Privacy Policy

01

Information we collect

We collect Personally Identifiable Information (PII) only when you actively provide it to us, and only to the extent needed to deliver the service or respond to the request you've made.

When we collect it

You may be asked to provide information when you subscribe to our newsletter, place an order, register on the site, fill out the contact form, or otherwise engage with us.

What we collect

• Contact details: your name, email address and company name
• Order information: shipping address, billing address and phone number when you place an order
• Communication content: the content of messages you send us through the contact form, email or phone
• Account credentials: username and password if you register for the customer portal (passwords are stored as a salted hash, never in plaintext)
• Technical information: IP address, browser type, device type and pages visited, collected automatically by our web server and analytics tools

What we do not collect

We never request credit card numbers, and we do not store payment card data on our own infrastructure. All payment transactions route through external payment gateway providers who are independently responsible for card data handling.

02

How we use your information

Information you provide is used for specific, limited purposes related to your engagement with OEL.

Purposes we use your information for

• Customer service: to address service inquiries and respond to requests you send us
• Transaction processing: to process your orders and fulfill your purchases
• Order status updates: to send you order confirmations, shipping updates, tracking numbers and delivery notifications
• Follow-up communications: to follow up after the initial transaction, verify receipt and ensure satisfaction
• Promotional material: to send you periodic emails about new products, special offers and other information we believe you may find valuable - you may opt out at any time
• Site operation and improvement: to operate our website, analyze usage patterns and improve our products and services
• Legal and compliance: to comply with applicable laws, enforce our terms of service and protect our rights

Lawful basis (for EU / UK customers)

• Performance of a contract - when we process your order or fulfill a service you've requested
• Legitimate interests - for site operation, fraud prevention and direct marketing to existing customers
• Consent - when you opt in to marketing communications or non-essential cookies
• Legal obligation - when processing is required to comply with applicable law

03

How we protect your information

We use a combination of technical and organizational safeguards to protect your personal information from loss, misuse and unauthorized access.

Technical safeguards

• SSL / TLS encryption for the transmission of sensitive information between your browser and our servers
• Encrypted password storage - account passwords are stored as salted hashes, never in plaintext
• External payment gateway providers handle all payment card data; OEL does not store credit card numbers on its servers
• Industry-standard server hardening, regular backups and access-log monitoring

Organizational safeguards

• Access restriction - personal information is accessible only to authorized employees with a specific need
• Employee training on privacy and data-handling procedures
• Vendor due diligence on any third party processing data on our behalf
• Incident response process for suspected data breaches, with customer notification where required by law

What we don't do

For transparency: we do not currently run automated vulnerability scanning, PCI DSS compliance scanning or malware scanning on our own infrastructure. Payment card handling is delegated to compliant external gateway providers so that PCI scope stays off our systems.

04

Cookies and tracking technologies

Our website uses cookies - small files a site or its service providers transfer to your computer's hard drive through your web browser - to enable the site's systems to recognize your browser and remember certain information.

Why we use cookies

• Essential cookies - to keep you logged in to the customer portal and remember items in your cart
• Preference cookies - to remember your settings so you don't have to re-enter them on each visit
• Analytics cookies - to understand how visitors use our site so we can improve it
• Marketing cookies - to measure the effectiveness of our advertising and understand which content is valuable to visitors

Managing your cookie preferences

You can choose to have your computer warn you each time a cookie is being sent, or you can choose to disable all cookies through your browser settings. Each browser is different, so check your browser's Help menu for the right approach.

Disabling cookies will prevent some parts of the site from functioning correctly - in particular, the customer portal and checkout flow rely on essential cookies.

For additional information, please see our Cookie Policy.

05

Third-party disclosure

We do not sell, trade or otherwise transfer your personally identifiable information to outside parties as a matter of business practice.

Exceptions

We may share information with trusted third parties strictly as needed to operate our business and serve you, including:

• Service providers: hosting, analytics, email delivery, customer portal and ERP platforms, and other vendors that process data on our behalf under written confidentiality obligations
• Payment processors: external payment gateway providers that handle credit-card processing
• Shipping carriers: FedEx, UPS, DHL, TNT, EMS and freight forwarders, to deliver your orders
• Legal and regulatory authorities: when required by law, court order, or to protect our rights, property or safety - or yours
• Business transfers: if OEL is involved in a merger, acquisition or sale of assets, your information may transfer as part of that transaction, subject to this policy

All third parties with access to your information are required to maintain confidentiality and use the information only for the specific purpose for which it was shared.

06

Third-party links

At our discretion we may include or offer third-party products or services on our website. These third-party sites have separate and independent privacy policies. We have no responsibility or liability for the content and activities of these linked sites. We still seek to protect the integrity of our own site and welcome any feedback about these third-party resources.

07

Your rights

Depending on where you live, you have certain rights regarding your personal information. We honor these rights regardless of jurisdiction where we reasonably can.

How to exercise your rights

Submit a request by email to support@overlandind.com or by phone at +1 (314) 377-4890. We will respond within 30 days (or sooner where required by law). You may also appoint an authorized agent to submit a request on your behalf - we will verify the agent's authority before fulfilling the request.

Marketing opt-out

You can unsubscribe from any promotional email we send using the unsubscribe link at the bottom of the email. You may also email us at any time to be removed from future marketing communications.

08

Data retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

Typical retention periods

• Order and invoice records - retained for the period required by applicable tax and accounting laws (typically 7 years)
• Customer account information - retained for the life of the account plus a reasonable period after account closure for legal and business continuity
• Marketing communications data - retained until you unsubscribe or opt out
• Contact form and inquiry data - retained for up to 2 years after the last interaction unless part of an active business relationship
• Website analytics - retained in anonymized or aggregated form per our analytics provider's defaults

When personal information is no longer needed, we securely delete, anonymize or destroy it in accordance with our data retention procedures.

09

International data transfers

OEL operates across multiple countries - our US office and warehouse are in Bridgeton, Missouri, and our manufacturing hubs are in Vietnam, Malaysia and China. Information you provide may be transferred to and processed in any of these locations, as well as in the jurisdictions where our service providers operate.

Where personal data is transferred outside your home jurisdiction, we put appropriate safeguards in place - including, where applicable, the European Commission's Standard Contractual Clauses or other recognized transfer mechanisms - so that your data continues to receive substantially the same level of protection as it does in your home country.

10

Children's privacy

OEL is a B2B industrial manufacturer. Our website, products and services are intended for businesses and adult professionals, not for children. We do not knowingly collect personal information from children under the age of 13 (or the equivalent age in your jurisdiction).

If you believe a child has provided us with personal information, please contact us at support@overlandind.com and we will take appropriate steps to remove the information.

11

Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices, technologies or legal requirements. When we make changes, we will update the "Last updated" date at the top of this page. For material changes that meaningfully affect your rights, we will provide a more prominent notice - including, where feasible, email notification to registered customers.

We encourage you to review this policy periodically so you remain informed about how we protect your information.