This Privacy Policy describes how Orvani London (“we”, “us”, or “our”) collects, uses, stores and shares your personal data when you visit our website, make a purchase, contact us, or otherwise use our services. In this policy, “personal data” and “personal information” mean the same thing: information that identifies you or can reasonably be linked to you.
Section 1 – Data Controller
The data controller responsible for your personal data is:
Orvani London
Lepant 270, 08013 Barcelona, Spain
Email: info@orvanilondon.com
The data controller is the party that decides why and how your personal data is processed. If you have any question about data protection at Orvani London, or wish to exercise any of the rights set out in Section 12, contact us at the address above and we will respond within one month.
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where applicable, the EU General Data Protection Regulation.
Section 2 – Information We Collect
When you purchase something from Orvani London, we collect the personal data necessary to process and fulfil your order. This may include your:
- Full name
- Billing and shipping address
- Email address
- Telephone number
- Order and transaction information
- Payment-related information
When you browse our website, certain technical data may also be collected automatically, including your IP address, browser information, device information and information about how you interact with our website.
Where permitted and with your consent where required, we may also use your contact information to send you emails about new products, offers, updates and other information relating to Orvani London.
We do not knowingly collect personal data from children under 16. We do not collect special category data such as health, biometric or political data.
Section 3 – Our Lawful Bases for Processing
Under data protection law we must have a lawful basis for each purpose for which we process your personal data. Ours are:
- Performance of a contract — processing your order, taking payment, arranging delivery, handling returns and exchanges.
- Legal obligation — keeping tax, accounting and consumer-law records.
- Legitimate interests — preventing fraud, securing our website, understanding how the site is used and improving our products and service. We balance these interests against your rights and freedoms.
- Consent — marketing emails and non-essential cookies. You can withdraw consent at any time.
Section 4 – Consent
When you provide personal data in order to complete a transaction, verify your payment, place an order, arrange delivery, request a return or contact our Customer Support team, we process that data for the purposes necessary to provide those services.
Where your consent is required for another purpose, such as certain forms of marketing, we will request your consent or provide an appropriate opportunity to opt out.
How Can I Withdraw My Consent?
Where processing is based on your consent, you may withdraw that consent at any time by emailing info@orvanilondon.com, or by using the unsubscribe link in any marketing email.
Withdrawing consent does not affect processing that was lawfully carried out before your withdrawal.
Section 5 – How We Use Your Information
We may use your personal data to:
- Process and fulfil your orders
- Process payments and refunds
- Arrange shipping and delivery
- Provide order tracking
- Handle returns, replacements and customer service requests
- Detect and prevent fraudulent or unauthorised transactions
- Communicate with you regarding your order
- Improve our website, products and customer experience
- Comply with applicable legal and regulatory obligations
- Send marketing communications where permitted
Section 6 – Disclosure of Personal Data
We may share personal data where reasonably necessary to operate our business and provide our services. This may include sharing data with service providers involved in:
- Ecommerce infrastructure
- Payment processing
- Order fulfilment
- Shipping and logistics
- Customer support
- Analytics
- Advertising and marketing
- Fraud prevention
These providers act as processors on our behalf and are bound by contract to process personal data only on our instructions and to keep it secure. We do not sell your personal data.
We may also disclose data where required by applicable law, regulation, legal process or governmental request.
Section 7 – Shopify
Our online store is hosted through Shopify, which provides the ecommerce infrastructure that enables us to offer and sell our products and services online.
Information processed through our store may therefore be processed by Shopify in accordance with its applicable terms, security measures and privacy practices. Payment information may also be processed by Shopify and/or the payment provider selected during checkout.
Payment card information is handled in accordance with applicable payment-industry security requirements, including PCI-DSS where applicable.
Section 8 – Third-Party Service Providers and International Transfers
We work with third-party providers that help us operate Orvani London. These providers generally process personal data only to the extent necessary to perform the services they provide. Certain providers, including payment processors, advertising platforms, analytics providers, fulfilment partners and logistics companies, maintain their own privacy policies governing their processing of personal data.
Some providers operate from, or process data in, countries outside the United Kingdom and the European Economic Area. Where personal data is transferred internationally, we rely on an appropriate safeguard recognised under data protection law, such as UK adequacy regulations, the UK International Data Transfer Addendum or Standard Contractual Clauses.
Section 9 – Analytics and Advertising
We may use analytics and advertising technologies to understand how visitors interact with Orvani London, measure website performance and improve our marketing. These services may include platforms such as Google and other advertising or analytics providers that we use from time to time.
Depending on your location and applicable law, certain advertising or analytics technologies require your consent before they are activated.
Section 10 – External Links
Our website may contain links to websites or services operated by third parties. When you leave Orvani London or access a third-party website, that third party's privacy practices apply. We encourage you to review the privacy policies of any external websites you visit.
Section 11 – Security
We take reasonable organisational and technical measures designed to protect personal data against unauthorised access, loss, misuse, disclosure, alteration or destruction. Our website uses secure technologies such as SSL encryption for information transmitted through the website.
However, no method of electronic transmission or storage can be guaranteed to be completely secure. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and, where the risk is high, notify you directly.
Section 12 – Cookies
Like many ecommerce websites, Orvani London uses cookies and similar technologies. Cookies may be used to:
- Operate essential website functionality
- Remember your preferences
- Maintain your shopping cart
- Improve website performance
- Understand how visitors use our website
- Measure advertising performance
- Personalise content and advertising where permitted
Third-party providers may also use cookies and similar technologies when providing analytics, advertising or other services to us. Where required by law, you are given appropriate choices regarding non-essential cookies through our cookie consent system.
Managing Cookies
Most browsers allow you to control or delete cookies through their settings. Disabling certain cookies may affect website functionality. You may also manage cookie preferences through our cookie consent banner where provided.
Section 13 – Your Data Protection Rights
Under the UK GDPR and the Data Protection Act 2018 you have the following rights in relation to your personal data:
- Right of access — to obtain a copy of the personal data we hold about you
- Right to rectification — to have inaccurate or incomplete data corrected
- Right to erasure — to have your data deleted, where there is no overriding reason to keep it
- Right to restrict processing — to limit how we use your data
- Right to object — including an absolute right to object to direct marketing
- Right to data portability — to receive your data in a structured, machine-readable format
- Right to withdraw consent — at any time, where processing is based on consent
- Rights relating to automated decision-making — we do not make decisions about you by automated means that produce legal or similarly significant effects
To make a request, email info@orvanilondon.com. Exercising these rights is free of charge and we will respond within one month. We may need to verify your identity first.
Right to Complain
If you are unhappy with how we have handled your personal data you can complain to the UK supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk/make-a-complaint or on 0303 123 1113. We would appreciate the chance to resolve the matter first.
Section 14 – Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy. In practice:
- Order and transaction records — kept for 6 years, to meet tax and accounting obligations
- Customer service correspondence — kept for 2 years after the enquiry is closed
- Marketing contact data — kept until you unsubscribe or withdraw consent
- Website analytics data — kept in line with the retention settings of the analytics provider
When data is no longer needed it is deleted or anonymised.
Section 15 – Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices, services, technologies or legal obligations. Any updated version becomes effective when published on this website unless otherwise stated. We encourage you to review this Privacy Policy periodically.
Section 16 – Contact Information
If you have questions about this Privacy Policy, your personal data or how Orvani London handles data protection matters, please contact us:
Orvani London
Email: info@orvanilondon.com
Business Address: Lepant 270, 08013 Barcelona, Spain
Customer Service Hours: Monday to Friday, 09:00–17:00 CET