Privacy Policy

Privacy Policy – OrlayaGem.com

This Privacy Policy describes how OrlayaGem.com (the “Site” or “we”) collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site.


Contact

After reviewing this policy, if you have additional questions, want more information about our privacy practices, or would like to make a complaint, please contact us by email or mail using the details below:

Email: info@orlayagem.com
Address: Orlaya Gem, 3 Station Street, Birmingham, B64 6AJ, United Kingdom


Collecting Personal Information

When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, “Personal Information” refers to any information about an identifiable individual. See below for details on what we collect and why.


Device Information

  • Purpose of collection:
    To load the Site accurately for you and to perform analytics to optimise our Site.

  • Source of collection:
    Automatically collected through cookies, log files, web beacons, tags, or pixels.

  • Disclosure for a business purpose:
    Shared with our processor Shopify.

  • Personal Information collected:
    Browser version, IP address, time zone, cookie information, pages/products viewed, search terms, and interactions with the Site.


Order Information

  • Purpose of collection:
    To fulfil our contract with you, process payments, arrange shipping, provide invoices/confirmations, communicate with you, screen for fraud, and—where preferences allow—send marketing information.

  • Source of collection:
    Provided by you.

  • Disclosure for a business purpose:
    Shared with our processor Shopify.

  • Personal Information collected:
    Name, billing address, shipping address, payment information (including credit card numbers), email, and phone number.


Sharing Personal Information

We share your Personal Information with service providers to help us deliver our services.

Examples:

  • Shopify powers our online store. Shopify’s Privacy Policy: https://www.shopify.com/legal/privacy

  • We may share information to comply with legal obligations (subpoena, search warrant, etc.).

  • We may share information with third-party logistics providers for order delivery or marketing fulfilment.


Payment Information

To offer Klarna payment methods, we may pass your personal data (contact and order details) to Klarna at checkout so they can assess eligibility and tailor payment options. Klarna processes this data in line with their own privacy notice.


Newsletter Marketing

With your consent, we use your Personal Information to send email newsletters and marketing updates about our products. You may unsubscribe at any time using the link included in every email.

Data sharing:
To send newsletters, we share your information with our email marketing platform provider.


Marketing by Post

We may share your Personal Information with external partners to send you postal marketing unless you have opted out.
To stop receiving postal marketing, email marketing@orlayagem.com.

Once provided, these partners act as independent data controllers.


Behavioural Advertising

We use your Personal Information to provide targeted advertisements and personalised marketing.

Examples:

  • Google Analytics helps us understand visitor behaviour.
    Opt-out: https://tools.google.com/dlpage/gaoptout

  • We share data with advertising partners (directly or via cookies) about your browsing, purchases, and ad interactions.

Learn more about targeted advertising at the NAI:
https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work

You can opt out of:

Broader opt-out: https://optout.aboutads.info/


Using Personal Information

We use your Personal Information to provide our services, including offering products, processing payments, fulfilling orders, and informing you about new products and offers.


Lawful Basis (GDPR)

If you are in the EEA, we process your data under:

  • Your consent

  • Contract performance

  • Legal obligation

  • Vital interests

  • Public interest

  • Legitimate interests (balanced with your rights)


Retention

We retain your Personal Information until you request deletion.
For erasure rights, see the Your Rights section.


Automatic Decision-Making

If you are an EEA resident, you may object to automated decision-making (including profiling) where it has legal or significant effects.

Shopify uses limited automated decision-making solely for fraud prevention, including temporary blacklisting of IP addresses and credit cards.


Your Rights

GDPR (EEA Residents)

You can:

  • Access your Personal Information

  • Port your data

  • Request correction, updating, or erasure

Contact us using the details provided above.

Your data is initially processed in Ireland and may be transferred to Canada, the United States, and other locations. For details on Shopify’s GDPR compliance, see:
https://help.shopify.com/en/manual/your-account/privacy/GDPR


CCPA (California Residents)

You have the right to:

  • Access the Personal Information we hold (“Right to Know”)

  • Port your data

  • Request correction, updating, or deletion

You may also authorise an agent to submit requests on your behalf.


Cookies

We use various cookies (functional, analytical, performance, advertising, and social media). Cookies enhance your browsing experience and help us understand how the Site is used.

A full list of Shopify cookies used for functionality, checkout, analytics, and marketing remains the same as previously provided.


Controlling Cookies

You can control cookies through your browser settings, but blocking cookies may impact your experience.

Learn more at: https://www.allaboutcookies.org/

Blocking cookies may not fully prevent data sharing with advertising partners.


Do Not Track

We do not alter data collection practices in response to Do Not Track signals, as industry standards are inconsistent.


Changes

We may update this Privacy Policy periodically to reflect legal, operational, or regulatory updates.


Complaints

To file a complaint, contact us using the details under Contact.

If unsatisfied, you may contact the UK Information Commissioner’s Office (ICO):
https://ico.org.uk/make-a-complaint/


Last updated: 18th February 2025