Privacy Policy

On RUNNING PRIVACY NOTICE – GCC & JORDAN

On Privacy Notice – GCC and Jordan

1.     Details of the Data Controller

This privacy notice is issued by Mizzen General Trading LLC, a limited liability company incorporated in the United Arab Emirates (“UAE”) with commercial license number 787513 and registered office at P.O. Box 2123, Dubai, UAE (hereinafter referred to as “Mizzen”, “we”, “us” or “our”). Mizzen manages On-mena.com (the “Website”) for the purpose of offering On products for sale (the “Services”).

This privacy notice (the “Privacy Notice”) describes how we collect, use, disclose, retain, and protect your data, as well as your rights with respect to such data. If you have any privacy concerns after reading this Privacy Notice, please contact our Data Privacy Office using the details provided in Section 15. We start collecting and processing your data from your first visit to the Website, based on your cookie preferences or when you provide information as outlined in this Privacy Notice.

We may update this Privacy Notice at any time and changes will take effect immediately upon publication on the Website without additional notice, unless otherwise required by law.

Last updated: October 2025.

2.     What types of Personal Information we collect

Personal information is data that can be used to identify you or that can otherwise be linked to you ("Personal Information"). We may collect Personal Information through several channels, including through:

·       communication via email or other methods.

·       registration for, or requests to receive newsletters or other materials.

·       registration for events.

·       purchase of On products or use of our services.

·       interaction with the Website based on cookie settings.

The Personal Information we collect may include your name, postal address, e-mail address, phone number, payment information, language preference.

3.     How we use your Personal Information

We use Personal Information to:

·       offer products to you.

·       provide and improve the Services.

·       manage communication, including sending newsletters, event invitations, and promotions.

·       maintain our list of contacts.

·       manage your inquiries, complaints, and requests.

·       maintain the Website and ensure it is functioning properly.

When you request our products or submit inquiries or complaints, it is necessary for us to collect and process your personal information in order to fulfill your requests and respond appropriately to your enquiries or complaints. If you choose not to provide this information, we may be unable to provide the Services or respond to your inquiries.

You may choose to receive emails from us by subscribing through the Website. These communications may be tailored using information collected from your activities on the Website and could include follow-up messages, such as cart abandon notifications. To offer this service, we collect and store the information you provide, including your email address. You may opt out of receiving emails by unsubscribing via the link provided in our emails.

4.     Our legal grounds for processing your Personal Information

We process your Personal Information and may share it with affiliates and third parties (as further described below) based on the following lawful grounds:

·       your consent for the collection and processing of your Personal Information in connection with the Services and/ or marketing communications.

·       our legitimate interests in maintaining business and customer relationships and enhancing customer experience.

·       fulfilling contractual obligations to provide the Services.

·       compliance with applicable laws and regulations.

·       protection of public health, safety, and interests.

·       establishment, exercise, or defense of legal claims.

5.     How might we share your Personal Information

We may disclose your Personal Information to the following parties for the identified purposes:

5.1 Affiliates of the Company:

These affiliates operate in the United Arab Emirates and the Kingdom of Saudi Arabia, and may use the Personal Information to:

·       provide joint content and services (such as, customer support).

·       detect, investigate, mitigate and prevent potentially fraudulent and illegal acts or violations of our contracts and data security breaches.

·       provide you with personalized advertising.

·       improve products, sites, applications, services, tools and marketing communications.

·       send you marketing communications if you have consented to receive such communications or if otherwise permitted by the law.

5.2 On AG, Zurich, Switzerland ("On AG"):

·       To effectively manage our business operations and provide the Services.

·       To fulfill our contractual obligations to On AG.

5.3 Crossborder Global Apparel and Equipment Trading L.L.C. (“Global E”):

Global E is our fulfilment partner for Kuwait, Qatar, Bahrain, Oman, Saudi Arabia, and Jordan (together, the “Service Jurisdictions”). Therefore, when you place orders through the Website from any of the Service Jurisdictions, we will share your personal information (including name, contact information, payment, and order details) with Global E for order fulfilment. Global E will process your personal information as an independent data controller and in line with their privacy policy, which can be accessed here. To fulfil orders placed on the Website, it is necessary for us to share your personal information with Global E. If you prefer not to have your personal information disclosed to Global E, we kindly ask that you refrain from placing an order on the Website.

5.4 Service providers:

We engage third party service providers to support with providing the Services and managing the Website. These services providers may have access to Personal Information depending on the scope of the services they provide to us. The services they provide may include:

a)     Website hosting and maintenance.

b)     Prevention, detection, mitigation, and investigation of potentially illegal acts, violations, fraud, and/ security breaches.

c)     Bill collection and other business administrative activities.

d)     Advertising and promotions.

These service providers may be located anywhere in the world, including outside the Service Jurisdictions. If you need more information, feel free to contact us using the details provided at the end of this Notice.

Where we transfer Personal Information to third party service providers, this will be based on an agreement limiting the use by the third-party provider of such Personal Information to processing necessary to fulfil their contract with us and obligating the third-party provider to take security measures regarding such data. Third-party providers are not permitted to sell or lease the Personal Information to third parties.

5.5 Law enforcement agencies, government bodies, and third parties involved in legal proceedings:

·       To comply with our legal obligations, enforce our contracts, respond to claims that a listing or other content violates the rights of others, or to protect an individual’s rights, property, or safety.

·       To provide a response to a verified request or legal process. We will only disclose information we deem relevant to the investigation or inquiry.

·       To third parties involved in a legal proceeding, if they provide us with a subpoena, court order or substantially similar legal basis, or we otherwise believe in good faith that the disclosure of information is necessary to prevent imminent physical harm or financial loss or to report suspected illegal activity

We may disclose your Personal Information to our financial and payment services providers:

·       To prevent, detect, mitigate, and investigate potentially illegal acts, fraud and/or security breaches, and to assess and manage risk, including to alert you if fraudulent activities have been detected on your On account.

·       To provide customer services, including to help service your account or resolve disputes (e.g., billing or transactional disputes).

·       To facilitate the processing of payment cards when you pay for our services with a payment card.

5.6 Future business or merger partners:

We may also disclose your Personal Information to provide information, on a need-to-know basis, to future purchasers or merger partners of all or a portion of Mizzen or any of our affiliate companies.

6.     How long we keep your Personal Information

We store your Personal Information only for as long as necessary for the purposes described above. How long we retain Personal Information can vary significantly based on the context of the services we provide and on our legal obligations.

7.     Communication Tools

We may scan messages automatically and check for spam, viruses, phishing and other malicious activity, illegal or prohibited content or violations of this Privacy Notice or any other applicable policies.

8.     Newsletter

Subscription:

You may register for our newsletter on the Website by providing us with your e-mail address. The newsletter will keep you updated on our products, surveys, offers, and other promotional materials on a regular basis.

When registering for our newsletter, you give us your consent to receive the newsletter on a regular basis and that we collect and store the following information: the e-mail address used when registering for the newsletter.

Unsubscribe:

If you wish to unsubscribe from our newsletter, you can do so at any time by clicking on the “unsubscribe” link at the bottom of any newsletter that you receive. You may also contact our customer service team via the Contact Us form on the Website. If you decide not to receive our newsletters, we may still send you service-related communications (such as updates regarding your order).

Newsletter tracking:

The newsletters contain so-called “web beacons”, which are retrieved from an external server when the email is opened. This call will initially collect technical information, such as details about your browser and operating system, as well as your IP address and the time of retrieval. In addition, depending on your cookie settings, we may track whether and when you opened a newsletter, and which links were clicked. The analysis of this information helps us to identify the reading habits of our users and to adapt our content to you or to send out different content based on the interests of our users.

9.     Third Party Social Media Platforms

We are present on various social media platforms such as Facebook, Instagram, X (formerly, Twitter). On these social media pages, we publish and share various content with regards to our newest products, product recommendations, or other marketing material ("On Social Media Pages"). When using third party social media platforms, kindly note that the operators of these social media platforms are considered as data controllers and as such their respective privacy policy applies.

You may choose to communicate or interact with us directly via our On Social Media Pages. In this case, we collect any information you provide to us directly, e.g. when you post or like something on our On Social Media Pages or when you send us a direct message. In addition, we might access all information that is publicly available on your profile.

Operators of social media platforms use cookies and other tracking technologies to track the behaviour of their users and share the data regarding On Social Media Pages with us. Such data is shared only on an anonymized and statistical basis, meaning we have no access to personal data at all. We use such data to get a better understanding of the interests and the behaviour of our On Social Media Page users and to improve our user experience and provide user tailored content.

10.  How we protect your Personal Information

The security of your personal information is an important concern to us. We maintain appropriate technical and organizational security measures, policies, and procedures to protect your personal information from accidental loss, unauthorized access, use, alteration, and disclosure. All information you provide to us is stored on our secure servers behind a secure network. Examples of measures we take include:

•           Imposing confidentiality obligations on our staff and service providers.

•           Restriction of access to your personal information to employees and third parties strictly on a need-to-know basis, such as to respond to your enquiry or request.

•           Using secure communication channels for transmitting personal information; and

•           Employing adequate administrative and technical controls to secure personal information.

11.  Where we transfer Personal Information

Personal information we collect may be transferred to, stored, and processed in the United Arab Emirates and any of the Service Jurisdictions. We carry out such transfers for the purposes described in this Privacy Notice. For all cross-border transfers of Personal Information, including to the third parties described above, we take all steps that are reasonably necessary to ensure that your Personal Information is treated securely and in accordance with this Privacy Notice and applicable data protection laws, including, where relevant, entering standard contractual/data protection clauses (or equivalent measures). If you would like more information on transfer mechanisms, please contact us using the details provided at the end of this Privacy Notice.

12.  Your Choices and Rights

We welcome your inquiries and comments. You have the right to know what Personal Information we process about you and may request a copy. You are also entitled to have incorrect or incomplete Personal Information about you corrected or completed and you may ask us to delete your Personal Information. You can also object to certain Personal Information about you being processed and request that processing be limited. Please note that the limitation or deletion of your Personal Information may mean that we will be unable to provide the services and information described above. You also have the right to receive your Personal Information in a machine-readable format and have the information transferred to another party responsible for data processing. You can make a request to exercise any of these rights in relation to your Personal Information by sending the request to privacy@mizzen.me. You also have the right to contact the data protection supervisory authority in your country of residence.

For residents of the Kingdom of Saudi Arabia, you can register a complaint with the Saudi Data and Artificial Intelligence Authority via www.dgp.sdaia.gov.sa.

For residents of Qatar, you have the right to receive notice of unauthorised disclosure of your Personal Information and to make a complaint to the National Cyber Governance and Assurance Affairs via privacy@ncsa.gov.qa.

13.  Third Party Privacy Practices

This Privacy Notice addresses only our use and handling of Personal Information, which we collect from you in connection with providing the Services. If you disclose your Personal Information to a third party, or visit a third party website via a link from the Website, their privacy notices and practices will apply to any Personal Information you provide to them or they collect from you.
We cannot guarantee the privacy or security of your Personal Information once you provide it to a third party and we encourage you to evaluate the privacy and security policies of such third party before entering into a transaction and choosing to share your Personal Information.

14.  Cookies

14.1 Cookies are small text files that are downloaded to your device when you visit the Website or open our marketing-related emails. A cookie will usually contain the name of the website from which the cookie has come from, the “lifetime” of the cookie (i.e., how long it will remain on your device) and a value, which is usually a randomly generated unique number. Cookies placed by the website you’re visiting are called “first party cookies,” while cookies placed by other companies are called “third party cookies.”

14.2 There are different categories of cookies, and each cookie serves one of four purposes:

a.     Essential cookies: these are first party cookies that allow you use a feature on the Website such as, staying logged in, viewing a video, making purchases, creating an account.

b.     Analytics cookies: these cookies track information about how the Website is being used so that we can make improvements and report our performance. We might also use analytics cookies to test new ads, pages, or features to see how users react to them. Analytics cookies may either be first party or third party cookies.

c.     Preference cookies: these are first party cookies that store your Website preferences such as, language preference.

d.     Ad targeting cookies: these cookies are placed by advertising platforms or networks in order to:

·       Deliver ads and track ad performance

·       Enable advertising networks deliver ads that may be relevant to you based on your activities (this is sometimes called ‘behavioral;’ or ‘targeted’ advertising).

14.3 For all non-essential cookies, we will request your consent before placing such cookies on your device.

Cookies (including third-party cookies such as tracking technologies provided by Google Analytics) are in particular used to ensure and improve the functionality of the Website or for general marketing purposes by providing information on interaction of unique browser-device pairs with the Website (such as number of sessions, pageviews, clicks and ecommerce interactions and time spent), statistical information on interaction with the Website (including referrals thereto, popularity of certain content, accessing users' categories, markets, regions, languages, demographics, browser and device types and similar information), or statistical information on interaction with our marketing emails (such as if they have been opened or forwarded or links have been clicked on). Cookies are also used to provide you with personalized advertising on third party websites and/or apps for your specific interests.

14.4 Third-party service providers such as Google may track your use of the Website, combine this information with information from other websites you have visited (and which they also track) and use such combined information for their own purposes. If you have registered with the respective service providers, they may be able to identify you. In these instances, their processing of your Personal Information will be governed by their privacy policies.

14.5 If you would like more information about cookies, we can recommend www.aboutcookies.org and www.allaboutcookies.org as helpful resources. Both websites also provide instructions on how to reject cookies if you would like to do so.

15.  Contact Us

Should you have any questions or concerns relating to this Privacy Notice or the processing of Personal Information we hold about you, please contact us:

By email: privacy@mizzen.me.