Privacy policy
PRIVACY POLICY
Last updated: 15 March 2026
Orvelar operates this store and website, including all data, content, features, tools, products and services, with the aim of offering you a curated shopping experience (the "Services"). Orvelar uses Shopify technology to provide these Services. This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use or make a purchase through the Services, or when you communicate with us through any other means.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read and understood how your personal information is collected, used and disclosed.
1. Personal information we collect
We may collect or process the following categories of personal information:
Contact details: name, postal address, billing address, shipping address, phone number and email address.
Financial information: credit or debit card details, payment information and transaction details.
Account information: username, password, security questions and preferences.
Transaction information: items viewed, added to basket, purchased, returned or cancelled.
Communications: information provided when contacting our customer service.
Device information: data about your device, browser, IP address and unique identifiers.
Usage information: data on your interaction with the Services, including how and when you access them.
2. Sources of personal information
We collect personal information from the following sources:
Directly from you: when you create an account, make a purchase or contact us.
Automatically: through cookies and similar technologies when you use our Services.
From our service providers: when acting on our behalf to enable certain functionality.
From third parties and business partners: as part of our marketing and advertising activities.
3. How we use your personal information
We use your personal information for the following purposes:
Providing the Services: processing orders, managing payments, arranging shipping and handling returns.
Personalisation: offering you product recommendations and a shopping experience tailored to your preferences.
Marketing and advertising: sending you marketing communications and showing you relevant advertising, always with your consent where required by applicable law.
Security and fraud prevention: authenticating your account and detecting fraudulent or malicious activity.
Customer service: responding to your enquiries and handling your complaints effectively.
Legal compliance: responding to legal requirements and protecting the rights of Orvelar and its users.
4. How we disclose your personal information
We may share your personal information in the following circumstances:
With Shopify and service providers acting on our behalf (payment processing, logistics, data analytics, customer service).
With marketing partners to show you personalised advertising, in accordance with their own privacy policies.
When you request or expressly consent to it.
In the context of a business transaction (merger, acquisition or insolvency proceedings).
To comply with legal obligations or respond to requests from competent authorities.
5. Relationship with Shopify
The Services are hosted on Shopify, which collects and processes personal information in order to provide and improve the Services. Information you submit may be transmitted to Shopify and to third parties located in different countries. For more information on how Shopify handles your personal information, please refer to their Consumer Privacy Policy and exercise your rights through the Shopify Privacy Portal.
6. Cookies and similar technologies
We use cookies and similar technologies to improve your browsing experience, analyse traffic and personalise content and advertising. You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect how the Services function.
7. Third-party websites and links
The Services may include links to websites operated by third parties. We are not responsible for the privacy practices or content of such sites. We recommend reviewing their privacy policies before providing them with any personal information.
8. Minors
The Services are not intended for individuals under the age of 16. We do not knowingly collect personal information from minors. If you are a parent or legal guardian of a minor who has provided us with their information, you may contact us at info@orvelar.com to request its deletion.
9. Security and retention of your information
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss or improper disclosure. However, no security system is completely infallible.
We retain your personal information for as long as necessary to provide you with the Services, comply with our legal obligations and resolve any potential disputes.
10. Your rights
In accordance with the General Data Protection Regulation (GDPR) and applicable Spanish law, you have the following rights regarding your personal information:
Right of access: request information about the data we hold about you.
Right of rectification: request correction of inaccurate data.
Right of erasure: request deletion of your personal data.
Right to data portability: receive a copy of your data in a structured format.
Right to object: object to the processing of your data for certain purposes.
Right to restriction of processing: request that we restrict the use of your data in certain circumstances.
Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.
To exercise any of these rights, you may contact us at info@orvelar.com. We will respond within a maximum of 30 calendar days.
11. International transfers
Your personal information may be transferred, stored and processed outside the country in which you reside. Where we transfer information outside the European Economic Area (EEA), we will use recognised mechanisms such as the Standard Contractual Clauses (SCCs) approved by the European Commission.
12. Marketing communications
We may send you marketing communications by email or SMS if you have given your consent or where there is an existing business relationship. You can unsubscribe at any time by replying STOP to our SMS messages or using the unsubscribe link in our emails.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will post the updated version on this website and update the "Last updated" date.
14. Complaints
If you have any complaint regarding the handling of your personal information, you may contact us at info@orvelar.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
15. Contact
For any queries regarding this Privacy Policy or to exercise your rights:
Orvelar · Spain