Privacy Notice
1. Who is responsible for your data
This Privacy Notice explains how [COMPANY NAME] LIMITED, [REGISTERED OFFICE ADDRESS], Hong Kong ("we", "us") handles personal data when you visit https://orivellehq.com, place an order or contact us. We are the data controller for this Website (the "data user" in the words of the Hong Kong Personal Data (Privacy) Ordinance). Questions and requests about your data: support@orivellehq.com or +1 (970) 464-8577.
2. What we collect and why
| Purpose | Data | Legal basis |
|---|---|---|
| Processing and delivering your order | Name, delivery address, e-mail address, phone number, order details, payment status (card brand and last four digits only) | Performance of the contract |
| Customer support, returns and complaints | Your contact details, order number and the content of your messages or calls | Contract / legitimate interest |
| Order tracking | Order number, tracking number, e-mail address you enter on the tracking page | Contract |
| Marketing e-mails | E-mail address and order history — only if you tick the opt-in box at checkout | Consent (withdraw at any time) |
| Website security, order attribution, analytics and advertising measurement | IP address, device and browser data, pages viewed, referral and campaign parameters, cookie identifiers | Legitimate interest / consent where required |
| Fraud prevention, accounting and legal obligations | Order and payment records | Legal obligation / legitimate interest |
If you do not provide the data needed to process an order (for example a delivery address), we cannot fulfil it. We do not collect health data and we do not knowingly collect data from anyone under 18.
3. Who receives your data
We share personal data only with service providers that need it to do their job for us, under contracts that restrict their use of it:
- Payment processors and, where you choose them, wallet or buy-now-pay-later providers (they handle your payment details under their own privacy terms);
- Order management and customer-relationship software used to process, ship and support orders;
- Fulfilment partners and shipping carriers, plus the tracking service that powers the Order tracking page;
- E-mail, telephone and customer-support tools used to send order confirmations, shipping updates and replies;
- Analytics, attribution and advertising-measurement services that record how visitors reach and use the Website;
- Hosting, security and IT providers; and
- Professional advisers, payment networks, courts or authorities when the law requires it or to protect our rights.
We do not sell your personal data for money. Some measurement cookies may count as "sharing" for cross-context behavioural advertising under California law — see sections 5 and 8 for how to opt out.
4. International transfers
We are based in Hong Kong SAR. Our service providers may process personal data in the United States and in other countries, and your data may therefore be transferred to and stored in countries whose data-protection laws differ from those of your own. Where data from the European Economic Area, the United Kingdom or Switzerland is transferred abroad, we rely on recognised safeguards such as standard contractual clauses or a provider's participation in an approved data-transfer framework; for other transfers we require contractual protections from the provider.
5. Cookies and similar technologies
The Website uses cookies and similar technologies: essential ones that make the checkout and order tracking work, analytics and attribution ones that tell us how the site is used and which campaign an order came from, and advertising-measurement ones that record whether our advertising works. Analytics and advertising-measurement cookies are used only where the law allows it, or with your consent where consent is required.
You can delete or block cookies in your browser settings; blocking essential cookies may stop the checkout from working. We honour the Global Privacy Control signal where it applies. To opt out of measurement cookies you can also e-mail us at the address below.
6. How long we keep data
Order and payment records are kept for as long as accounting, tax and consumer-protection laws require (typically up to seven years). Support conversations are kept for up to three years after the last contact. Marketing data is kept until you unsubscribe. When data is no longer needed it is deleted or anonymised.
7. Security
Payment pages are encrypted (TLS) and payment data is handled by PCI-DSS-compliant processors. We limit access to personal data to people who need it and require the same of our providers. No system is perfectly secure; if a breach affecting you occurs, we will inform you and the competent authority as the law requires.
8. Your rights
Depending on where you live you may have the right to access the data we hold about you, to correct it, to delete it, to restrict or object to its use, to receive a copy in a portable format, and to withdraw consent at any time (this does not affect processing done before withdrawal).
Hong Kong (Personal Data (Privacy) Ordinance, PDPO): you have the right to request access to the personal data we hold about you and to request its correction. We use your personal data for direct marketing only with your consent, and you may opt out of direct marketing at any time, free of charge, by e-mailing us or using the unsubscribe link in any marketing e-mail. You may lodge a complaint with the Office of the Privacy Commissioner for Personal Data, Hong Kong.
California residents (CCPA/CPRA): you have the right to know what personal information we collect, use and share, to delete it, to correct it, to opt out of the sale or sharing of personal information, to limit the use of sensitive personal information (we do not use it), and not to be discriminated against for exercising these rights. We do not sell personal information; to opt out of sharing for cross-context behavioural advertising, e-mail us or turn on Global Privacy Control in your browser. An authorised agent may make a request on your behalf if we can verify the authorisation.
EEA, UK and Swiss residents (GDPR / UK GDPR): the rights above apply in full, and you may lodge a complaint with your local data-protection authority.
To exercise any right, e-mail support@orivellehq.com from the address used for your order (we may ask for more information to verify your identity). We answer within the time the applicable law allows — normally within 40 days for requests under the PDPO, 30 days under the GDPR and 45 days for California requests.
9. Marketing e-mails
We send marketing e-mails only if you opted in at checkout or elsewhere on the Website. Every marketing e-mail contains an unsubscribe link; you can also unsubscribe by e-mailing us. Unsubscribing does not stop order and shipping notifications, which are part of the service. We do not send marketing text messages and we do not make marketing calls.
10. Changes to this notice
We update this notice when our practices change; the effective date is shown below. Material changes will be announced on the Website. Effective date: September 17, 2026.
11. Contact
[COMPANY NAME] LIMITED, [REGISTERED OFFICE ADDRESS], Hong Kong
E-mail: support@orivellehq.com
Phone: +1 (970) 464-8577