Privacy policy

This Privacy Policy explains how Orvelanique ("we", "us", "our") collects, uses, and discloses personal information when you visit https://orvelanique.shop (the "Site") or place an order, and what rights you have.

We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's Anti-Spam Legislation (CASL), and, where applicable, the privacy laws of your province — including the Quebec privacy regime as amended by Law 25, the British Columbia Personal Information Protection Act, and the Alberta Personal Information Protection Act.

1. Who we are

• Organisation: Orvelanique
• Website: https://orvelanique.shop
• Privacy contact: hello@orvelanique.shop (marked "Privacy Officer")

Our Privacy Officer is responsible for compliance with this policy and with applicable privacy legislation.

2. What we collect

Information you give us

• contact details: name, email address, delivery and billing address, telephone number;
• order details: products purchased, order value, order number, delivery instructions, returns and refunds;
• payment details: we do not receive or store full card numbers. Our payment processors send us only the transaction result, the card brand, the last four digits, and the billing postal code;
• account details: login, order history, saved preferences;
• communications: emails, chat messages, contact-form entries, and attachments;
• content you publish: reviews, ratings, photographs, and comments.

Information collected automatically

• device and connection data: IP address, device type, operating system, browser, language, screen size;
• usage data: pages viewed, products viewed, search terms, referring URL, session duration;
• cookie and pixel identifiers;
• fraud signals, such as mismatches between billing and delivery details.

Information from third parties

• payment processors and fraud-prevention services;
• carriers and fulfilment partners (tracking events, delivery confirmations);
• analytics and advertising providers;
• address validation services.

3. Why we collect it

We collect personal information only for purposes a reasonable person would consider appropriate in the circumstances:

• to process and deliver your order, including payment, dispatch, returns, and refunds;
• to provide customer service and resolve complaints;
• to detect and prevent fraud, and to secure the Site;
• to meet tax, accounting, and other legal obligations;
• to analyse and improve the Site and our product range;
• to send marketing communications you have consented to receive; and
• to personalise your experience on the Site.

4. Consent

We collect, use, and disclose personal information with your knowledge and consent, except where the law permits collection without consent — for example, where required by law or necessary to investigate a breach of an agreement or a contravention of law.

You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent to marketing does not affect transactional messages about your order. Withdrawing consent to essential processing may mean we can no longer fulfil an order.

Where consent is required for cookies or advertising, we ask for it before setting non-essential cookies and you can change or withdraw it at any time through the cookie preferences.

5. Cookies and tracking

We use cookies, pixels, and local storage for four purposes: strictly necessary functions (cart, checkout, security), functional preferences (language, currency, region), analytics, and advertising.

Strictly necessary cookies cannot be switched off without breaking checkout. Non-essential cookies are set only after you consent, and you can withdraw that consent at any time. You can also block or delete cookies in your browser settings.

6. Disclosure to third parties

We do not sell personal information. We disclose it only as needed to:

• our ecommerce platform and hosting provider;
• payment processors and fraud-prevention providers;
• carriers, fulfilment centres, and logistics partners;
• email, SMS, chat, and helpdesk providers;
• analytics and advertising providers, subject to your consent;
• review platforms;
• IT, security, and backup providers;
• professional advisers (lawyers, accountants, auditors);
• competent authorities, courts, and law enforcement where required by law or necessary to establish, exercise, or defend a legal claim; and
• a successor entity in the event of a merger, acquisition, or sale of assets.

Where we disclose personal information to a service provider, we use contractual or other means to ensure it is protected to a comparable standard. Some providers process data outside Canada, including in the United States; where that happens, the information is subject to the laws of those jurisdictions and may be accessible to their authorities.

7. Safeguards

We protect personal information with safeguards appropriate to its sensitivity, including TLS encryption in transit, access controls, logging, and PCI-DSS-compliant payment processing so that card data never passes through our servers.

If a breach of security safeguards creates a real risk of significant harm to you, we will report it to the Office of the Privacy Commissioner of Canada and notify you as required by the Breach of Security Safeguards Regulations, and to any provincial regulator where provincial law requires.

8. Retention

We keep personal information only as long as necessary for the purposes described above:

• order, invoice, and payment records: 7 years, in line with tax requirements;
• account data: for the duration of the account, then 12 months;
• customer service correspondence: 36 months;
• marketing contact data: until you withdraw consent, then up to 24 months for suppression purposes;
• analytics data: up to 14 months in identifiable form;
• security and fraud logs: 12 months.

When information is no longer needed, we destroy, erase, or anonymise it.

9. Your rights

You have the right to:

• access the personal information we hold about you, and information about how we use and disclose it;
• correct inaccurate or incomplete information;
• withdraw consent to the collection, use, or disclosure of your information, subject to legal restrictions;
• ask questions about our practices and our compliance with PIPEDA; and
• complain to our Privacy Officer, and to the Office of the Privacy Commissioner of Canada if you are not satisfied with our response.

To exercise a right, email hello@orvelanique.shop with the subject "Privacy Request". We respond within 30 days of receiving a written request, as required by PIPEDA. If we need an extension, we will tell you within that period and explain the reason in writing. We may ask for information needed to verify your identity, such as your order number and the email address used for the order.

Residents of Quebec, British Columbia, and Alberta have additional rights under their provincial privacy laws, including, in Quebec, the right to data portability and to request the de-indexing of certain information. Those rights apply in addition to this policy, and we will honour them.

10. Marketing and CASL

We send commercial electronic messages only with your express or implied consent in accordance with CASL. Every message identifies Orvelanique, includes our mailing address or a link to the Site, and contains a working unsubscribe mechanism that takes effect within 10 business days of your request.

You can withdraw consent to marketing at any time using the unsubscribe link, or by emailing hello@orvelanique.shop. We may still send transactional messages about your order.

If you consent to text messages, you can withdraw that consent at any time by replying STOP.

11. Children

The Site is not directed to children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Third-party links

The Site may link to third-party websites we do not control. Their privacy practices are governed by their own policies, and we are not responsible for them.

13. Challenges and complaints

If you have a concern about how we handle personal information, contact our Privacy Officer first at hello@orvelanique.shop. We will investigate and respond in writing.

If you are not satisfied, you may complain to the Office of the Privacy Commissioner of Canada (www.priv.gc.ca). Residents of Quebec may complain to the Commission d'accès à l'information du Québec; residents of British Columbia and Alberta may complain to the privacy commissioner of their province.

14. Changes

We may update this policy to reflect changes in our practices or the law. The current version is always available on this page with the date of the last update. Where a change materially affects how we use information already collected, we will provide additional notice.

15. Contact

• Store: Orvelanique
• Website: https://orvelanique.shop
• Privacy Officer: hello@orvelanique.shop