Oxygen Advantage | Last updated: 30 October 2026

Introduction

Oxygen Advantage is operated by Oxygen Research Institute Ltd., Loughwell, Moycullen, Co. Galway, H91 H4C1, Ireland ("Oxygen Advantage", "we", "us" or "our"). Oxygen Research Institute Ltd. is the data controller for the processing described in this policy, except where another organisation acts as an independent controller.

We operate the Oxygen Advantage website and online store, and offer physical products, education, online courses and certifications (together, the "Services"). Shopify supports our ecommerce operations, and Inspire360 is used to provide online learning. This policy explains how we collect, use and disclose personal information when you use our Services or contact us. Reading this notice does not constitute consent to processing that legally requires consent.

Personal Information We Collect or Process

Depending on your interaction with the Services, we may process:

·        Contact details, such as your name, email, telephone number, billing and delivery address.

·        Order and payment-related information, including items purchased, transactions, payment status, returns and refunds. Card information may be processed directly by payment providers rather than held by us.

·        Account information, preferences and identifiers used to provide access to our Services.

·        Shopping, device and usage information, such as products viewed, cart activity, browser, IP address and interactions with the website.

·        Communications, enquiries, feedback and customer support records.

·        Course and certification information, such as enrolment, course participation, learning progress, assessment results, course completion and certification status.

·        Marketing preferences and engagement with communications.

Health-related enquiries: If you provide health-related information when contacting our customer support team, we use it solely to respond to your enquiry. This information is retained securely within our customer support system and is not used for marketing or shared with third parties for their own purposes.

Personal Information Sources

We collect information directly from you; automatically through our website and similar technologies; from providers supporting transactions, course delivery and customer service; and, where relevant, from course organisers or other third parties involved in your registration.

How We Use Your Personal Information

Providing, Tailoring and Improving Services

We process information to manage accounts, process payments and purchases, fulfil and ship orders, handle returns, provide customer support, remember relevant preferences, secure our Services and improve their performance.

Online Courses and Certifications

When you purchase or enrol in a course, we use the information needed to enrol you and provide access through Inspire360. Relevant data, such as your name, email address and course purchased, is shared with the platform for that purpose. We may also process course participation, learning progress, assessments, completion and certification records to deliver training, provide support, administer assessments, issue certificates and verify qualifications when appropriate.

Marketing and Advertising

We may communicate about our products, courses and events, and display advertising. We use marketing contact details with consent where required or, for qualifying existing customers, within the limited exception permitted by Irish electronic marketing law. That exception covers our own similar products or services, requires an opt-out when contact details are collected and in each marketing message, and is subject to the applicable 12-month conditions. We use marketing platforms such as Klaviyo to manage campaigns and may segment audiences using purchase history, course interests and engagement with communications (profiling). You may opt out of direct marketing at any time. We do not use health information to create marketing segments.

Security, Fraud Prevention and Legal Matters

We use relevant information to help secure accounts, prevent fraud, comply with legal obligations, maintain required records, resolve disputes and protect legal rights.

Legal Bases for Processing

Where EU GDPR applies, the legal bases depend on the activity:

Where we rely on legitimate interests, these include effective customer service, protecting systems, preventing fraud, administering courses and improving our business. We balance those interests against individual rights. Where consent is relied upon, it can be withdrawn without affecting earlier lawful processing.

Cookies and Similar Technologies

We use cookies, pixels and similar tracking technologies, including those provided by third-party analytics and advertising partners, to operate our website, understand how visitors interact with it, improve our services, measure advertising performance and, where permitted, provide personalised advertising. These technologies may process online identifiers, device and browser information and information about interactions with our website. Where required by law, we obtain your consent before using non-essential cookies or similar tracking technologies.

You can accept or reject non-essential tracking and manage or withdraw your consent at any time using the cookie preferences tool available on our website. Further information about the cookies and tracking technologies currently in use, including their purposes, providers and retention periods, is available through the Cookie Declaration accessible from our website’s cookie preferences tool. General information about Shopify cookies is available at https://www.shopify.com/legal/cookies.

How We Disclose Personal Information

We may also process information provided when you register for or attend webinars and training events, including attendance, participation, questions and recordings where applicable. If you submit a review or testimonial, we process the information you provide and may publish it in accordance with the notice presented when it is collected.

We disclose information, as relevant, to Shopify (store and checkout), payment providers, Inspire360 (course access and learning records), HubSpot (customer relationship management and support), Klaviyo (marketing communications and segmentation), analytics and advertising partners, website experience and performance service providers, webinar providers, and providers supporting fulfilment, shipping, hosting and security. These parties may act as processors or, for particular activities, independent controllers. Shopify may act as an independent controller in connection with its own consumer services, such as Shop Pay and the Shop app. Information may also be shared when legally required or in connection with a business transaction, subject to applicable law.

Some providers process information on our instructions, while others may determine separate or shared purposes for certain activities. Where joint-controllership rules apply to particular advertising technology operations, we will provide the required information about the respective responsibilities. We seek appropriate contractual safeguards for processing on our behalf. We may also share information with competent authorities or advisers when required by law or necessary to protect legal rights.

Third-Party Websites and Links

Our Services may link to websites that we do not control. Their operators are responsible for their own privacy practices. Review their privacy notices before providing information. Content you post publicly, including on social media, may be visible to others.

Children's Data

Our purchasing and course registration arrangements are intended for adults and others legally able to enter the relevant transaction. Where a course or product is obtained for a child, a parent or guardian should arrange the purchase where required. We do not knowingly invite children to enrol independently. Different legal rules may apply to consent-based online services offered directly to children; in Ireland, the relevant digital age of consent is 16.

Security and Retention of Your Information

We use appropriate technical and organisational measures to protect personal information, although no electronic system is entirely risk-free. We retain data only as long as necessary for the relevant purpose and applicable legal obligations:

·        Accounting, tax and transaction records: generally six years where Irish recordkeeping law applies, or longer where another legal requirement or an active dispute requires it.

·        Customer accounts: while needed to provide the account, and afterwards only as reasonably necessary for legal claims, security, records or other justified purposes.

·        Training and certification records: for as long as reasonably necessary to provide and administer training, maintain a verifiable certification history and meet applicable obligations.

·        Customer service correspondence: for a proportionate period based on the enquiry, potential disputes and legal requirements.

·        Marketing records: while a valid marketing basis exists, with limited suppression records retained where needed to respect opt-outs.

·        Cookie and analytics data: according to the applicable purpose and configured retention settings.

We delete or anonymise information when no longer required unless continued retention is otherwise lawful.

Your Rights and Choices

Where GDPR applies, you may have the rights to access, rectify or erase your personal data; restrict processing; receive certain data in a portable format; and object to processing based on legitimate interests. Where processing depends on consent, you may withdraw it at any time without affecting earlier lawful processing. You may also have rights concerning decisions based solely on automated processing that produce legal or similarly significant effects, if such processing occurs.

You have an unconditional right to object at any time to processing of your personal information for direct marketing, including related profiling. If you object, we will stop that processing. You can also opt out using the unsubscribe link in marketing emails.

To exercise your rights, contact us using the details below. We may request proportionate information to verify identity. We generally respond within one month, subject to lawful extensions.

Information Required to Provide Services

Contact, payment and delivery details may be necessary to fulfil an order. Basic identity and enrolment information may be necessary to provide a purchased course and administer certification. If you do not provide necessary information, we may be unable to deliver the relevant product or service. Marketing consent is optional and is not a condition of purchase.

Complaints

Please contact us first if you have privacy concerns. You also have the right to complain to a competent supervisory authority, including the Irish Data Protection Commission at https://www.dataprotection.ie/.

International Transfers

Our service providers may process information outside Ireland or the European Economic Area, including in the United States. Where required, transfers outside the EEA rely on an applicable adequacy decision (including eligible organisations covered by an adequacy framework), European Commission Standard Contractual Clauses with any necessary supplementary measures, or another lawful transfer mechanism. You can contact us for information about the safeguards relevant to your information and how to obtain copies where available.

Changes to This Privacy Policy

We may update this policy to reflect changes in our operations, technology or legal requirements. We will post the revised version with an updated date and provide additional notice where required by law.

Contact

Oxygen Research Institute Ltd. (trading as Oxygen Advantage)
Loughwell, Moycullen, Co. Galway, H91 H4C1, Ireland
Email: hello@oxygenadvantage.com
Phone: +353 91 335536