PRIVACY POLICY
Last updated: 30 September 2026
At ORIRI, we take the protection of your personal data seriously. This Privacy Policy explains what personal data we collect, how and why we process it, with whom we may share it and what rights you have under applicable data protection law, including the General Data Protection Regulation (“GDPR”).
1. Who Is Responsible for Your Personal Data?
The data controller is:
Oriri Labs INT B.V.
Beethovenstraat 38
1077 JJ Amsterdam
The Netherlands
Beethovenstraat 38
1077 JJ Amsterdam
The Netherlands
Hereinafter referred to as “ORIRI”, “we”, “us” or “our”.
2. What Personal Data Do We Process?
Depending on how you interact with our website and services, we may process information including:
-
name;
-
billing and delivery address;
-
email address;
-
telephone number;
-
order and transaction information;
-
information regarding products purchased;
-
payment status and limited payment information;
-
communications with customer service;
-
IP address;
-
browser, device and technical information;
-
website usage and interaction information;
-
cookie and similar identifiers;
-
marketing preferences;
-
newsletter interactions; and
-
other information you voluntarily provide to us.
We aim to collect only the personal data reasonably necessary for the relevant purposes.
3. How Do We Use Personal Data?
We may process personal data for the following purposes:
Processing orders
To process purchases, arrange payments, deliver ORIRI RISE, process returns and provide customer support.
To process purchases, arrange payments, deliver ORIRI RISE, process returns and provide customer support.
Customer service
To answer questions, resolve complaints and respond to requests.
To answer questions, resolve complaints and respond to requests.
Administration and legal obligations
To maintain appropriate business records and comply with tax, accounting and other legal requirements.
To maintain appropriate business records and comply with tax, accounting and other legal requirements.
Website operation and security
To operate our website, prevent fraud and protect our systems, business and customers.
To operate our website, prevent fraud and protect our systems, business and customers.
Analytics and improvement
To understand how our website is used and improve our website, products and services.
To understand how our website is used and improve our website, products and services.
Marketing
Where we have an appropriate legal basis, to send information regarding ORIRI, products, launches, offers and other relevant communications.
Where we have an appropriate legal basis, to send information regarding ORIRI, products, launches, offers and other relevant communications.
Online advertising
Where consent is required and has been obtained, to measure advertising effectiveness, create audiences and personalise advertising.
Where consent is required and has been obtained, to measure advertising effectiveness, create audiences and personalise advertising.
4. Legal Bases for Processing
We process personal data only where we have a valid legal basis under applicable data protection law.
Depending on the processing activity, this may include:
-
performance of a contract, such as processing and delivering an order;
-
compliance with a legal obligation;
-
our legitimate interests, such as security, fraud prevention and certain limited business analytics, where these interests are not overridden by your rights and interests; or
-
your consent, including for certain marketing and tracking technologies.
Where processing is based on consent, you may withdraw your consent at any time.
Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
5. Online Store and Service Providers
We use third-party service providers to operate our website and business.
These may include:
-
e-commerce and hosting providers;
-
payment service providers;
-
fulfilment and delivery companies;
-
IT and security providers;
-
email and marketing platforms;
-
analytics providers;
-
advertising platforms;
-
accounting providers; and
-
professional advisers.
These parties receive personal data only to the extent reasonably necessary to provide the relevant services or where another valid legal basis exists.
Where required, we enter into appropriate data processing agreements and other contractual privacy safeguards.
6. Email Marketing
If you subscribe to our newsletter or otherwise validly consent to receiving marketing communications, we may use your contact details to send you ORIRI news, product information, launches, offers and other marketing communications.
You may unsubscribe at any time by using the unsubscribe link included in our marketing emails or by contacting us.
Where applicable law permits us to inform existing customers about our own similar products without separate prior consent, we will always provide an easy way to opt out.
7. Cookies and Similar Technologies
Our website may use cookies and similar technologies.
These may include:
Essential cookies
These cookies are necessary for the website and online store to function properly, including shopping-cart, checkout, security and preference functionality.
These cookies are necessary for the website and online store to function properly, including shopping-cart, checkout, security and preference functionality.
Analytics cookies
These help us understand how visitors use our website and how we can improve its performance and user experience.
These help us understand how visitors use our website and how we can improve its performance and user experience.
Marketing and tracking cookies
These technologies may be used to measure advertising performance, understand customer journeys, create audiences and make advertising more relevant.
These technologies may be used to measure advertising performance, understand customer journeys, create audiences and make advertising more relevant.
Where applicable law requires consent, non-essential cookies and tracking technologies will only be placed or activated after valid consent has been obtained.
You can manage your cookie preferences through our cookie banner or cookie settings and withdraw consent where applicable.
8. Social Media and Advertising
ORIRI may use social media platforms and advertising services to run and measure marketing campaigns.
Where marketing or tracking technologies involve processing for which consent is required, we will only use those technologies after valid consent has been obtained.
Relevant third-party platforms may also process personal data independently in accordance with their own privacy policies.
9. Payments
Payments are processed through the payment methods and payment service providers made available during checkout.
We generally do not receive complete payment credentials, such as full credit card information, where these are processed directly by the payment provider.
We may receive information such as payment status, transaction references, payment method and other information necessary to administer your order and payment.
10. Shipping and Fulfilment
To deliver your order, we may share necessary personal data with fulfilment partners, postal services, couriers and other logistics providers.
This may include your name, delivery address, email address and/or telephone number where necessary to complete delivery or provide delivery notifications.
11. International Data Transfers
Some of the service providers we use may process personal data outside the European Economic Area (“EEA”) or make such data accessible from outside the EEA.
Where personal data is transferred to a country that is not covered by an adequacy decision, we will use appropriate safeguards where required, such as European Commission-approved Standard Contractual Clauses or another legally recognised transfer mechanism.
12. How Long Do We Keep Your Data?
We do not retain personal data for longer than reasonably necessary for the purpose for which it was collected unless a longer retention period is required or permitted by law.
The applicable retention period depends on factors including:
-
the nature of the personal data;
-
the purpose for which it is processed;
-
statutory tax and accounting retention requirements;
-
potential disputes or legal claims; and
-
whether consent has been withdrawn or an objection has been made.
Once the relevant retention period expires, personal data will be deleted or anonymised unless further retention is legally permitted or required.
13. Data Security
We take appropriate technical and organisational measures designed to protect personal data against loss, unauthorised access, alteration, disclosure or other unlawful processing.
However, no digital system or method of electronic transmission can guarantee absolute security.
14. Your Privacy Rights
Subject to the requirements and exceptions under applicable data protection law, including the GDPR, you may have the right to:
-
access your personal data;
-
correct inaccurate or incomplete personal data;
-
request deletion of your personal data;
-
request restriction of processing;
-
object to certain processing;
-
receive or transfer certain personal data where the right to data portability applies;
-
withdraw consent where processing is based on consent; and
-
object to direct marketing.
To exercise your rights, contact:
We may request additional information where reasonably necessary to verify your identity before processing your request.
You also have the right to lodge a complaint with the competent data protection supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).
15. Children
Our online store is not specifically directed at children.
We do not knowingly collect children's personal data in a manner that would violate applicable data protection law.
16. Automated Decision-Making
ORIRI does not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you, unless such processing is lawful and the required information and safeguards are provided.
17. Third-Party Websites
Our website may contain links to third-party websites, services or platforms.
ORIRI is not responsible for the privacy practices or data processing activities of those third parties. We encourage you to review their respective privacy policies.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, technology, services or applicable legislation.
The latest version will be published on our website, with the date of the most recent update shown at the top of this Privacy Policy.
19. Contact
If you have questions regarding this Privacy Policy or our processing of your personal data, please contact:
Oriri Labs INT B.V.
Beethovenstraat 38
1077 JJ Amsterdam
The Netherlands
Beethovenstraat 38
1077 JJ Amsterdam
The Netherlands