Privacy

Privacy policy

This policy explains what personal data we collect when you visit oryellemartenne.eu or buy a piece from us, why we use it, who we share it with, and what rights you have over it. It complies with Regulation (EU) 2016/679 (GDPR) and Portuguese Law no. 58/2019.

Data controller

Oryelle Martenne is a trade name of Ashbourne Unipessoal Lda (Portuguese NIPC 519242831), a fashion atelier based in Guimarães (Portugal). For any query about the processing of your personal data, please contact info@oryellemartenne.eu.

Data we collect and legal basis

When you browse the site we collect your preferred language and your cookie decision (om_lang, om_consent) on the basis of legitimate interest (Art. 6.1.f GDPR), so the site works technically.

If you subscribe to the newsletter, we keep your email address and language, based on your consent (Art. 6.1.a GDPR).

When you purchase, we collect name, shipping address, billing address, email and, if you provide them, phone number and order history. Legal basis: performance of the contract (Art. 6.1.b GDPR).

Card data is NOT stored on our servers. Payment processing is handled by Shopify Payments on their PCI-DSS-certified infrastructure.

If you write us a message, we keep your name, email and message content based on legitimate interest (handling your enquiry) and consent.

If you accept optional cookies, third parties (Google Analytics, Meta Pixel, Hotjar) collect aggregated usage data under your explicit consent.

Processors and data sharing

To operate the store we share strictly necessary data with the following providers, all under processor agreements compliant with Art. 28 GDPR:

Provider	Location	Purpose
Shopify Inc.	USA / EU	E-commerce, checkout, payments, customer base
Cloudflare Inc.	USA / EU	CDN and frontend hosting
DHL Express	International	Physical order shipping
Google LLC	USA / EU	Analytics and Tag Manager (only with your consent)
Meta Platforms	USA / EU	Advertising Pixel (only with your consent)
Hotjar Ltd	Malta / EU	Session analytics (only with your consent)

International transfers

Some of our providers operate outside the European Economic Area (mostly in the United States). These transfers rely on Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR) and, where applicable, the EU-US Data Privacy Framework.

Retention periods

We keep your data only for as long as needed for the stated purposes or the applicable legal period:

Category	Retention
Newsletter subscription	Until consent is withdrawn
Orders and invoicing	10 years (Portuguese tax obligation)
Contact messages	2 years from last interaction
Analytics and marketing cookies	Up to 2 years (see Cookie Policy)
Customer account	Until deletion is requested

Your rights

GDPR grants you the following rights over your data: access, rectification, erasure (right to be forgotten), objection, portability, restriction of processing, and not to be subject to automated decisions with significant legal effects. You may also withdraw your consent at any time (without retroactive effect on past processing).

To exercise any of these rights, write to info@oryellemartenne.eu with a copy of an identity document. We respond within 30 days.

Supervisory authority

If you believe the processing of your data breaches the regulation, you may lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD) in Portugal: www.cnpd.pt · geral@cnpd.pt · Av. D. Carlos I, 134, 1º — 1200-651 Lisbon.

If you live outside Portugal, you may contact the data protection authority of your country of residence.

Changes to this policy

We may update this policy if our practices or the applicable regulation change. The "Last updated" date above reflects the latest revision. Substantial changes will be notified by email to registered customers.

Last updated: May 2026