Privacy Policy

Privacy Policy

Last updated: 10 October 2026

At Orlaya, accessible at https://orlaya.co.uk/, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and share your personal data when you visit our website, make a purchase, contact us or otherwise interact with our services.

1. Who We Are

Orlaya operates this website and sells jewellery and related products online.

For privacy-related enquiries, please contact us at:

Email: hello@orlaya.co.uk
Website: https://orlaya.co.uk/

2. Personal Information We Collect

We may collect the following categories of information:

  • Contact information: Your name, billing address, delivery address, email address and telephone number.

  • Order information: Products purchased, order details, payment status, delivery information and returns or refund details.

  • Payment information: Payments are processed through secure third-party payment providers. We do not ordinarily receive or store your full payment card details.

  • Account information: Login details and account preferences, if you create an account.

  • Communications: Information you provide when contacting our customer service team, submitting feedback or making an enquiry.

  • Technical information: IP address, browser type, device information, approximate location derived from your IP address and website usage data.

  • Marketing preferences: Your preferences for receiving promotional emails or other marketing communications.

We may also collect information through cookies and similar technologies, as explained below.

3. How We Use Your Information

We use your personal information to:

  • Process, confirm and fulfil your orders.

  • Arrange delivery, returns, exchanges and refunds.

  • Respond to customer service enquiries.

  • Personalise or engrave products according to the details you provide.

  • Manage customer accounts and maintain our business records.

  • Detect, prevent and investigate fraud, security incidents and misuse of our website.

  • Improve our website, products, services and customer experience.

  • Send marketing communications where we are legally permitted to do so.

  • Comply with applicable legal, tax, accounting and regulatory obligations.

4. Legal Bases for Processing

Under applicable UK data protection law, we process personal information where one or more of the following legal bases applies:

  • Contract: Processing is necessary to fulfil your order or take steps requested by you before entering into a contract.

  • Legal obligation: Processing is necessary to comply with applicable laws and regulations.

  • Legitimate interests: Processing is necessary for purposes such as website security, fraud prevention, customer service and improving our business, provided your rights do not override those interests.

  • Consent: Where required, we rely on your consent, including for certain cookies and electronic marketing activities.

You may withdraw consent at any time where processing is based on consent.

5. Marketing Communications

We may send promotional emails where you have consented or where another lawful basis under applicable electronic marketing rules permits us to do so.

You can unsubscribe from marketing emails at any time by using the unsubscribe link in the email or by contacting hello@orlaya.co.uk.

Even if you opt out of marketing, we may still send essential service messages relating to your orders, deliveries, refunds or customer account.

6. Cookies and Similar Technologies

Our website may use cookies and similar technologies to operate essential website functions, remember preferences, understand website usage and support advertising or marketing activities.

Strictly necessary cookies may be used where required to provide the service you request. We will seek consent before using non-essential cookies where required by law.

You can manage your cookie preferences through the cookie banner or settings available on our website, where provided. You can also adjust cookie settings in your browser, although blocking certain cookies may affect website functionality.

7. When We Share Your Information

We may share personal information with trusted third parties where necessary to operate our business, including:

  • Shopify: Our ecommerce platform and related services.

  • Payment providers: To securely process payments and prevent fraud.

  • Delivery and fulfilment providers: To deliver orders and manage returns.

  • IT, hosting and customer support providers: To operate and maintain our website and services.

  • Analytics and advertising providers: Where used and permitted by applicable law and your cookie preferences.

  • Professional advisers and authorities: Where necessary for legal, accounting, regulatory or law-enforcement purposes.

We require service providers to handle personal information appropriately and only for authorised purposes. We do not sell your personal information to third parties for money.

8. International Transfers

Some of our service providers may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we will take steps required by applicable data protection law to ensure it receives an appropriate level of protection. These steps may include relying on UK adequacy regulations, approved contractual safeguards or another lawful transfer mechanism.

9. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including fulfilling orders, handling returns and complaints, maintaining business records and meeting legal obligations.

Retention periods vary depending on the type of information and the reason it was collected. When information is no longer required, we will delete it or securely anonymise it where appropriate, subject to any legal retention requirements.

10. How We Protect Your Information

We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

11. Your Privacy Rights

Depending on the circumstances, you may have the right to:

  • Request access to your personal information.

  • Request correction of inaccurate or incomplete information.

  • Request deletion of your personal information.

  • Request restriction of certain processing.

  • Object to processing based on legitimate interests.

  • Request a copy of certain information in a portable format.

  • Withdraw consent where processing relies on consent.

  • Object to direct marketing at any time.

These rights are subject to applicable legal conditions and exceptions. To exercise your rights, contact hello@orlaya.co.uk. We may need to verify your identity before responding.

You also have the right to complain to the UK Information Commissioner's Office (ICO) if you believe your personal information has been handled unlawfully. You can find guidance at https://ico.org.uk/.

12. Children's Privacy

Our website is intended for people making purchases or browsing with appropriate authority. We do not knowingly collect personal information directly from children in circumstances where parental authorisation is required. If you believe a child has provided personal information inappropriately, please contact us so we can review the matter.

13. Third-Party Websites

Our website may contain links to third-party websites or services. Their privacy practices are governed by their own policies, and we are not responsible for how they handle personal information. We encourage you to review their privacy policies before providing information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, service providers or legal requirements. The updated version will be published on this page with a revised “Last updated” date.

15. Contact Us

If you have questions about this Privacy Policy or how Orlaya handles your personal information, please contact:

Orlaya
Email: hello@orlaya.co.uk
Website: https://orlaya.co.uk/