Privacy Policy

This Privacy Policy explains how VG E-COM, trading as Orvicks and operating www.orvicks.com, collects, uses, and protects your personal information when you visit our website or make a purchase.

1. Who We Are & Contact

VG E-COM – Data Controller
Jacob Israël de Haanstraat 80, 1508 VG Zaandam, Netherlands
KvK: 92910831 · VAT: NL004986338B81
Email: support@orvicks.com · Website: www.orvicks.com

We primarily sell to UK & Irish consumers. For certain processing activities, we use Shopify as our e-commerce platform (see “Sharing Your Information”).

2. Scope

This policy applies to personal information collected via our website, checkout, customer support, email marketing, and cookies or trackers on our store.

3. Personal Information We Collect

• Identity & contact: name, email, phone, billing/shipping address.
• Order & account: items viewed, added, purchased, returns, order number, account preferences.
• Payment: payment method, status and confirmation from our payment providers (we do not store full card details).
• Device & usage: IP address, browser identifiers, session data, pages viewed, and interactions.
• Marketing preferences: newsletter opt-ins, consent records, unsubscribe choices.
• Communications: messages to support, reviews, or survey responses.
• Inferences: preferences derived from your browsing or purchase behaviour.

4. How We Collect Data

• Directly from you (checkout, forms, customer support).
• Automatically via cookies, pixels, and similar technologies when you browse.
• From partners (e.g., payment providers, analytics, fulfilment) where permitted by law.

5. Cookies & Similar Technologies

We use cookies, SDKs, and pixels to operate our store, measure performance, and personalise marketing (with your consent).

Cookie categories:

• Strictly necessary: required for checkout, security, and cookie consent.
• Analytics: e.g., Google Analytics (only if you consent).
• Advertising/retargeting: e.g., Meta, TikTok, or Google Ads (only if you consent).

You can manage or withdraw consent anytime via Cookie Preferences.

6. How We Use Data & Legal Bases

• Provide the Service & fulfil orders — performance of a contract.
• Customer support & communication — contract / legitimate interest.
• Fraud prevention & security — legitimate interest / legal obligation.
• Analytics to improve our website and performance — consent (for non-essential cookies).
• Marketing communications (email/SMS) — consent (unsubscribe anytime).
• Personalised advertising (Meta/Google) — consent.
• Legal & compliance (tax, accounting) — legal obligation.

If you consent to analytics or advertising cookies, these may include Google Analytics and Meta pixels to improve performance and deliver relevant ads. You can withdraw consent at any time.

7. Sharing Your Information

We only share your data with trusted providers necessary to operate our business:

• Shopify (host & platform): provides our online store and checkout. → See Shopify’s Privacy Policy: https://www.shopify.com/legal/privacy
• Payment processors: e.g., Shopify Payments, PayPal – secure payment handling.
• Logistics partners: for shipping and delivery of your order.
• Marketing & analytics vendors: email services, analytics, and advertising tools (with your consent).
• Professional & technical providers: IT, hosting, and customer service tools.
• Authorities: where legally required.
• Business transfers: in the event of a merger, acquisition, or sale.

We do not sell or rent your personal data.

8. International Transfers

Your information may be transferred outside the UK or Ireland (e.g., to the EU, US, or Canada) where our service providers operate.
When no adequacy decision or regulation applies, we rely on appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or the EU Standard Contractual Clauses (SCCs).

9. Data Retention

• Orders & invoices: minimum 6 years (tax and legal compliance).
• Customer service records: up to 3 years after resolution.
• Marketing data: until you withdraw consent or after a reasonable inactivity period.
• Cookies: as per durations listed in your cookie settings.

10. Your Rights (UK & EU GDPR)

• Access your personal data.
• Correct or delete it.
• Restrict or object to processing.
• Withdraw consent at any time (e.g., unsubscribe from marketing).
• Request data portability.

These rights are granted under the UK GDPR for UK residents, and under the EU GDPR for residents of Ireland.

To exercise your rights, email support@orvicks.com with “Data Rights Request” and your name, email, and order number. We may verify your identity and will respond within one month. You can also unsubscribe from marketing emails directly via the link in any message.

11. Security

We use appropriate technical and organisational measures, including:

• SSL encryption for transactions
• PCI-compliant payment systems
• Limited internal data access

While no system is completely secure, we take every reasonable step to protect your data.

12. Children’s Data

Our website is intended for adults. We do not knowingly collect data from anyone under 16. If a minor has submitted data, contact us to have it deleted.

13. Automated Decisions

We do not engage in automated decision-making that has legal or significant effects on individuals. Some fraud-prevention tools may operate automatically to protect customers.

14. Changes to This Policy

We may update this policy from time to time to reflect operational, legal, or regulatory changes. The latest version will always be available on this page.

15. Questions & Complaints

If you have questions about this Privacy Policy or our data practices, please contact us:

VG E-COM / Orvicks
Email: support@orvicks.co.com
Address: Jacob Israël de Haanstraat 80, 1508 VG Zaandam, Netherlands

You also have the right to lodge a complaint with the relevant data protection authority.
For UK residents: the Information Commissioner’s Office (ICO) — www.ico.org.uk · Tel. +44 303 123 1113
For residents of Ireland: the Data Protection Commission (DPC) — www.dataprotection.ie