Privacy Policy
Orapeak LTD ("Orapeak", "we", "us") respects your privacy. This Privacy Policy explains how we collect and use your personal data when you visit our website or buy from us, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
The data controller is Orapeak LTD, registered in England & Wales (company number [COMPANY NUMBER]), registered office 71-75 Shelton Street, London, United Kingdom, WC2H 9JQ. ICO registration number: [ICO REGISTRATION NUMBER]. Contact us about privacy at contact@orapeak.com.
2. The data we collect
- Identity & contact data: name, email address, phone number, billing and delivery addresses.
- Order data: products purchased, order value, order history, returns and correspondence.
- Payment data: payments are processed by our payment providers. We do not see or store your full card details.
- Technical data: IP address, browser and device type, pages viewed and how you reached our site, collected via cookies and similar technologies (see our Cookie Policy).
- Marketing preferences: whether you have agreed to receive marketing from us.
3. How and why we use your data
| Purpose | Lawful basis |
|---|---|
| Processing and delivering your order, handling returns and refunds | Performance of a contract |
| Customer service and answering your enquiries | Contract / legitimate interests |
| Fraud prevention and website security | Legitimate interests / legal obligation |
| Keeping accounting and tax records | Legal obligation |
| Improving our website and products (analytics) | Consent (non-essential cookies) |
| Sending marketing emails and personalised advertising | Consent — you can withdraw at any time |
4. Who we share your data with
We only share your data with trusted service providers who help us run our business, under contracts that require them to protect it:
- our e-commerce platform provider (Shopify), which hosts our store and checkout;
- payment providers (such as card processors, PayPal, Apple Pay and Google Pay);
- delivery and courier companies;
- email, customer service and analytics/advertising providers (only where you have consented to non-essential cookies or marketing);
- professional advisers and authorities where required by law.
We never sell your personal data.
5. International transfers
Some of our providers process data outside the UK (for example in Canada, the EEA or the USA). Where this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
6. How long we keep your data
We keep order and transaction records for 6 years after the end of the financial year to meet UK tax and accounting requirements. Customer service correspondence is kept for up to 3 years. Marketing data is kept until you unsubscribe. Data is then securely deleted or anonymised.
7. Your rights
Under UK data protection law you have the right to:
- access a copy of your personal data;
- ask us to correct inaccurate data;
- ask us to delete your data;
- restrict or object to our processing, including for direct marketing;
- receive your data in a portable format;
- withdraw consent at any time, where we rely on consent.
To exercise any right, email contact@orapeak.com. We will respond within one month. There is normally no fee.
8. Security
We use appropriate technical and organisational measures to protect your data, including SSL encryption across our website and checkout.
9. Complaints
If you are unhappy with how we have handled your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority: ico.org.uk · 0303 123 1113.
10. Changes to this policy
We may update this policy from time to time. The latest version will always be available on this page.
Last updated: October 2026 · Orapeak LTD