Privacy policy

The controller is [Company name], with offices at ADDRESS, Cardiff, CF14 8LH. To exercise your rights or for any privacy question, write to info@orvelle.club.

We process the categories of data you provide or that are generated by using the site:

• Identification and contact data: name, email, phone, shipping and billing address.
• Order and payment data: products purchased, amounts, transaction outcome (full card details are handled by the payment provider, not by us).
• Browsing data: pages visited, device, cookies and similar identifiers (see the Cookie policy).

We process your data to:

• Fulfil orders and manage the contractual relationship (performance of the contract).
• Provide support and respond to your requests (performance of the contract / legitimate interest).
• Send you the newsletter and promotional communications, only with your consent, which can be withdrawn at any time.
• Comply with tax, accounting and legal obligations (legal obligation).
• Prevent fraud and ensure the security of the site (legitimate interest).

We share data only with parties that help us provide the service: couriers for shipping, payment providers, the e-commerce platform that hosts the store, IT and analytics suppliers. These parties process the data as processors, on our behalf and on our instructions. We do not sell your data to third parties.

Some suppliers may process data outside the European Economic Area. In that case we ensure that adequate safeguards are in place, such as the Standard Contractual Clauses approved by the European Commission.

We keep data for as long as necessary for the stated purposes: order data for the period required by tax obligations (usually 10 years), marketing data until consent is withdrawn, browsing data as indicated in the Cookie policy.

You have the right to access your data, rectify it, erase it, restrict or object to its processing, and to data portability. You can withdraw consent at any time and lodge a complaint with the data protection authority. To exercise these rights, write to privacy@orvelle.club.

We adopt appropriate technical and organisational measures to protect data from unauthorised access, loss or disclosure, including encrypted connections and controlled access.

We may update this notice over time. The version published on the site is always the one in force; substantial changes will be communicated to you where required by law.