Privacy

When you place an order: your name, email address, delivery address, billing address, telephone number if you give one, the items ordered, and the amount charged. We also receive the card brand, last four digits, issuing country and a payment token from our payment provider. We never receive the full card number.

When you browse: the pages you visit, the approximate region your connection resolves to, and your device and browser type. This is ordinary server logging, retained for 90 days and used to keep the site working.

Your IP address is recorded with an order. It is one of the pieces of evidence used to establish that a transaction was genuine if it is ever disputed.

When you email us: whatever you write, plus your email address, kept with your order record so a later conversation has context.

To take payment, to pack and deliver your order, to answer you when you get in touch, to handle returns and breakages, and to defend a payment dispute if one is raised.

We do not build advertising profiles, we do not run third-party advertising trackers on this site, and we do not sell or rent customer information to anyone, for any purpose.

Our payment provider, which processes the charge and holds the card data we never see.

The carrier delivering your parcel, which receives your name, delivery address and telephone number so it can deliver and contact you about delivery.

Our email provider, which sends order confirmations and replies.

Nobody else — other than where we are legally required to disclose something, in which case we will tell you unless we are prohibited from doing so.

This site sets one cookie, which holds the contents of your basket so it survives a page reload. It expires after 30 days and contains no personal information.

There are no advertising cookies, no cross-site trackers and no third-party analytics pixels on this site. There is nothing to opt out of, which is why you were not shown a consent banner.

Order records: seven years, as tax and accounting rules require.

Email correspondence: three years from the last message.

Server logs: 90 days.

Basket cookie: 30 days, on your own device.

Email privacy@oroviatable.com to ask for a copy of everything we hold about you, to correct something wrong, or to have your information deleted. We answer within 30 days.

Deletion has a limit we should be honest about: we cannot delete an order record we are legally required to retain for tax purposes until that period expires. Everything not covered by that obligation can be removed on request.

Depending on where you live you may have additional statutory rights, including the right to complain to a supervisory authority. Nothing in this policy removes a right you have by law.