Architecture draft — not final policy. This page establishes the section structure for Bromley Row's Privacy Policy. Sections marked for legal review require approved copy before this page is published as binding policy.
Information we may collect
When you interact with ORVANE — whether browsing, placing an order, or contacting our team — certain information may be collected or provided by you.
This may include information you provide directly, such as your name, delivery address, email address, and telephone number when placing an order or making an enquiry.
It may also include technical information collected automatically when you use our website, such as your IP address, browser type, and pages visited. See the Cookies section for more detail.
Legal review required — The complete list of data categories collected, the legal basis for each, and the specific circumstances of collection require legal review and confirmation of implemented systems before publication.
How information may be used
Information collected may be used to fulfil your orders, respond to enquiries, and communicate with you about your purchases.
Where you have given consent, we may use your contact information to keep you informed about ORVANE news and new pieces.
We do not sell customer information to third parties.
Legal review required — Full purposes, legal bases under UK GDPR, and any legitimate interest assessments require legal review before publication.
Orders and transactions
When you place an order, we collect the information necessary to fulfil and deliver your purchase. This includes your delivery address, contact details, and order contents.
Payment processing is handled by a third-party payment provider. ORVANE does not store full payment card details.
Legal review required — Payment processor identity, data sharing arrangements, and order data retention periods require confirmation and legal review before publication.
Customer accounts
Customer accounts are not currently available on the ORVANE website. This section will describe how account information is handled once customer accounts are introduced.
At present, order and preference information is not persisted to a customer profile.
Legal review required — This section requires completion once customer account infrastructure is implemented. Account data categories, retention, and deletion rights will need to be documented at that stage.
Made for You information
The Made for You service allows customers to commission pieces to their personal specification, which may include measurements and personalisation preferences.
Where measurements or personalisation information are provided as part of a Made for You commission, this information is used solely for the purpose of producing your piece.
Made for You specification information is not currently persisted to a customer account or stored beyond what is necessary to fulfil the commission.
Legal review required — The specific data categories involved in Made for You commissions, retention periods, and any sharing with production partners require legal review and confirmation of implemented systems before publication.
Communications
We may send you transactional communications related to your orders, such as order confirmations and dispatch notifications.
If you have opted in during checkout, we may also send you communications about ORVANE news and new pieces. You may withdraw this consent at any time.
Legal review required — Unsubscribe mechanism, email service provider details, and the full communications policy require legal review before publication.
Service providers
We work with third-party service providers to operate the ORVANE website and fulfil orders. These providers may process customer information on our behalf, and are required to handle it appropriately.
Legal review required — The list of service providers, the nature of data shared with each, and data processing agreements require legal review and confirmation before publication.
Data retention
We retain customer information for as long as is necessary to fulfil the purposes for which it was collected, including any legal or regulatory obligations.
Legal review required — Specific retention periods for each data category require legal review and confirmation before publication.
Customer rights
Depending on your location, you may have rights in relation to your personal information, including the right to access, correct, or request deletion of information we hold about you.
To exercise any rights in relation to your information, please contact us using the details below.
Legal review required — The full statement of customer rights under applicable law (UK GDPR, etc.), the process for handling requests, and response timelines require legal review before publication.
Contact
If you have any questions about how ORVANE handles your information, please contact our team.
Legal review required — The data controller name, registered address, and any Data Protection Officer contact details require legal confirmation before publication.