Privacy Policy

Your privacy is important to us.

This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website or make a purchase from us. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What Personal Information Do We Collect?

We may collect the following types of personal information:

  • Name and contact details (e.g. email address, phone number, delivery address)
  • Payment information (e.g. card type, payment status – we never store full card details)
  • Order and delivery details
  • IP address, browser data, and cookies
  • Information you voluntarily provide, such as through customer service, live chat, or newsletter sign-up

How Do We Collect This Information?

We collect personal information when you:

  • Place an order through our website
  • Subscribe to our newsletter
  • Communicate with us via customer service or live chat
  • Browse our website (via cookies and similar technologies)

Why Do We Process Personal Information?

We process your data to:

  • Fulfil our contractual obligations (e.g. deliver ordered products)
  • Process payments and issue invoices
  • Send order and delivery confirmations
  • Provide customer support and handle returns or complaints
  • Improve our website and customer experience
  • Send newsletters and promotional offers (only with your active consent)

Legal Bases:

  • Contract performance (to process your order)
  • Legal obligation (e.g. tax and record-keeping requirements)
  • Legitimate interest (to improve services and communication)
  • Consent (for marketing and cookies)

Sharing of Information

We only share your information with trusted third parties when necessary:

  • Payment providers – to process your payment
  • Delivery and logistics partners – to deliver your order
  • IT service providers – such as hosting or e-commerce platforms
  • Authorities – if required by law

Some of our service providers may be located outside the UK. Where this is the case, we ensure appropriate safeguards are in place (such as adequacy regulations or the UK International Data Transfer Agreement). We never sell your personal information to third parties.

Your Rights

Under the UK GDPR you have the right to:

  • Be informed about how we use your personal data
  • Request access to the personal data we hold about you
  • Have inaccurate personal data corrected
  • Request erasure of your personal data
  • Restrict or object to the processing of your personal data
  • Data portability (transfer of your data to another provider)
  • Withdraw your consent at any time, where processing is based on consent
  • Lodge a complaint with the Information Commissioner’s Office (ICO) – ico.org.uk

To exercise any of these rights, please contact us using the details below. We will respond to verified requests within one month.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction.

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Order and transaction data is retained for a minimum of 6 years for tax and legal compliance (HMRC requirements).

Contact

If you have any questions about how we handle your personal information or wish to exercise your rights, please contact us at:

Orthorin Footwear
support@orthorin.com
https://orthorin.com