PRIVACY POLICY

Last Updated: March 4, 2026

1. Introduction

OTIWAY SRL ("OTIWAY", "we", "our", or the "Company") respects the privacy of its users and is committed to protecting the personal data collected through its website, applications, platforms, products, services, and other digital channels (collectively, the "Services").

This Privacy Policy describes how we collect, use, store, share, and protect the personal information of our users.

By using our Services, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

OTIWAY SRL

A company incorporated under the laws of the Dominican Republic.

Email: info@otiway.com

Website: www.otiway.com

Dominican Republic

OTIWAY acts as the data controller for personal data collected through its Services.

3. Scope of this Policy

This Policy applies to:

  • Visitors to our websites.

  • Customers and prospective customers.

  • Suppliers and business partners.

  • Users of applications and digital platforms.

  • Individuals who interact with OTIWAY through electronic or physical means.

4. Information We Collect

A. Information Provided by the User

We may collect:

  • First and last name.

  • Trade name or legal business name.

  • Tax identification number or equivalent, when applicable.

  • Email address.

  • Telephone number.

  • Physical or business address.

  • Billing information.

  • Information related to orders and purchases.

  • Inquiries submitted through contact forms.

  • Information provided during communications with our team.

B. Information Collected Automatically

When you use our Services, we may collect:

  • IP address.

  • Browser type.

  • Operating system.

  • Device information.

  • Date and time of access.

  • Pages visited.

  • Browsing preferences.

  • Data obtained through cookies and similar technologies.

C. Information from Third Parties

We may receive information from:

  • Payment processors.

  • Logistics providers.

  • Marketing platforms.

  • Social media platforms.

  • Authorized business partners.

  • Technology providers.

5. Purposes of Processing

We use personal information to:

  • Provide our products and services.

  • Manage requests, inquiries, and quotations.

  • Process orders and payments.

  • Issue invoices and tax documents.

  • Manage business relationships.

  • Provide customer support.

  • Improve our Services.

  • Personalize the user experience.

  • Send communications related to products or services.

  • Comply with legal and regulatory obligations.

  • Detect and prevent fraudulent or unlawful activities.

  • Protect the security of our systems and users.

6. Legal Basis for Processing

Depending on the nature of the processing activity, OTIWAY may process personal data based on:

  • The data subject's consent.

  • Performance of a contract.

  • Compliance with legal obligations.

  • OTIWAY's legitimate interests.

  • Protection of the Company's rights, security, and legitimate operations.

7. Sharing of Information

OTIWAY does not sell or rent personal data.

We may share information only when necessary with:

  • Payment processors.

  • Shipping and logistics companies.

  • Technology and infrastructure providers.

  • Cloud hosting service providers.

  • Legal, tax, or accounting advisors.

  • Competent authorities when required by law.

  • Affiliated companies or subsidiaries when necessary to provide services.

All third parties processing information on behalf of OTIWAY must implement reasonable measures to protect personal data.

8. International Data Transfers

Due to the international nature of our operations, personal data may be processed or stored outside the Dominican Republic.

Where applicable, OTIWAY will adopt reasonable measures to ensure an adequate level of protection for transferred data.

By using our Services, users acknowledge that their data may be transferred internationally for the purposes described in this Policy.

9. Data Retention

We will retain personal data only for as long as necessary to:

  • Fulfill the purposes described in this Policy.

  • Maintain legitimate business relationships.

  • Comply with legal, tax, regulatory, or accounting obligations.

  • Resolve disputes or enforce contractual agreements.

Once the relevant purpose has been fulfilled, data may be deleted, anonymized, or archived as permitted by applicable law.

10. Information Security

OTIWAY implements reasonable technical, administrative, and organizational measures designed to protect personal data against:

  • Unauthorized access.

  • Alteration.

  • Disclosure.

  • Loss.

  • Misuse.

  • Accidental or unlawful destruction.

These measures include access controls, security protocols, encryption where appropriate, and system monitoring.

However, no method of transmission or storage of information can guarantee absolute security.

11. Cookies and Similar Technologies

Our Services may use cookies, pixels, and similar technologies to:

  • Remember preferences.

  • Analyze website performance.

  • Improve user experience.

  • Provide certain functionalities.

For more information, please consult our Cookie Policy.

12. Data Subject Rights

In accordance with Dominican Republic Law No. 172-13 and other applicable laws, users may have the right to:

  • Access their personal data.

  • Request corrections or updates.

  • Request deletion of data when legally applicable.

  • Object to certain processing activities.

  • Request information regarding the use of their data.

  • Withdraw previously granted consent.

  • Exercise other rights recognized by applicable law.

Requests may be submitted using the contact information provided in this Policy.

13. International Users

OTIWAY provides services to users located in various parts of the world.

Where applicable, we endeavor to respect rights granted under various international privacy regulations, including:

  • Dominican Republic Law No. 172-13 on Personal Data Protection.

  • European Union General Data Protection Regulation (GDPR).

  • United Kingdom GDPR (UK GDPR).

  • California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

  • Other applicable privacy and data protection laws.

Nothing in this Policy shall limit any mandatory rights granted under applicable law.

14. Children's Privacy

Our Services are not directed to minors who lack the legal capacity to provide consent under applicable law.

We do not knowingly collect personal information from minors without the appropriate authorization when required by law.

15. Links to Third-Party Websites

Our Services may contain links to websites or services operated by third parties.

OTIWAY does not control and is not responsible for the privacy practices of such third parties.

We recommend reviewing their respective privacy policies before providing personal information.

16. Changes to this Policy

OTIWAY may update this Privacy Policy periodically to reflect legal, regulatory, technological, or business changes.

Modifications will be published on this page together with the corresponding update date.

Continued use of our Services after changes are posted constitutes acceptance of the updated version of this Policy.

17. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the Dominican Republic, including Law No. 172-13 on Personal Data Protection.

Nothing in this Policy shall limit any mandatory rights that users may have under the laws of their country, state, or region where such laws apply.