Privacy policy

Account, order and security data are protected by access controls, multi-tenant isolation and encryption where configured. Operational retention follows defined policies and business records are not automatically deleted without a business rule or applicable obligation.

Aggregate operational statistics

With your permission, ORVENDI measures pages and actions by category, language and optionally country, without visitor identifiers or individual journeys. Technical, security and order counters remain necessary to the service.

When enabled, our internal statistics count page views and selected actions by page category and language. Browser reports are immediately aggregated without analytics cookies or identifiers, full URLs, link parameters, email addresses or cart contents. They do not count unique visitors or reconstruct individual journeys. When geographic reporting is enabled, a local database derives an approximate country from the network address forwarded by our hosting provider. Only a country counter is retained, without IP addresses, cities, precise positions or a list of online people. IP database: DB-IP Lite (db-ip.com), CC BY 4.0. Do Not Track and Global Privacy Control disable these browser reports. Cumulative counters are retained; the configured time-series history is limited to at most 30 days. Aggregate operational data about orders, payments, subscriptions and email delivery remains separate from browser reports. This internal reporting is not linked to Meta advertising identifiers. Temporary abuse controls and security logs follow their own retention rules.

Understanding cookies

Personalised advertising in stores

If the seller enables their Meta Pixel, you can separately accept, decline or withdraw advertising consent in the store. Your choice lasts 180 days. After acceptance, viewed products, cart additions and orders actually paid may be sent to Meta with their amount, currency and technical browser information. ORVENDI does not send your name, email, phone or address in these events. Withdrawal stops future events and removes local advertising identifiers; it does not remove data already received by Meta.