Privacy policy

Last updated: 09-09-2025

This Privacy Policy describes how Orlaya Jewellery (“we”, “us”, or “our”) collects, uses, and protects your personal information when you visit or make a purchase from our website.

What We Collect
When you make a purchase from Orlaya, we collect the personal information you provide — such as your name, email address, phone number, billing and shipping addresses — as part of the order process.

When you browse our store, we also automatically receive your computer’s IP address, browser type, and operating system to help us optimize your user experience.

If you opt in, we may use your email to send updates about new collections, special offers, or store news. You may unsubscribe at any time.

Consent
When you provide personal information to complete a transaction, place an order, arrange a delivery, or initiate a return, we interpret this as your consent for us to use that information solely for those purposes.

If we ask for your personal information for secondary purposes like marketing, we will ask you directly for consent or provide an option to decline.

Withdrawing consent
If you change your mind, you may withdraw your consent for us to contact you or use your information at any time by emailing us at info@orlayajewellery.com.

Disclosure
We may disclose your personal information if required to do so by law or if you violate our Terms of Service.

Shopify
Our store is hosted on Shopify Inc., which provides the e-commerce platform for Orlaya Jewellery.

Your data is stored securely through Shopify’s data storage and databases. Shopify stores your information on a secure server behind a firewall.

If you complete your purchase using a direct payment gateway, Shopify encrypts and stores your credit card data securely using PCI-DSS standards. Transaction data is only stored as long as needed to complete your order, after which it is deleted.

To learn more, read Shopify’s Privacy Policy (https://www.shopify.com/legal/privacy) and Terms of Service (https://www.shopify.com/legal/terms).

Third-Party Services
Third-party providers (such as payment gateways or delivery services) may collect and use your information only to perform services required to fulfill your order.

These providers have their own privacy policies, and we encourage you to review them to understand how your data is handled.

Once you leave Orlaya’s website or are redirected to a third-party site or app, this Privacy Policy no longer applies.

Security
We take reasonable steps and industry best practices to protect your personal data and payment information from loss, misuse, or unauthorized access.

All direct payment information is encrypted using SSL (Secure Socket Layer) technology and stored using AES-256 encryption.

Although no method of internet transmission is 100% secure, we comply with PCI-DSS and widely accepted industry standards.

Cookies
Orlaya’s website uses cookies to improve your browsing experience. Some examples of cookies we use:

_session_id: stores session information like landing page

_shopify_visit: tracks site visits

cart: remembers cart contents between visits

storefront_digest: remembers login if your shop is password-protected

You can opt out of cookies via your browser settings.

Age of Consent
By using our site, you confirm that you are at least the age of majority in your jurisdiction, or that you are the age of majority and have given consent for any minor dependents to use the site.

Changes to This Policy
We reserve the right to modify this policy at any time. Changes will take effect immediately once posted to the site.

If we make significant updates, we will notify you here so you remain informed.

If Orlaya Jewellery is acquired or merged with another company, your information may be transferred to the new owner as part of our ongoing service.

Your Rights
You may request access to, correction of, or deletion of your personal data at any time. To do so, or if you have questions, please contact us:

Email: info@orlayajewellery.com

We Respect Your Privacy
Orlaya Jewellery will never sell, rent, or share your personal information with third parties for unrelated marketing purposes. Only employees who need access to perform their duties are permitted to view your data, and we enforce strict disciplinary action for any misuse.