Privacy Policy

The privacy of our customers is crucial to us. This Privacy Policy describes how we process personal data in accordance with UK GDPR, the Data Protection Act 2018, and other applicable data protection regulations in the United Kingdom.

1. Data Controller
The data controller for personal data is Ovarenne, owned and operated by LAYAL GROUP LTD. Contact: info@ovarenne.com, Phone: +447466892230.

Company details:

  • Registration Number: 16584632
  • DUNS Number: 233980178
  • Registered Address: 25 Tompstone Rd, West Bromwich B71 3SN, United Kingdom

2. What data do we process
We process data necessary to handle orders and our services, including:

  • order data, such as name, delivery address, email, phone number, and payment details necessary for transaction processing,
  • user account data, if created,
  • data related to website usage, such as IP address, device type, browser, and how the service is used,
  • data provided when subscribing to the newsletter, only with the user's voluntary consent.

3. Purposes and legal basis for processing
We process personal data for the purpose of:

  • order fulfillment and deliveries,
  • payment processing and invoicing,
  • communication with customers, including answering inquiries and handling complaints and returns,
  • fulfilling legal obligations, including tax and accounting,
  • website traffic analysis and marketing activities, only where user consent is required.

Legal bases under UK GDPR include: contract performance, fulfillment of a legal obligation, user consent, and the legitimate interest of the controller, such as website security, fraud prevention, and basic business operations.

4. Data sharing
Data may be shared only to the extent necessary for order fulfillment and customer service. Recipients may include payment operators, courier companies, IT service providers, hosting providers, analytics providers, and the Shopify platform.

Our website operates on the Shopify platform. Shopify may process personal data as a service provider or a data processor on behalf of the merchant. More information can be found here: Shopify Privacy Policy.

5. Payments
Transaction data transmitted through payment gateways is processed in accordance with applicable security standards, including PCI-DSS, and stored only as long as necessary to process payments, handle orders, and comply with legal obligations.

6. Analytics and marketing
We may use analytical tools, such as Google Analytics, to analyze website traffic. Data may include IP address, device information, browser, and user behavior on the site. Analytical and marketing data processing is based on consent, if required. Consent can be withdrawn at any time.

7. Cookies
The website uses cookies necessary for the store's operation, including the shopping cart, login, and order fulfillment. Additional analytical and marketing cookies operate only according to user consent settings. Consent can be changed or withdrawn in the cookie banner settings.

More information: Shopify Cookie Policy.

8. Data security
Data is transmitted using SSL/TLS encryption and stored with appropriate technical and organizational measures. We implement measures to protect data from unauthorized access, loss, misuse, or disclosure.

9. Retention period
Personal data is stored only as long as necessary to fulfill the purposes described in this Privacy Policy. The retention period may be extended if required by tax, accounting, legal regulations, or the need to defend against claims under United Kingdom law.

10. User rights
In accordance with UK GDPR, the user may have the right to access data, rectify data, erase data, restrict processing, data portability, object to processing, and withdraw consent at any time if processing is based on consent.

To exercise your rights, please contact us: info@ovarenne.com.

The user also has the right to lodge a complaint with the Information Commissioner’s Office (ICO), the supervisory authority for data protection in the United Kingdom.

11. International transfers
In the event of transferring personal data outside the United Kingdom, we apply appropriate safeguards in accordance with UK GDPR, such as adequacy decisions, the International Data Transfer Agreement, the UK Addendum to standard contractual clauses, or other legal mechanisms provided by applicable regulations.

12. Policy changes
The Privacy Policy may be updated due to changes in regulations, services, or data processing methods. The current version is available on the website, and we will inform customers about significant changes if legally required.