This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Data Protection Act 2018 (Ireland), and applicable e-commerce regulations.

By using this website and placing an order, you agree to the collection and use of information in accordance with this policy.

1. Data Controller

The data controller responsible for your personal data is:

Orthorest
Email: sales@orthorest.com
Phone: +353-1-4011555

2. Personal Data We Collect

When you browse or purchase from our website, we may collect the following personal data:

Account & Order Information

• Name

• Billing and delivery address

• Email address

• Phone number

• Order history and transaction details

Payment Information

• Payment is processed securely by Realex / Global Payments

• We do not store or process full card details

• Card data is handled directly by our payment provider in compliance with PCI-DSS standards

Technical & Usage Data

• IP address

• Browser and device type

• Website usage data

• Cookies and tracking information (see Section 8)

3. Lawful Basis for Processing

We process personal data under the following lawful bases:

• Contractual necessity – to process orders and deliver products

• Legal obligation – for tax, accounting, and regulatory compliance

• Legitimate interests – fraud prevention, website security, and service improvement

• Consent – for marketing communications and non-essential cookies

4. How We Use Your Personal Data

We use your data to:

• Process and fulfill orders

• Manage customer accounts

• Communicate order updates and customer service responses

• Process payments through Realex / Global Payments

• Prevent fraud and secure transactions

• Improve website performance and user experience

• Comply with legal and financial obligations

5. WooCommerce & Third-Party Service Providers

Our store is built using WooCommerce, which processes customer and order data necessary to run our online shop.

We may share personal data with trusted third parties, including:

• Payment processors: Realex / Global Payments

• Delivery partners and couriers

• IT, hosting, and website support providers

• Accounting and professional advisors

• Regulatory or law enforcement authorities when legally required

Personal data is never sold to third parties for marketing purposes.

6. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), appropriate safeguards are in place, such as:

• EU Standard Contractual Clauses

• GDPR-compliant data processing agreements

7. Data Retention

We retain personal data only for as long as necessary:

• Order and transaction data: retained for legal and tax purposes

• Customer accounts: retained while the account remains active

• Marketing data: retained until consent is withdrawn

8. Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Enable core website functionality (shopping cart, checkout)

• Analyse website traffic and performance

• Improve user experience

Non-essential cookies are only used with your explicit consent.
You may manage or withdraw cookie consent at any time via our cookie banner or browser settings.

9. Data Security

We take appropriate technical and organisational measures to protect personal data, including:

• Secure hosting and encryption

• Limited access to personal data

• Regular software updates and security monitoring

• PCI-DSS compliant payment processing via Realex / Global Payments

10. Your GDPR Rights

Under GDPR, you have the right to:

• Access your personal data

• Correct inaccurate or incomplete data

• Request erasure (“right to be forgotten”)

• Restrict or object to processing

• Data portability

• Withdraw consent at any time

• Lodge a complaint with the Data Protection Commission (Ireland)
  Website: dataprotection.ie

11. Contact Information

To exercise your rights or if you have any privacy-related questions, contact us at:

Email: sales@orthorest.com
Phone: +353-1-4011555

12. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page and the “Last updated” date will be revised.