are not directed to children. We do not knowingly seek personal information from children through the website.

If you believe a child has provided personal information to us without appropriate authorization, please contact us so that we can assess the situation and take appropriate action.

The website may link to external websites, social platforms, embedded services, logistics providers, or other third-party resources. Their privacy and security practices are controlled by those third parties, not by this policy.

Please review the relevant third party’s privacy information before providing personal data or using its service. A link does not by itself mean that OLFAY endorses or controls that third party.

We may revise this Privacy Policy to reflect changes in the website, our operations, service providers, or legal requirements. The current version will be posted here with an updated date. Material changes may be highlighted through an additional notice where appropriate.

For privacy questions or requests, email sales@olfay.com or use our Contact page. Please describe your request clearly, but do not send identity documents or sensitive information unless we ask for them through a suitable channel.

Controller address: the business address stated in the relevant OLFAY commercial correspondence.