Privacy Notice

OREVYN is the controller of the personal data described here. Our registered business details will be published before public sales begin.

Privacy enquiries: care@orevyn.ie.

• Private list: your email address, optional first name, your marketing choice and the time you gave it.
• Orders: name, email, phone number, delivery address, items ordered, order value and status.
• Payments: handled by Stripe. We receive a payment reference and confirmation status. We never receive or store your full card number.
• Security: a one-way hash of your IP address and your browser user-agent, used to prevent abuse and duplicate registrations.
• Messages: anything you send through the contact form.
• Essential cookies: your bag, your private-access session and, for staff, an admin session.

We use your email to manage private access and send transactional messages about your order. This is necessary to perform our contract with you or to take steps at your request before a contract (Article 6(1)(b) GDPR).

We send occasional brand news only where you have opted in. You can withdraw consent at any time using the unsubscribe link in those emails or by writing to us (Article 6(1)(a) GDPR).

We keep security logs and prevent fraud on the basis of our legitimate interest in protecting the service (Article 6(1)(f) GDPR), and we keep order records where the law requires it (Article 6(1)(c) GDPR).

• Private-list details: until 12 months after the launch period, or until you unsubscribe, whichever is sooner.
• Order and payment records: 7 years, to meet Irish tax and company law obligations.
• Contact messages: 24 months.
• Security logs and rate-limit records: 90 days.

We use service providers who process data on our instructions: Stripe (payments), our hosting provider (servers in the EU), our email delivery provider, and our infrastructure proxy. Each is bound by a data processing agreement.

Stripe may process payment data outside the EEA under Standard Contractual Clauses and its own safeguards. We do not sell personal data, and we do not use advertising trackers on this site.

You have the right to access your data, correct it, erase it, restrict or object to its use, receive a portable copy, and withdraw consent at any time. Write to care@orevyn.ie and we will respond within one month.

You may also complain to the Irish Data Protection Commission at dataprotection.ie.

This site uses only cookies that are strictly necessary: a bag identifier, a private-access session, and a staff admin session. They are HTTP-only and are not used for advertising or analytics. Because no non-essential cookies are set, no consent banner is required.