Last updated: [publish date]
ORUVA ("ORUVA", "we", "us") respects your privacy. This policy explains what personal data we collect when you visit or order from this store, why we collect it, and the rights you have over it under the EU General Data Protection Regulation (GDPR).
Who we are
ORUVA is operated by [Legal company name, e.g. ORUVA S.L.], registered at [registered business address], VAT/company ID [VAT / company registration number]. For any privacy question, contact us at our contact page or [support email].
What we collect
- Account & order data: name, email, delivery and billing address, phone, order history — collected when you create an account, check out or contact support.
- Payment data: processed directly by our payment provider; we never see or store full card numbers.
- Browsing data: pages viewed, cart activity and device/browser information, collected via cookies once you consent — see our cookie policy.
- Communications: messages you send through the contact form or by email.
Why we use it
- To process and fulfil your orders, including sharing your delivery address with our shipping and fulfilment partners (contract performance).
- To manage your account, wishlist and order history (contract performance).
- To reply to support requests (contract performance / legitimate interest).
- To measure site performance and, only with your consent, run analytics and marketing (consent — see the cookie banner).
- To meet accounting, tax and consumer-law obligations (legal obligation).
Who we share it with
We share the minimum data necessary with: Shopify (our e-commerce platform and payment infrastructure), our dropship fulfilment partner (to prepare and ship your order), carriers (to deliver it), and, only with consent, analytics/advertising providers (Google Analytics, Google Tag Manager). We do not sell your personal data.
International transfers
Some providers (including Shopify) process data outside the European Economic Area. Where that happens, transfers are covered by the EU Standard Contractual Clauses or an equivalent adequacy safeguard.
How long we keep it
Order and invoicing data is kept for as long as legally required for tax and accounting purposes. Account data is kept until you ask us to delete it. Marketing consent is kept until you withdraw it.
Your rights
Under GDPR you can ask us to:
- Access the personal data we hold about you
- Correct inaccurate data
- Erase your data ("right to be forgotten")
- Restrict or object to certain processing
- Receive your data in a portable format
- Withdraw consent at any time, without affecting past processing
To exercise any of these rights, contact us via our contact page. You can also lodge a complaint with your national data protection authority.
Cookies
We only set non-essential cookies after you consent via the cookie banner. See the full breakdown on our cookie policy.
Changes to this policy
We may update this policy as our practices evolve. Material changes will be reflected by the "last updated" date above.