Privacy policy

Privacy Policy

Last Updated: [DATE]

1. Who We Are

This Privacy Policy explains how Cresva Commerce Group Limited (Company No. 16907083), registered in England and Wales at [REGISTERED OFFICE ADDRESS], trading as Orchard Hollow ("Orchard Hollow," "we," "us," "our"), collects, uses, and protects your personal data when you visit orchard-hollow.com or place an order with us.

We are the data controller for the personal data described in this Policy. Our nominated contact for data protection matters is [DATA PROTECTION CONTACT / EMAIL].

2. What We Collect

Information you give us directly:

  • Name, email address, postal address, phone number
  • Payment details (processed by our payment provider — see Section 5; we don't store full card numbers)
  • Order history and product preferences
  • Anything you send us via email, contact forms, or customer support

Information collected automatically:

  • IP address, browser type, device information
  • Pages visited, time spent on site, referring URLs
  • Cookies and similar tracking technologies (see Section 4)

Information from third parties:

  • Delivery and tracking updates from couriers
  • Fraud-prevention signals from our payment processor
  • Ad performance data from advertising platforms (in aggregate/pseudonymised form where possible)

3. How We Use Your Information

We use your data to:

  • Process and fulfil your orders, including subscriptions
  • Communicate with you about orders, shipping, and customer service
  • Send marketing communications, where you've opted in (you can unsubscribe any time)
  • Improve our website, products, and customer experience
  • Detect and prevent fraud
  • Comply with legal and tax obligations
  • Run and measure advertising campaigns (Meta, Google, and similar platforms)

Legal basis (UK/EU GDPR): We rely on contract performance (processing your order), legitimate interest (fraud prevention, site improvement, non-marketing analytics), consent (marketing emails, marketing cookies), and legal obligation (tax/accounting records) as applicable.

4. Cookies & Tracking

We use cookies and similar technologies for:

  • Essential function — keeping your cart working, remembering login state
  • Analytics — understanding how visitors use the site
  • Advertising — measuring and optimising ad campaigns (e.g. Meta Pixel/Conversions API, Google Ads)

You can control cookies through your browser settings and through the cookie banner/consent tool on our site. Disabling non-essential cookies won't stop you from placing an order, but may affect personalisation and how we measure ad performance.

5. Who We Share Data With

We share data with service providers who help us run the business, including:

  • Shopify (e-commerce platform and payment processing)
  • [Email platform, e.g. Omnisend] (marketing emails)
  • [Subscription platform, e.g. Loop Subscriptions] (recurring billing)
  • Couriers (order fulfilment — UK and international)
  • Meta, Google, and other advertising platforms (campaign measurement)
  • Professional advisers (accountants, solicitors) where necessary
  • Law enforcement or regulators, where legally required

We do not sell your personal data to third parties.

6. International Transfers

Because we ship worldwide and use service providers based outside the UK (including the US), your data may be transferred internationally. Where this happens, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or Standard Contractual Clauses, or transfers to jurisdictions covered by UK adequacy regulations.

7. How Long We Keep Data

We retain order and customer data for as long as needed to fulfil orders, meet our legal/tax obligations (typically [6] years for UK accounting records), resolve disputes, and enforce our agreements. Marketing data is retained until you unsubscribe or request deletion, whichever is sooner.

8. Your Rights

Depending on where you're based, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion ("right to be forgotten")
  • Restrict or object to certain processing
  • Data portability
  • Withdraw consent at any time (for marketing or consent-based processing)
  • Lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office, ico.org.uk)

To exercise any of these rights, email [hello@orchard-hollow.com]. We'll respond within the statutory timeframe (one month under UK/EU GDPR, extendable in complex cases).

9. Children's Privacy

Orchard Hollow products and our website are intended for adults. We do not knowingly collect personal data from anyone under 18.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected with a new "Last Updated" date, and where appropriate we'll notify you by email.

11. Contact

  • Email: [Hello@orchard-hollow.com]
  • Postal address: Cresva Commerce Group Limited, 
    71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ