Privacy policy

Last updated: 23 September 2026

This policy explains what personal data we collect, why, and the rights you have over it.

Who is responsible

The data controller is Orélth LTD, a company registered in England and Wales under company number 17266983, registered office 66 Paul Street, London EC2A 4NA, United Kingdom. For anything about your data, email contact@orelth.com.

What we collect

Your name, email, phone number and delivery and billing addresses;
Your order details and payment confirmation (we never see or store your full card details);
Measurements or sizing details you choose to send us;
Messages you send us, including through our contact and withdrawal forms;
How you use our website — pages viewed, device and browser — through cookies, where you allow it.

Why we use it, and our legal basis

To make and deliver your order and handle cancellations, returns and refunds — to perform our contract with you;
To answer your messages and help with sizing — our legitimate interest in serving you well;
To keep accounts and tax records — our legal obligation;
To prevent fraud and protect our store — our legitimate interest;
To send you news and offers by email, and to use analytics and advertising cookies — your consent, which you can withdraw at any time.

We do not sell your personal data.

Who we share it with

Only the providers we need to run our business: Shopify (our website and checkout), our payment providers, our couriers, our email marketing platform, Shopify Collabs (for our affiliate programme), and, where you have consented, analytics and advertising partners such as Google, Meta and TikTok. Each acts under contract and may use your data only to provide their service.

International transfers

Some of these providers process data outside the UK and EU. Where they do, the transfer is protected by an adequacy decision or by standard contractual clauses.

How long we keep it

Order and payment records are kept for 6 years, as UK tax law requires. Messages are kept for up to 2 years after our last contact. Marketing data is kept until you unsubscribe.

Your rights

You can ask to access, correct or delete your data, to restrict or object to how we use it, to receive a copy of it, and to withdraw consent at any time. Email contact@orelth.com — we reply within one month and may need to confirm your identity first. Every marketing email has an unsubscribe link.

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to the data protection authority in your EU country.

Security

Our website and checkout run on encrypted connections, and payments are processed by certified payment providers. No system is completely secure, but we take reasonable steps to protect your data.