سياسة الخصوصية
Privacy & Cookie Notice. This notice explains personal information used by VORELLI LIGHTING LTD in operating its UK store, handling enquiries and supplying products. It is not consent to marketing or optional tracking.
1. Controller and contact
The controller is VORELLI LIGHTING LTD, trading as VORELLI®, company number 14267449. Contact sales@vorelli.co.uk, 0800 888 6112, or Unit 3, Maxwell Road, Middlesbrough, TS3 8TE, United Kingdom. Please mark privacy enquiries for the privacy contact. This notice does not identify a separate overseas VORELLI business as the controller of this UK store.
2. Information and sources
We process information you provide through orders, quotations, accounts, forms and correspondence: contact details, billing and delivery details, order and payment records, preferences, project specifications and messages or photographs relevant to your enquiry, delivery or warranty claim. Payment providers process the payment information needed for your chosen method. Please do not send full payment-card details or unnecessary sensitive information in correspondence.
Information may also come from an authorised designer, architect, contractor or other person arranging a project for you, and from payment, delivery and service providers reporting on a transaction. Device and usage information may include IP address, browser, device identifiers, pages visited and interactions, subject to the cookie choices and rules below. If you supply another person's details, please ensure you have a lawful reason and make this notice available to them.
3. Purposes and lawful bases
- Enquiries, quotations, orders, payment, delivery and after-sales support: performance of our contract with you or steps you request before contracting. Where you represent a business or another purchaser rather than being the contracting individual, our legitimate interest is managing that relationship and fulfilling the order.
- Accounting, tax, product-safety duties and legally required records or disclosures: compliance with applicable legal obligations.
- Security, fraud prevention, operational administration, proportionate service improvement, complaints and legal claims: our legitimate interests in protecting customers and the business, running a reliable service and establishing or defending legal rights, balanced against your rights and expectations. This is not a substitute for consent where electronic-communications law requires it.
- Optional advertising, non-essential tracking and personalisation: consent where required. Our UK cookie banner requests a choice for optional analytics, advertising and personalisation.
- Direct marketing: consent where required, or legitimate interests where the law permits marketing without consent, including a qualifying existing-customer relationship with the required opt-out opportunities or appropriate business-to-business contact. Each communication must meet the applicable marketing rules.
Information needed to identify, price, fulfil or administer an order is necessary for that transaction. Without it we may be unable to quote, accept payment, deliver or resolve a claim. Optional marketing consent is not a condition of purchasing.
4. Marketing choices
You may unsubscribe using the link in a marketing email or contact us to object to direct marketing. We will stop direct marketing to you, including related profiling, when you object. Necessary order, delivery or safety messages are not marketing and may still be sent. Where consent is the basis, you can withdraw it without affecting the lawfulness of earlier processing. Browsing the website, accepting sale terms or making an enquiry is not automatically marketing consent.
5. Recipients and Shopify
We share information where necessary with service providers supporting store hosting, payments, communications, business records, order fulfilment, delivery, customer support and, subject to applicable choices, analytics and advertising. Manufacturing or project partners should receive only information needed for their role. We may also disclose information to professional advisers, insurers, authorities or courts where necessary and lawful, or for a lawful business transfer subject to appropriate protection. A designer or contractor involved in your order may receive relevant updates where authorised.
Our store uses Shopify. Shopify Network Intelligence is enabled: Shopify may use interactions with this store alongside information from other Shopify merchants to support products, advertising and personalised services, subject to applicable law and privacy choices. Other merchants do not receive access to our customer records through this feature. Shopify can act as a processor for our store and as a controller for its own services. See Shopify's Consumer Privacy Policy for its purposes, rights and contact routes. A separate payment, wallet or third-party service also has its own privacy notice.
6. International processing
Although our Shopify data-hosting setting is in the European Union, use of international providers can involve processing or access outside the UK, including Shopify operations in Ireland, Canada and the United States. Hosting location alone is not a promise that all processing stays in one country.
Restricted transfers require a lawful UK transfer mechanism, such as applicable adequacy regulations or appropriate contractual safeguards, including the UK International Data Transfer Agreement or UK Addendum where relevant, with any required additional assessment or measures. Shopify describes its own transfer arrangements in its privacy notice. Contact us for information about recipients, destinations and relevant safeguards for your data, including how to obtain a copy where applicable.
7. Retention and security
We retain information only for as long as needed for its purpose and applicable obligations. Order, payment and accounting records are retained for the relevant tax and company-record requirements and any necessary claim period. Enquiry and project records are retained according to whether the enquiry remains active, becomes an order, or is reasonably needed to resolve a dispute. Limited purchase, specification and claim evidence may be needed longer to administer an applicable long-term warranty; that does not justify retaining every marketing or browsing record indefinitely.
Marketing details are retained while there is a valid basis to contact you. A limited suppression record may be retained after an opt-out to ensure it is respected. Cookie lifetimes vary by function and provider as explained below. A legal claim or statutory obligation may require longer retention of relevant records. We assess necessity, sensitivity, available alternatives and applicable legal periods when determining retention, and delete or anonymise information no longer needed.
We use appropriate technical and organisational safeguards and limit access according to need. No internet or storage system is risk-free. Keep account credentials secure and contact us promptly about a suspected security issue.
8. Cookies and similar technologies
This section is our cookie notice; there is no separate policy you need to locate. Cookies and similar technologies support the basket, checkout, security, preferences, measurement and advertising. Strictly necessary technologies support services you request and do not require optional-cookie consent. Optional analytics, advertising and personalisation are covered by the UK banner's choice.
The banner offers Accept, Decline and Manage preferences. Simply continuing to browse is not agreement. Use these controls when shown, and contact us if you need help changing a recorded preference or withdrawing consent. Your browser can also block or remove cookies for this site; deleting preference cookies may cause a choice to be requested again. Blocking essential cookies can affect the basket, account or checkout. Preferences can be specific to the device and browser.
Shopify's Cookie Policy lists its storefront cookie purposes and durations, including basket, consent, session and analytics technologies; not every listed cookie is used in every visit. Session cookies expire with the session, while persistent cookies last until expiry or deletion. Other services used on the store may use their own technologies according to the choices and features you use. Contact us for details of a particular provider or cookie. Consent withdrawal does not make earlier lawful processing unlawful.
9. Your rights and automated processing
Depending on the circumstances, you may request access to your information, correction, erasure, restriction or data portability; object to processing based on legitimate interests; and withdraw consent. The right to object to direct marketing is absolute. Other rights have statutory conditions and exceptions, including records we must lawfully retain.
Providers may use automated fraud or risk signals, and permitted advertising or personalisation may use device and browsing profiles. Where a decision based solely on automated processing has legal or similarly significant effects and applicable law gives safeguards, you may request information, human intervention, express your view and challenge the decision. Contact us about an order decision or processing concern; use a separate provider's rights route where it is the responsible controller.
Contact us using section 1. We may request proportionate identity information to protect your data. We normally respond within one month, subject to lawful extensions or exceptions which we will explain. Exercising a right does not require buying a service or waiving a consumer remedy.
10. Complaints and updates
You may raise a concern with us or complain to the Information Commissioner's Office. You need not complete our complaints process before approaching the ICO.
We update this notice when practices or requirements change and provide additional notice where required for significant changes. Posting a new notice does not create consent retrospectively or authorise a new incompatible use of existing information.