Privacy policy

Information we collect

• Information you provide: your name, email, delivery and billing addresses, phone number, order details, account information and the messages or product photos you send for support, returns or repairs.
• Transaction records: purchased items, totals, currency, payment status, payment-provider transaction references, shipping details and refund or repair records. Payment details entered with a provider are processed by that provider; we do not collect full card numbers or security codes.
• Operational and security records: IP address, request time, browser information and technical logs needed to deliver pages, protect accounts, diagnose errors and prevent abuse.
• Optional store statistics, only after you allow them: a random first-party identifier, visit and checkout events, broad device category, supported market and normalized acquisition category such as search, social, email or direct. Our optional event interface does not collect full browsing URLs, raw referral URLs or payment-card details.

Why we use information

Where a law requires a legal basis, we use contractual necessity for orders and service, legal obligations for required records, legitimate interests for proportionate security and business administration, and consent for optional tracking where required. You may withdraw consent without changing the lawfulness of earlier processing.

• To operate your shopping session and account, fulfill orders, process payments and refunds, arrange delivery, provide warranty service and answer your requests.
• To protect the store, prevent fraud and maintain reliable technical services.
• To understand store visits and checkout performance when you choose to allow optional analytics.
• To send necessary order and account communications. Promotional messages require an applicable permission or other lawful basis, and you can unsubscribe from marketing without affecting order service.
• To maintain legally required business records, respond to valid legal requests and establish or defend legal claims.

Cookies and optional analytics

Essential WooCommerce and WordPress cookies support your cart, checkout, login and security. Browser local storage also remembers privacy choices and limited analytics-control information. The optional analytics panel lets you allow, decline, or withdraw and delete linked analytics data. Shopping works if you decline.

Optional analytics is off until you allow it. Global Privacy Control and Do Not Track signals disable optional collection. Declining or withdrawing does not erase the order and accounting records needed to fulfill a contract, handle refunds or comply with law.

The current Orlisset storefront does not activate Google advertising tags or Meta Pixel through its optional analytics control, and that control does not authorize advertising sharing. We will update the policy and obtain any necessary choice before enabling a new advertising integration.

Cookies, local storage and retention

Manage privacy choices or request access or deletion

Recipients and service providers

We disclose information only as needed to operate the store, fulfill your request, meet legal obligations or protect lawful interests. Recipients can include hosting and infrastructure providers, security and content-delivery services, our payment provider, delivery and fulfillment partners, repair partners, and email-service providers. A fulfillment or repair partner receives only the details needed for its work.

PayPal processes payment information under its own privacy statement, available from its payment interface and paypal.com. Its processing, fraud controls and retention are separate from our optional store statistics.

We do not sell personal information for money. Our current optional first-party statistics are not shared with advertising networks for cross-context behavioral advertising. We do not use sensitive personal information to infer personal characteristics.

We review government or law-enforcement requests for a lawful basis and appropriate scope, limit a required disclosure to the information necessary, and maintain a record as appropriate. We may also disclose information in a business reorganization subject to applicable privacy protections.

International processing and security

The operator is based in China. Store hosting, business administration, payment, shipping and support can involve processing outside your country of residence, including China and the countries where the relevant service providers operate. We apply safeguards required by applicable law for such transfers; contact us for information about a particular processing arrangement.

We use HTTPS and access controls and limit access to staff and providers who need it. No system can guarantee absolute security. Please use a unique account password and do not email full card details, passwords or unnecessary identity documents.

How long we retain information

• Orders, payment references, refunds and related tax/accounting records: retained for applicable legal and business-record obligations, generally up to seven years, and longer where a legal hold or unresolved claim requires it. These are not automatically erased when you decline optional analytics.
• Account information: retained while the account is active and as needed to provide service or meet legal obligations. You may request deletion.
• Optional analytics: consent lasts no more than 30 days. Browsing and linked journey records are subject to a maximum 90-day retention policy and scheduled cleanup; grant/deletion-control records can remain for up to 90 days after the grant expires so controls continue to work. Statutory transaction records are separate.
• Privacy choices in local storage: remain on that browser until changed or cleared; clearing storage removes the local preference and control information but is not itself a server-side deletion request.
• Support, return and warranty correspondence: kept as needed to resolve the request, provide the two-year warranty, meet record obligations and handle related claims. Marketing contact permissions, if collected, are retained until withdrawn or no longer needed.

Your rights and requests

Depending on where you live, you may ask to access, correct, delete or receive a copy of your information, restrict or object to processing, withdraw consent, or opt out of a sale, sharing or targeted advertising. California and other applicable US state laws may provide additional rights, including use of an authorized agent and freedom from discriminatory treatment for exercising rights. Canadian customers may request access, correction and withdrawal of consent subject to legal limits.

Email [email protected] with the subject Privacy request. Identify the request and the email used for your account or order. We verify identity proportionately, usually using that email and, if necessary, an order reference. An authorized agent may need evidence of authority. We do not require unnecessary sensitive documents.

We respond within the period required by the law that applies to your request, generally within 45 days; if an extension is permitted and necessary, we will explain it. If we decline a request, we explain any applicable review or appeal route. You can reply to request an appeal and contact the relevant privacy regulator or consumer authority. Legal record-keeping can limit deletion, and we will explain an applicable exception.

Privacy choices and Do Not Sell or Share requests

Children and policy changes

The store is not directed to children under 13, and we do not knowingly collect their information. We do not knowingly sell or share the personal information of anyone under 16. Contact us if you believe a child has provided personal information.

We update this policy when our practices change. The date above identifies the current version. Material changes will be highlighted as required, and a new consent request will be used where necessary rather than treating an earlier choice as permission for a different purpose.