Last updated: 29 October 2026
We operate this online store and website, including its content, features, tools, products and related services (the “Services”). Our store is powered by Shopify.
This Privacy Notice explains how we collect, use, store and share your personal information when you browse our website, place an order, create an account or communicate with us.
It is intended for customers and visitors in the United Kingdom.
For the processing described in this notice, we are the data controller unless otherwise stated. Our business identity and contact details appear at the end of this notice.
1. Personal information we collect
Depending on how you interact with the Services, we may collect the following information:
- Contact details: Your name, billing address, delivery address, email address and telephone number.
- Order and transaction details: Products purchased, payment confirmations, delivery information, returns, refunds, exchanges and cancellations.
- Payment information: Information needed to process your payment. Card and financial details are handled by the relevant payment providers; the information available to us depends on the payment method used.
- Account information: Your account details, saved addresses, preferences and settings, if you create an account.
- Shopping activity: Products viewed, items added to your basket or wishlist, and interactions with our store.
- Communications: Messages, enquiries, reviews and other information you choose to send us.
- Device and usage information: Your IP address, browser, device identifiers, network information and interactions with the Services.
- Privacy and marketing preferences: Your consent records, cookie choices and communication preferences.
Personal information does not include information that has been irreversibly anonymised so that it can no longer identify you.
2. Where we obtain personal information
We collect information:
- Directly from you, when you order, create an account, contact us or provide information.
- Automatically, through your use of the Services and, where applicable, cookies and similar technologies.
- From service providers, including Shopify, payment providers, delivery companies and technical support providers.
- From integrations or partners you interact with, where relevant and permitted by law.
3. How we use your information and our lawful bases
We use personal information only where we have an appropriate lawful basis under UK data protection law.
Processing orders and providing services
We use your information to take payments, fulfil orders, arrange delivery, manage accounts and handle returns, refunds and exchanges.
Lawful basis: Performance of our contract with you, or taking steps at your request before entering into a contract.
Customer support
We use your information to answer enquiries, resolve problems and communicate about your orders.
Lawful basis: Performance of a contract or our legitimate interests in providing effective customer support, depending on the enquiry.
Security and fraud prevention
We use relevant account, transaction and technical information to protect customers, prevent fraud and secure the Services.
Lawful basis: Our legitimate interests in protecting our business and customers, and compliance with legal obligations where applicable.
Improving the Services
We may use feedback and usage information to identify problems, understand customer needs and improve our website.
Lawful basis: Our legitimate interests in improving the Services, subject to your rights. Where optional analytics technologies require consent, we obtain it before using them.
Marketing and advertising
We may use your details to send promotional communications and, where enabled, support relevant advertising.
Lawful basis: Consent where required, or legitimate interests where the law permits. Additional rules apply to marketing emails, text messages and advertising cookies.
Legal and regulatory obligations
We use information to maintain required records, meet tax and accounting obligations, respond to lawful requests and handle legal claims.
Lawful basis: Compliance with legal obligations or our legitimate interests in establishing, exercising or defending legal claims.
Where we rely on legitimate interests, we consider the impact on your rights and freedoms.
If you do not provide information necessary to process an order, such as your delivery address, we may be unable to fulfil it.
4. Marketing preferences
We send marketing emails or text messages where you have consented or where a permitted existing-customer exception applies.
Where we rely on that exception, we market only our own similar products or services and give you an opportunity to opt out when collecting your details and in each subsequent message.
You can unsubscribe using the link or instructions in a marketing message, or by contacting us. We will stop using your information for direct marketing if you object.
Unsubscribing does not stop essential communications about orders, payments, deliveries or your account. These arrangements reflect the ICO’s guidance on electronic marketing.
5. Cookies and similar technologies
We use cookies and similar technologies to support essential website functions and, depending on your choices, analytics, personalisation and advertising.
Please read our Cookie Policy for further information.
You can manage optional cookies through the cookie settings on our website. Where consent is required, optional technologies are used only after you agree.
6. Who we share information with
Where necessary for the purposes described in this notice, we may share relevant information with:
- Shopify, which hosts our online store.
- Payment providers, to process payments and refunds.
- Fulfilment and delivery providers, to prepare, deliver and manage orders.
- Technology providers, including hosting, security, customer support and analytics services.
- Advertising partners, where enabled and subject to applicable consent requirements.
- Professional advisers, including accountants, insurers and legal advisers.
- Authorities or regulators, where disclosure is legally required.
- Parties involved in a business transfer, such as a sale, merger or restructuring, subject to appropriate safeguards.
Some recipients act on our instructions; others act as independent controllers for their own processing.
7. Our relationship with Shopify
Shopify processes personal information to host and operate our store, support checkout and provide related services.
Depending on the features enabled, Shopify may also process information as an independent controller.
If we use Shopify Enhanced Services or Shopify Network Intelligence, information about your interactions with our store may be combined with information from other merchants and Shopify to support personalisation, advertising and service improvements, subject to applicable privacy requirements.
For details about Shopify’s processing and your choices, please see the Shopify Consumer Privacy Policy and Shopify Privacy Portal.
For requests relating to information we control, please contact us directly.
8. International transfers
Shopify and other service providers may store or process personal information outside the United Kingdom.
Where a transfer is subject to UK international transfer restrictions, we use an appropriate legal mechanism. This may include UK adequacy regulations or approved contractual safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the European Commission’s Standard Contractual Clauses, together with any required assessments and supplementary measures.
You can contact us for information about the safeguards relevant to your personal information and how to obtain a copy.
9. How long we keep your information
We retain personal information only for as long as reasonably necessary for the purposes described in this notice.
Retention depends on:
- Whether your account remains active.
- What is needed to fulfil orders and provide after-sales support.
- Applicable tax, accounting and record-keeping requirements.
- Relevant complaint and legal claim periods.
- Security and fraud-prevention needs.
We may retain limited information about marketing objections so that we can continue to respect your preferences.
When information is no longer required, we securely delete it or irreversibly anonymise it.
10. Keeping information secure
We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.
No website or transmission method can guarantee complete security. Please keep your account credentials confidential and do not send full payment card details or passwords by email.
11. Your privacy rights
Under UK data protection law, you may have the right to:
- Access your personal information and receive a copy.
- Correct inaccurate or incomplete information.
- Request deletion of your information.
- Restrict certain processing.
- Receive certain information in a portable format.
- Object to processing based on legitimate interests.
- Object to direct marketing at any time.
- Withdraw consent where processing relies on it.
- Exercise applicable rights concerning significant decisions made solely by automated processing.
Some rights apply only in particular circumstances. Withdrawing consent does not affect processing that was lawful before withdrawal.
To make a request, please contact us using the details below. We may ask for information reasonably needed to verify your identity.
We respond within the timeframe required by applicable law and will explain any lawful extension or refusal.
12. Children’s information
Our Services are intended for adult customers and are not directed at children.
If you believe a child has provided personal information to us, please contact us so that we can investigate and take appropriate action.
13. Third-party websites
Our website may link to third-party websites or services. Their handling of your information is governed by their own privacy notices.
Please review those notices before providing personal information.
14. Complaints
If you have concerns about how we handle your personal information, please contact us.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator. Visit the ICO website for information about making a complaint.
You do not have to contact us before approaching the ICO.
15. Changes to this notice
We may update this Privacy Notice to reflect changes in our practices, services or legal requirements.
We will publish the revised version on this page and update the date above. Where required, we will provide additional notice or request fresh consent.
16. Contact us and business information
For questions about this notice or to exercise your privacy rights, please contact us using the details below.
Store: Orylee
Legal business name / data controller: P-depo LTD
Website: orylee.com
Email: Contact@orylee.com
Phone: +44 7862 128568
Business and correspondence address: 167-169 Great Portland Street, London, W1W 5PF, United Kingdom
Opening hours: Monday to Friday, 9:00 am–5:00 pm (UK time).
Customer support response time: We aim to respond to customer enquiries within one working day. Privacy rights requests are handled within the applicable statutory timeframe.