Privacy policy

Privacy Policy

This policy explains how Ovelira collects and uses your personal data when you visit ovelira.shop or buy from us, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data controller

The controller responsible for your personal data is Ovelira, 124 City Road, London EC1V 2NX, United Kingdom. E-mail: earnestinelottridge87436@outlook.com. Phone: +44 7344 631395.

2. Data we collect

Order data: name, delivery and billing address, e-mail, phone number, items purchased and order history.
Payment data: payments are handled by our payment providers; we receive only confirmation of payment and limited card details (such as card type and last four digits).
Communication data: messages you send us through our contact form, e-mail or phone.
Technical data: IP address, browser and device information, and cookie data according to your cookie choices.

3. How we use your data and our lawful bases

To process, deliver and support your order - performance of a contract (Art. 6(1)(b) UK GDPR).
To meet tax and accounting obligations - legal obligation (Art. 6(1)(c)).
To prevent fraud and keep our website secure - legitimate interests (Art. 6(1)(f)).
To send our newsletter and to set non-essential cookies - your consent (Art. 6(1)(a)), which you can withdraw at any time.

4. Sharing your data

We share personal data only where needed: with Shopify (our e-commerce platform and hosting), our payment providers, Royal Mail (delivery), ParcelPanel (order tracking page), Pandectes (cookie consent management) and our e-mail provider. We never sell your personal data.

5. Cookies and consent

When you visit our website from the United Kingdom, the European Economic Area, Iceland, Liechtenstein or Norway, our cookie banner (provided by Pandectes GDPR Compliance) asks for your consent before any non-essential cookies are set. You can accept all cookies, decline all non-essential cookies, or choose by category under "Preferences": Strictly necessary (always allowed), Functionality, Performance (analytics) and Targeting (marketing). You can change or withdraw your consent at any time with the "Cookie settings" link in the footer of every page or the cookie icon in the bottom-left corner. Full details are in our Cookie Policy.

6. How long we keep your data

We keep order and invoice records for 6 years to meet HMRC tax and accounting requirements. Contact-form messages are kept for up to 2 years. Newsletter data is kept until you unsubscribe.

7. Your rights under UK GDPR

You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time. To exercise any of these rights, e-mail earnestinelottridge87436@outlook.com; we reply within one month. You also have the right to complain to the Information Commissioner's Office (ICO), ico.org.uk, phone 0303 123 1113.

8. International transfers

Some of our service providers, including Shopify, may process data outside the UK. Where they do, the transfer is protected by UK adequacy regulations or the International Data Transfer Agreement / UK Addendum to the EU standard contractual clauses.