Privacy Policy
1. Data Controller
VERALYA LTD acts as Data Controller under UK GDPR and EU GDPR.
2. Legal Basis for Processing
We process personal data under the following lawful bases:
• Contract performance
• Legal obligation
• Legitimate interest
• Consent (marketing communications)
3. Personal Data Collected
• Identity data
• Contact details
• Billing and shipping information
• Payment confirmation data
• IP address
• Device data
• Cookies and analytics data
4. Purpose of Processing
• Order fulfilment
• Customer support
• Fraud prevention
• Marketing communications (with consent)
• Website optimisation
5. Shopify and Third Parties
Our Website operates on Shopify Inc.
Third parties may include:
• Payment processors
• Logistics partners
• Email marketing providers
• Analytics providers
International data transfers may occur under Standard Contractual Clauses.
6. Data Retention
We retain personal data only as long as necessary, typically up to 6 years for tax and accounting compliance.
7. Your Rights
Under UK GDPR and EU GDPR:
• Right of access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object
Requests: support@orthocomfora.com
8. Cookies
We use essential, analytical, and marketing cookies.
Consent is obtained where required.
9. Data Security
Appropriate technical and organisational safeguards are implemented.
10. Complaints
UK residents may complain to the Information Commissioner’s Office (ICO).