PRIVACY POLICY

1. Data Controller

This Privacy Policy applies to the website Orlanya, operated by:

R-Commerce LLC
Company incorporated under United States law (Limited Liability Company – LLC)
State of registration: New Mexico, United States
Address:
704 Wallace St Suite 561
Clovis, NM 88101
United States

📧 Contact email: contact@orlanya.com

R-Commerce LLC acts as the data controller for personal data collected on the Orlanya website within the meaning of the General Data Protection Regulation (GDPR).

2. Personal Data Collected

We may collect the following personal data:

  • First and last name

  • Shipping and billing address

  • Email address

  • Phone number

  • Order and payment information (excluding full banking details)

  • IP address, browsing data, browser type, and device used

Banking details (card number, security code) are never stored by Orlanya.

3. Purposes of Processing and Legal Bases

Personal data is collected and processed for the following purposes:

a) Performance of the Contract

  • Order processing

  • Product delivery

  • Payment management

  • Customer service and order tracking

Legal basis: performance of a contract

b) Legal Obligations

  • Invoicing

  • Accounting

  • Tax and legal compliance

Legal basis: legal obligation

c) Marketing (Email and SMS – where applicable)

  • Sending commercial information

  • Promotional offers

  • Abandoned cart reminders

Legal basis: explicit consent

Consent is obtained through clear mechanisms (unchecked opt-in boxes).
Users may unsubscribe at any time via unsubscribe links or by contacting customer support.

d) Website Improvement and Analytics

  • Navigation analysis

  • Improvement of user experience

Legal basis: legitimate interest

4. Data Retention Period

Personal data is retained as follows:

  • Order data: for the legally required period (accounting and tax obligations)

  • Customer data: for the duration of the commercial relationship

  • Marketing data: until consent is withdrawn

  • Browsing data: for a limited period in accordance with applicable regulations

5. Data Recipients

Personal data may be shared, strictly as necessary, with the following service providers:

  • E-commerce platform: Shopify Inc.

  • Payment service providers (e.g., Stripe, PayPal)

  • Logistics providers and carriers

  • Technical and marketing service providers (emailing, SMS, analytics)

These service providers act as data processors and are contractually bound to ensure data confidentiality and security.

6. Transfer of Data Outside the European Union

Certain personal data may be transferred to and processed outside the European Union, in particular in the United States, where R-Commerce LLC or certain service providers are located.

Such transfers are governed by appropriate safeguards, including:

  • Standard contractual clauses approved by the European Commission

  • Appropriate technical and organizational security measures

7. Cookies and Similar Technologies

The Orlanya website uses cookies necessary for its proper functioning, as well as analytical and marketing cookies, subject to user consent where required.

Cookies are used in particular to:

  • ensure proper website functionality

  • manage shopping carts

  • analyze website traffic

  • personalize the user experience

Users may manage their preferences via the cookie banner or through their browser settings.

8. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure.

Transactions are secured using recognized encryption protocols (SSL / TLS) and payment service providers compliant with applicable security standards (PCI-DSS).

9. User Rights

In accordance with the GDPR, users have the following rights:

  • Right of access

  • Right to rectification

  • Right to erasure

  • Right to object

  • Right to restriction of processing

  • Right to data portability

  • Right to withdraw consent at any time

Any request may be sent to:
📧 contact@orlanya.com

Users also have the right to lodge a complaint with the competent supervisory authority in their country of residence within the European Union.

10. Changes to the Privacy Policy

R-Commerce LLC reserves the right to modify this Privacy Policy at any time in order to comply with legal, regulatory, or technical developments.

The applicable version is the one published on the website at the time of consultation.

11. Applicable Language

This Privacy Policy may be translated into several languages.

In the event of any discrepancy or inconsistency between a translated version and the original English version, the English version shall prevail.