Privacy policy

Last updated: July 2, 2026

Orycea ("Orycea", "we", "us", or "our") respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), applicable Portuguese legislation, including Law No. 58/2019, and other applicable European Union data protection laws.

This Privacy & Cookie Policy explains how we collect, use, store, protect, and, where necessary, share your personal data when you visit our website, create an account, place an order, contact us, or otherwise use our services.

By using our website, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

The data controller responsible for the processing of personal data collected through this website is the operator identified in the Legal Notice available on this website.

If you have any questions regarding this Privacy & Cookie Policy or wish to exercise your rights under the GDPR, you may contact us at:

E-mail: hi@orycea.com

2. Personal Data We Collect

Depending on how you interact with our website, we may collect the following categories of personal data.

Information You Provide Directly

Full name;
Email address;
Telephone number;
Billing address;
Shipping address;
Information required for invoicing;
Order details;
Customer account information (where applicable);
Information submitted through our contact forms or customer support communications.
Information Collected Automatically

When you browse our website, we may automatically collect certain technical information, including:

IP address;
Browser type and version;
Operating system;
Device type;
Date and time of access;
Pages visited;
Products viewed;
Interactions with the website;
Usage and performance data.

This information is collected through cookies and similar technologies.

Information Received from Third Parties

We may receive personal data from service providers necessary for the operation of our business, including:

Shopify, as the platform hosting and operating our online store;
Payment service providers;
Shipping and logistics providers;
Analytics providers;
Marketing service providers, where applicable.

3. Purposes of Processing

We process your personal data for the following purposes:

Processing and delivering orders;
Managing payments;
Issuing invoices;
Processing returns, exchanges, and refunds;
Providing customer support;
Creating and managing customer accounts;
Complying with legal, tax, and accounting obligations;
Preventing fraud and misuse of our website;
Maintaining website and system security;
Improving our website and customer experience;
Performing statistical analysis;
Sending newsletters and marketing communications where permitted by law or with your consent.

4. Legal Basis for Processing

We process your personal data on one or more of the following legal grounds under Article 6 of the GDPR:

Performance of a contract or pre-contractual measures;
Compliance with legal obligations;
Our legitimate interests, provided they do not override your rights and freedoms;
Your consent, where required by law.

Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before its withdrawal.

5. Marketing Communications

We may send promotional communications by email where permitted by law or where you have provided your consent.

You may unsubscribe at any time by clicking the unsubscribe link included in our marketing emails or by contacting us at hi@orycea.com.

Even if you opt out of marketing communications, we may still send service-related emails regarding your orders, payments, account security, or other information necessary to provide our services.

6. Cookies

Our website uses cookies and similar technologies to ensure proper functionality, improve your browsing experience, and collect analytical information.

The cookies we use may include:

Strictly necessary cookies;
Preference cookies;
Performance and analytics cookies;
Marketing cookies, subject to your consent.

Non-essential cookies will only be placed after you have given your consent through our cookie consent platform.

You may change or withdraw your cookie preferences at any time through our cookie settings or your browser settings.

Disabling certain cookies may affect the functionality of the website.

For further information about the cookies we use and how to manage your preferences, you may consult our Cookie Policy if provided separately.

7. Sharing of Personal Data

Your personal data may be shared only where necessary with service providers essential to the operation of our business, including:

Shopify, as the platform hosting and operating our online store, which may act as either a data processor or an independent data controller for certain processing activities in accordance with its own Privacy Policy;
Payment service providers;
Shipping and logistics providers;
IT infrastructure and hosting providers;
Marketing service providers, where applicable;
Public authorities, courts, tax authorities, or regulators where disclosure is required by law.

All service providers are contractually required to process personal data securely and only for authorised purposes.

We do not sell your personal data to third parties.

8. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area (EEA).

Whenever personal data is transferred internationally, we ensure that appropriate safeguards are in place in accordance with the GDPR, including adequacy decisions adopted by the European Commission or the use of Standard Contractual Clauses where applicable.

9. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with applicable legal obligations.

In particular:

Invoicing and accounting information will be retained for the period required by applicable tax and accounting legislation;
Order-related information will be retained as necessary to comply with legal obligations and defend legal claims;
Marketing data will be retained until you withdraw your consent or object to such processing.

Once the applicable retention period expires, your personal data will be securely deleted or anonymised unless we are legally required to retain it for a longer period.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

11. Your Rights

Subject to applicable law, you have the right to:

Access your personal data;
Request correction of inaccurate or incomplete data;
Request deletion of your personal data;
Request restriction of processing;
Object to processing;
Request data portability;
Withdraw your consent where processing is based on consent;
Not be subject to decisions based solely on automated processing, where applicable.

You may exercise these rights free of charge by contacting us at:

E-mail: hi@orycea.com

If you believe that your personal data has been processed unlawfully, you also have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados – CNPD) or with your local supervisory authority.

12. Children's Privacy

Our products and services are not intended for children under the age of 13.

We do not knowingly collect personal data from children under 13 years of age. If we become aware that personal data has been collected from a child without the legally required authorisation, we will delete such information as soon as reasonably possible.