Privacy policy

Last updated: 23 October 2026

Who is responsible for your data

LECHACO'S CORP (trading as Orlena), 47 rue Vivienne, 75002 Paris, France, is the controller of the personal data collected on orlena-uk.com. Contact: support@orlena-uk.com.

We process your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What we collect, why, and for how long

  • Processing and delivering your order: name, delivery and billing address, email address, phone number, order details. Legal basis: performance of a contract. Kept for 6 years after your order.
  • Accounting and tax: invoices and payment records. Legal basis: legal obligation. Kept for 10 years.
  • Customer service: email address, messages, order history. Legal basis: legitimate interests. Kept for 3 years after our last exchange.
  • Emails about our offers: name, email address. Legal basis: your consent, or our legitimate interests if you have already bought from us. You can unsubscribe at any time using the link in every email. Kept until you unsubscribe.
  • Statistics and advertising: browsing data and device information collected through cookies. Legal basis: consent. Kept for up to 13 months.
  • Fraud prevention: order and payment data. Legal basis: legitimate interests. Kept for 5 years.

Your health

We never ask for information about your health, and we do not use your orders to draw conclusions about it.

Payments

Payments are handled by our payment providers. We never see or store your full card details.

Who we share your data with

We only share the data that is needed, with: Shopify (our e-commerce platform and host), our payment providers (such as Shopify Payments and PayPal), delivery carriers, our email tools, and analytics and advertising partners such as Meta (only if you accept the relevant cookies). We never sell your personal data.

Transfers outside the UK

Some of these providers are based in the European Economic Area, the United States or other countries. Transfers to the EEA are covered by UK adequacy regulations. Other transfers are protected by appropriate safeguards, such as the UK International Data Transfer Agreement or Addendum, or the UK Extension to the EU–US Data Privacy Framework where it applies.

Your rights

You have the right to access, correct and delete your data, to restrict or object to its use, to data portability, and to withdraw your consent at any time. To exercise these rights, email support@orlena-uk.com. We may ask you to confirm your identity, and we will reply within one month.

You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk, 0303 123 1113.

Cookies

Cookies are small files saved on your device when you visit a website. We use:

  • Strictly necessary cookies (basket, checkout, security, remembering your choices): no consent needed.
  • Analytics cookies (measuring traffic and how the site is used): only with your consent.
  • Advertising cookies (measuring and personalising our ads, for example with Meta): only with your consent.

Analytics and advertising cookies are only used if you accept them in our cookie banner. You can change your mind at any time by clearing the cookies in your browser settings; the banner will then ask you again. No cookie that requires consent is kept for more than 13 months.

Changes to this policy

We may update this policy from time to time. The date of the latest version is shown at the top of this page.