Privacy policy

Last updated: 4 November 2026

Who we are

Ordelwick operates at https://ordelwick.com.

The controller of your personal information is, located at .

For privacy enquiries or requests, email contact@ordelwick.com.

UK representative, where legally required

Data protection officer, if appointed: 

Information we collect

Depending on how you interact with us, we collect:

• Your name, email address, telephone number, billing address and delivery address.
• Order details, payment status, transaction records and return information.
• Account information and preferences.
• Messages and information you provide when contacting us.
• Marketing preferences and consent choices.
• Device, browser, IP address and website usage information, depending on the technologies enabled and your privacy choices.

We receive information directly from you and, where relevant, from Shopify, payment providers, delivery services and other service providers involved in your purchase.

Payment credentials are processed by payment providers. 

Please do not send passwords, full card details or unnecessary sensitive information by email.

How we use your information

We use personal information for the following purposes and legal bases:

• Orders and customer service: to process payments, fulfil purchases, arrange delivery and administer returns, where necessary to perform our contract with you.
• Legal obligations: to maintain records and meet applicable tax, accounting and consumer-law requirements.
• Legitimate interests: to protect customers and the business, prevent fraud, secure the website, respond to general enquiries and establish or defend legal claims, taking account of your rights.
• Consent: for optional marketing and tracking activities where consent is required.

Required order and delivery details are necessary to fulfil a purchase. Without them, we may be unable to accept or deliver your order. Marketing subscriptions are optional.

Sharing your information

Our store uses Shopify. We share information where necessary with providers supporting payments, fulfilment, delivery, customer service, email communications and other store functions.

We may also share relevant information with professional advisers, regulators or public authorities where legally required.

Shopify may process certain information for its own purposes under its privacy terms. Further information is available in the Shopify Privacy Policy and Shopify Privacy Portal.

International transfers

Our business or service providers may process information outside the United Kingdom.

Relevant countries and transfer arrangements:

Where UK international-transfer rules apply, we use an applicable adequacy arrangement or appropriate safeguards, such as the UK International Data Transfer Agreement or UK Addendum, as appropriate.

Contact us for information about relevant safeguards and how to obtain a copy, subject to necessary redactions.

How long we keep information

We retain information only for as long as needed for its purpose and applicable legal requirements.

Our retention periods or criteria are:

• Order and accounting records: for as long as necessary to fulfil your order, handle returns or disputes, and meet applicable tax, accounting and legal record-keeping obligations.
• Customer-service correspondence: for as long as necessary to resolve your enquiry and deal with any related complaint, dispute or legal claim.
• Inactive accounts: retention depends on whether the account is still needed to provide account services, access order history or deal with outstanding orders, disputes or legal obligations. Account information that is no longer necessary is deleted or anonymised.
• Marketing information: while the relevant consent or other lawful basis remains valid. If you unsubscribe or object, use for direct marketing stops; limited suppression information may be retained to respect that choice.
• Security and fraud-prevention records: for as long as proportionately necessary to investigate incidents, prevent fraud, protect the store and address related legal claims.
• Cookie and tracking information: retention depends on the technology, its purpose and its configured expiry. Session cookies expire at the end of the session; persistent technologies expire after their configured duration or may be removed earlier through the relevant browser or provider controls.

Relevant records may be retained longer where necessary for legal claims or obligations. We may keep limited suppression information to honour marketing objections.

Cookies and similar technologies

Essential technologies support functions such as the basket, checkout and website security.

Advertising and other technologies requiring consent are used only after the required choice. Continuing to browse or accepting our terms does not constitute consent to optional tracking.

You can reject optional technologies or change your choices through

Our cookie details are available at 

Withdrawing consent does not affect earlier lawful processing. Blocking essential cookies through your browser may affect website functionality.

Marketing

You can unsubscribe through the link in a marketing message or by emailing contact@ordelwick.com.

We will honour your preferences. Necessary order and service communications may continue.

Automated processing

Your rights

Depending on the circumstances, you may have rights to:

• Access your personal information.
• Correct inaccurate information.
• Request deletion.
• Restrict processing.
• Receive or transfer certain information.
• Object to processing based on legitimate interests.
• Object to direct marketing.
• Withdraw consent.

Relevant legal exceptions may apply.

To make a request, email contact@ordelwick.com. We may require proportionate information to verify your identity. We respond within applicable legal time limits and explain any lawful extension or refusal.

You may complain to the UK data-protection regulator through the ICO complaints service. You do not have to contact us first.

Security and updates

We use appropriate technical and organisational measures to protect personal information. No system provides absolute security.

We update this policy when our practices change and provide any further notice required by law.