Privacy Policy

ORELMORA LTD is the controller of the personal information described in this Privacy Policy.

We may collect information that you provide directly to us, including your name, email address, telephone number, delivery and billing addresses, account details, order information and communications with ORELMORA.

When you create an account, we may process information associated with your account, including email verification, saved addresses, order history and account activity.

When you place an order, we process information necessary to manage the transaction, delivery, payment status, reservation status and customer support associated with that order.

If you contact us through our enquiry form, we may store your name, email address, telephone number, enquiry reason, order number and message.

If you subscribe to ORELMORA marketing communications, we process your email address, subscription status, consent information, verification status and related communication activity.

We may also collect technical information such as IP address, browser type, device information, pages visited, timestamps and security-related logs where necessary for website operation, security and diagnostics.

We process personal information only where we have an appropriate lawful basis.

We use information where necessary to perform a contract or take steps at your request before entering into a contract, including processing orders, managing reservations, arranging delivery or collection and providing customer support.

We may process information to comply with legal obligations, including accounting, tax, fraud prevention, regulatory and record-keeping requirements.

We may rely on legitimate interests where appropriate, including protecting ORELMORA systems, preventing abuse, improving website performance, managing customer relationships and maintaining the security of our services, provided those interests are not overridden by your rights.

Where consent is required, including for certain marketing communications or non-essential cookies, we rely on your consent. You may withdraw that consent at any time.

ORELMORA does not sell your personal information.

We may share personal information with service providers that assist us in operating the website, processing payments, sending emails, providing infrastructure, managing databases, preventing fraud, delivering orders and supporting customers.

These providers may include payment service providers, email delivery providers such as Resend, hosting and infrastructure providers, delivery providers and other professional service providers used to operate ORELMORA.

When Mercuryo or another payment provider is available for a transaction, that provider may process information in accordance with its own privacy terms and regulatory obligations.

We may also disclose information where required by law, regulation, legal process or a valid request from a competent authority, or where necessary to protect our rights, users or services.

Some of the service providers used by ORELMORA may process personal information in countries outside the United Kingdom or the European Economic Area.

Where personal information is transferred internationally, we take steps required by applicable data protection law to ensure an appropriate level of protection. Depending on the circumstances, this may include reliance on an adequacy decision, contractual safeguards or another lawful transfer mechanism.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to provide our services, maintain business records, resolve disputes and comply with legal, accounting and reporting obligations.

Retention periods may differ depending on the type of information. For example, order and accounting records may need to be kept longer than general enquiry information.

Marketing subscription information may be retained where necessary to record consent, withdrawal of consent or an unsubscribe request and to prevent a person who has opted out from being unintentionally added back to a mailing list.

When personal information is no longer required, it will be deleted, anonymised or otherwise handled in accordance with applicable law.

Depending on the law that applies to you, you may have rights relating to your personal information, including the right to request access, correction, deletion or restriction of processing.

You may also have the right to object to certain processing, request data portability and withdraw consent where processing is based on consent. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

We may need to verify your identity before completing certain requests.

To exercise your rights, contact ORELMORA using the details in the Contact section below.

ORELMORA sends marketing communications only where an appropriate legal basis exists.

Newsletter subscriptions submitted through the ORELMORA website require confirmation of the email address before the subscription becomes active, unless the email address has already been appropriately verified through an ORELMORA account and the user provides explicit marketing consent.

Creating an account or placing an order does not automatically subscribe you to ORELMORA marketing communications.

You may unsubscribe from marketing communications at any time using the unsubscribe mechanism provided in marketing emails or by contacting ORELMORA.

The ORELMORA website may use cookies and similar technologies necessary for core website functionality, authentication, security, shopping cart operation and user preferences.

Where non-essential cookies or tracking technologies are used for analytics, personalisation or marketing, they will be handled in accordance with applicable consent requirements.

More information about the cookies we use and the available controls is provided in our Cookie Policy.

We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include access controls, authentication, verification procedures, secure infrastructure, limited staff access and appropriate safeguards with service providers.

No electronic system or method of transmission can be guaranteed to be completely secure. We therefore cannot promise absolute security, but we take reasonable measures to protect the information entrusted to us.