Privacy Policy

Orivaine (company number 17265496, registered in England and Wales) is the data controller responsible for your personal data. You can contact us at hello@orivaine.com.

Identity data: name, username or similar identifier.

Contact data: email address, telephone number, delivery and billing address.

Transaction data: details of products you have purchased from us.

Technical data: IP address, browser type, time zone, and cookies (see our Cookie Notice).

Marketing data: your preferences for receiving marketing from us.

Communications data: messages you send us via email or our contact form.

We do not collect any Special Category data (such as health data) and we do not knowingly collect data from children under 13.

Directly from you when you place an order, create an account, or contact us.

Automatically via cookies and similar technologies when you visit our website.

Via third-party platforms including Amazon, where purchases made through Amazon are governed by Amazon's own privacy policy.

To process and fulfil your order — lawful basis: Performance of a contract.

To manage our relationship with you (including support queries) — lawful basis: Legitimate interests.

To send you marketing emails (where you have opted in) — lawful basis: Consent.

To comply with legal obligations — lawful basis: Legal obligation.

To improve our website and products — lawful basis: Legitimate interests.

We will only send you marketing communications if you have opted in to receive them. You may withdraw your consent at any time by clicking 'unsubscribe' in any marketing email or by contacting us at hello@orivaine.com.

We may share your data with our fulfilment and logistics partners (solely for order delivery), payment processors such as Stripe and PayPal (under their own privacy policies), Amazon where you purchase via Amazon Marketplace (under Amazon's privacy policy), IT and website hosting providers acting as data processors under our instruction, and HM Revenue & Customs or other authorities where required by law.

We do not sell your personal data to any third party.

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Order data is retained for 7 years in line with HMRC requirements. Marketing consent records are retained until you withdraw consent.

Under UK GDPR, you have the right to: request access to your personal data (a 'subject access request'); request correction of inaccurate data; request erasure of your data ('right to be forgotten'); object to processing of your data for marketing purposes; request restriction of processing in certain circumstances; request transfer of your data to another controller (data portability); and withdraw consent at any time where we rely on consent.

To exercise any of these rights, contact us at hello@orivaine.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

We do not routinely transfer your data outside the UK. Where any third-party processor operates outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR Chapter V.

We may update this Privacy Policy from time to time. The current version will always be available on our website. We will notify you of material changes by email where we hold your contact details.