Privacy policy

Privacy Policy

Last updated: July 14, 2026

ORIGINI TECH operates this online store, website and related services, including purchases, customer support, marketing communications and other interactions with our business (collectively, the “Services”).

Our store is hosted and powered by Shopify. Shopify processes certain personal information on our behalf and may also process information for its own purposes in accordance with its own privacy terms.

For the purposes of applicable UK data protection law, including the UK General Data Protection Regulation and the Data Protection Act 2018, ORIGINI TECH is the data controller of personal information collected through the Services, except where another organisation acts as an independent controller.

This Privacy Policy explains how we collect, use, disclose, retain and protect your personal information, and the rights available to you.

This policy applies to customers and website visitors worldwide. Certain rights may vary depending on your country, state or region.

1. Personal Information We Collect

“Personal information” means information that identifies you or can reasonably be linked to you.

Depending on how you use the Services, we may collect the following categories of information:

Contact information:

  • ORIGINI TECH
  • Business Address: Bridgend, Wales, United Kingdom
  • Email: support@originitech.com
  • Website: https://www.originitech.com

Order and transaction information

  • Products purchased
  • Order number
  • Payment status
  • Shipping and delivery information
  • Returns, refunds and cancellations
  • Communications relating to an order

Payment information

Payments are processed by Shopify Payments or other third-party payment providers.

We generally do not directly store your complete payment-card information. Payment providers may collect and process:

  • Cardholder name
  • Billing details
  • Payment-card details
  • Bank or transaction information
  • Fraud-prevention information

Communications

We may collect information you provide when you:

  • Contact customer support
  • Submit a return or refund request
  • Respond to a survey
  • Leave a product review
  • Communicate with us by email, website form or social media

Device and usage information

When you visit or use the website, we and our service providers may automatically collect:

  • IP address
  • Browser type
  • Device type
  • Operating system
  • Approximate location
  • Pages viewed
  • Products viewed
  • Referring website
  • Date and time of visits
  • Shopping-cart activity
  • Interaction with advertisements and emails

Marketing and preference information

Where applicable, we may collect:

  • Email-marketing preferences
  • Cookie preferences
  • Advertising preferences
  • Records of consent
  • Promotion and campaign interactions

2. How We Collect Personal Information

We may collect personal information:

  • Directly from you;
  • Automatically through cookies, pixels and similar technologies;
  • From Shopify;
  • From payment providers;
  • From delivery and fulfilment providers;
  • From advertising, analytics and social-media partners;
  • From fraud-prevention and security providers;
  • From other parties where permitted by law.

3. How We Use Your Personal Information

We may use personal information to:

  • Process, fulfil and deliver orders;
  • Take and verify payments;
  • Provide order confirmations and delivery updates;
  • Manage returns, refunds and cancellations;
  • Provide customer support;
  • Maintain customer accounts;
  • Detect, investigate and prevent fraud or misuse;
  • Protect the security of our website and customers;
  • Improve our products, website and customer experience;
  • Analyse website traffic and performance;
  • Personalise content and product recommendations;
  • Send marketing communications where permitted;
  • Measure advertising performance;
  • Comply with legal, tax, accounting and regulatory obligations;
  • Establish, exercise or defend legal claims;
  • Enforce our terms and policies.

4. Legal Bases for Processing

Where UK GDPR or EU GDPR applies, we process personal information under one or more of the following legal bases:

Performance of a contract

We process information where necessary to:

  • Process your order;
  • Take payment;
  • Deliver products;
  • Provide customer support;
  • Handle refunds, returns or cancellations.

Legal obligation

We may process information to comply with:

  • Tax requirements;
  • Accounting obligations;
  • Consumer-protection laws;
  • Fraud-prevention duties;
  • Requests from courts, regulators or law-enforcement authorities.

Legitimate interests

We may process information where necessary for our legitimate business interests, including:

  • Improving the Services;
  • Preventing fraud;
  • Securing the website;
  • Analysing business performance;
  • Managing customer relationships;
  • Defending legal claims.

When relying on legitimate interests, we consider whether those interests are overridden by your rights and freedoms.

Consent

We may rely on consent for:

  • Email or SMS marketing where required;
  • Non-essential cookies;
  • Certain advertising technologies;
  • Other optional processing activities.

You may withdraw consent at any time. Withdrawal does not affect processing that took place before consent was withdrawn.

5. Shopify

Our store is powered by Shopify.

Shopify may process personal information when you:

  • Browse our store;
  • Create an account;
  • Place an order;
  • Make a payment;
  • Interact with Shopify-powered features.

Shopify generally acts as a processor for customer data processed on behalf of merchants, although it may act as an independent controller for certain activities described in its own privacy documentation. Shopify’s data-processing terms describe the respective responsibilities of Shopify and merchants.

6. Cookies and Similar Technologies

We use cookies, pixels and similar technologies for:

Essential purposes

These technologies are necessary for:

  • Website security;
  • Shopping-cart functionality;
  • Checkout;
  • Fraud prevention;
  • Customer authentication.

Analytics

Analytics tools help us understand:

  • Website traffic;
  • Product performance;
  • Visitor interactions;
  • Technical errors;
  • Conversion activity.

Marketing and advertising

Subject to your consent where required, marketing technologies may be used to:

  • Measure advertisement performance;
  • Build advertising audiences;
  • Show more relevant advertisements;
  • Understand whether purchases resulted from advertising campaigns.

Non-essential cookies are only used after consent where required by applicable law.

You can manage or withdraw cookie consent through the cookie banner or browser settings. Shopify provides privacy settings that merchants can configure for regional privacy requirements.

7. Marketing Communications

Where you have opted in, or where otherwise permitted by law, we may send marketing communications about:

  • Products;
  • Promotions;
  • Discounts;
  • New collections;
  • Store updates.

You may unsubscribe at any time by:

Service messages concerning orders, payments, delivery, security or account administration are not marketing communications and may still be sent where necessary.

8. How We Share Personal Information

We may disclose personal information to trusted service providers, including:

  • Shopify;
  • Payment processors;
  • Shipping carriers;
  • Fulfilment centres;
  • Dropshipping suppliers;
  • Customer-support providers;
  • Website-hosting providers;
  • Email and marketing providers;
  • Analytics providers;
  • Advertising partners;
  • Fraud-prevention services;
  • IT and security providers;
  • Professional advisers, including accountants and legal advisers.

These parties may process information only as permitted by their agreements with us and applicable law.

We may also disclose personal information:

  • When required by law;
  • In response to a court order or lawful request;
  • To prevent fraud, crime or security threats;
  • To protect our rights, customers or business;
  • In connection with a business sale, merger, restructuring or transfer.

9. Sale or Sharing of Personal Information

We do not sell personal information for money.

However, some privacy laws, particularly in certain United States jurisdictions, may define the terms “sale,” “sharing” or “targeted advertising” broadly enough to include certain uses of advertising cookies, pixels or audience-matching technologies.

Where applicable, you may have the right to opt out of such activities through our cookie or privacy controls.

10. International Data Transfers

Because we use international suppliers, Shopify, payment providers, fulfilment partners and technology services, personal information may be processed outside the United Kingdom or the country where you live.

Where required by law, we use appropriate safeguards, which may include:

  • UK adequacy regulations;
  • EU adequacy decisions;
  • The UK International Data Transfer Agreement;
  • The UK Addendum to EU Standard Contractual Clauses;
  • EU Standard Contractual Clauses;
  • Other legally recognised safeguards.

The ICO confirms that restricted transfers outside the UK require an appropriate legal mechanism or another permitted basis.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy.

Retention periods may depend on:

  • The duration of the customer relationship;
  • Order fulfilment;
  • Returns or disputes;
  • Tax and accounting requirements;
  • Fraud-prevention needs;
  • Legal limitation periods;
  • Regulatory obligations.

For example, order and transaction records may be retained for the period required under applicable tax, accounting and consumer-protection laws.

When information is no longer required, we may delete, anonymise or securely restrict access to it.

12. Data Security

We use reasonable technical and organisational measures designed to protect personal information against:

  • Unauthorised access;
  • Loss;
  • Misuse;
  • Alteration;
  • Disclosure;
  • Destruction.

However, no internet transmission or storage system can be guaranteed to be completely secure.

You are responsible for keeping your customer-account credentials confidential.

13. Your Privacy Rights

Depending on your location, you may have the right to:

  • Request access to your personal information;
  • Request correction of inaccurate information;
  • Request deletion;
  • Restrict processing;
  • Object to processing;
  • Receive certain information in a portable format;
  • Withdraw consent;
  • Object to direct marketing;
  • Opt out of certain targeted advertising, sale or sharing activities;
  • Request information about categories of data disclosed to third parties;
  • Lodge a complaint with a data-protection authority.

Rights may be subject to legal conditions, exemptions and identity-verification requirements.

The UK and EU GDPR recognise rights including access, rectification, erasure, restriction, portability, objection and rights relating to automated decision-making.

14. How to Exercise Your Rights

To submit a privacy request, contact:

Email: support@originitech.com

Please include sufficient information for us to understand and verify your request.

We may ask you to confirm your identity before completing a request. This helps protect your information from unauthorised access.

We will respond within the timeframe required by applicable law.

15. United Kingdom Complaints

You have the right to complain to the UK Information Commissioner’s Office if you believe your personal information has been handled unlawfully.

You may contact us first so that we have an opportunity to resolve your concern.

16. European Economic Area Complaints

If you are located in the European Economic Area, you may have the right to complain to the data-protection authority in your country of residence, place of work or where the alleged infringement occurred.

17. United States Privacy Rights

Residents of certain US states may have additional rights, which may include:

  • The right to know what personal information is collected;
  • The right to access or delete personal information;
  • The right to correct inaccurate information;
  • The right to opt out of sale, sharing or targeted advertising;
  • The right to limit certain uses of sensitive information;
  • The right not to be discriminated against for exercising privacy rights.

The availability of these rights depends on the applicable state law and whether that law applies to our business.

18. Children’s Privacy

The Services are not intended for children under the age of 16.

We do not knowingly collect personal information directly from children under 16.

If you believe a child has provided personal information to us, contact us so that we can review and delete it where appropriate.

19. Third-Party Websites

The Services may contain links to third-party websites, platforms or social-media services.

We are not responsible for the privacy, security or content practices of third parties. You should review their privacy policies before providing information.

20. Automated Decision-Making

We may use automated tools to assist with:

  • Fraud detection;
  • Payment-risk assessment;
  • Website security;
  • Advertising personalisation.

We do not ordinarily make decisions based solely on automated processing that produce legal or similarly significant effects, unless permitted by law and appropriate safeguards are provided.

21. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

  • Changes in law;
  • Changes in Shopify features;
  • New service providers;
  • New business practices;
  • Changes in how information is collected or used.

The updated version will be posted on this page with a revised “Last updated” date.

Where required, we will provide additional notice of material changes.

22. Contact Us

For questions, complaints or privacy requests, contact:

ORIGINI TECH
Email: support@originitech.com
Website: www.originitech.com