Privacy policy

UAE Privacy & Cookie Notice / إشعار الخصوصية وملفات الارتباط في الإمارات

This notice explains processing for VORELLI®’s UAE store, enquiries, orders and after-sales support. It does not itself give consent to marketing or optional tracking. Applicable mandatory privacy rights remain.

1. Controller and contact / المتحكم والتواصل

The UAE controller is ORION BESPOKE LUXURY ECOMMERCE - FZCO, operating VORELLI®. Registered address: Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, UAE. Privacy enquiries: sales@vorelli.ae; +971 58 565 1225. Correspondence: VORELLI® Studio, 504, Floor 5, Sobha Ivory 1, Business Bay, Dubai. This is separate from VORELLI LIGHTING LTD, the UK seller. Please mark rights requests and privacy concerns clearly.

2. Information and sources / المعلومات ومصادرها

We process contact, billing and delivery details, order/payment records, account information, preferences, project specifications and correspondence, including photographs relevant to quotations, delivery or claims. Sources include you, an authorised designer/contractor or other representative, and providers reporting on payments, delivery or services. Device and usage information can include IP address, browser/device identifiers, pages and interactions, subject to applicable law and privacy choices. Payment providers process information needed for the chosen payment method. Do not send full card details or unnecessary sensitive data in messages. Supply another person’s details only with a lawful basis and make this notice available to them. Providing project photographs for an enquiry is not blanket permission to publish identifiable private interiors or client details.

3. Purposes and processing basis / الأغراض وأساس المعالجة

We use necessary information to respond to requested enquiries, prepare quotations, enter into and perform orders, take payment, deliver goods and provide warranty/after-sales support. We also process information required for accounting, tax, safety and other legal obligations, and to establish, exercise or defend legal claims. Security, fraud prevention, administration and service improvement require a basis permitted by the applicable law. Where consent is required, we seek it separately, explain the purpose and allow withdrawal. Optional marketing consent is not a condition of purchase. Without information necessary for a transaction, we may be unable to quote, accept or fulfil it.

4. Marketing and cookies / التسويق وملفات الارتباط

You can unsubscribe from marketing emails or contact us to withdraw consent or exercise an applicable objection to marketing/profiling. Necessary order, delivery, warranty and safety messages may continue on the appropriate lawful basis. Browsing, an enquiry or acceptance of sale terms is not by itself consent. Withdrawal does not affect earlier lawful processing.

Cookies and similar technologies support basket/checkout, security, preferences, analytics and advertising. Necessary technologies and optional tracking are distinguished; we must obtain consent where required. Where displayed, the Shopify banner offers Accept, Decline and Manage preferences. Choices can depend on browser, device and region. Contact us for help changing preferences or information about the technologies/providers used; browser controls can also remove/block cookies, but blocking necessary technologies can affect checkout. Shopify’s Cookie Policy describes its technology purposes and durations; not every listed cookie is used on every visit. Third-party services may provide separate privacy controls.

5. Recipients and Shopify / المستلمون وShopify

Information is shared as necessary with hosting, payment, communications, records, fulfilment, courier and support providers and, subject to law and choices, analytics/advertising providers. Manufacturing/project partners should receive only what their role needs. Relevant information may also go to authorised representatives, advisers, insurers, authorities/courts, or parties to a lawful business transfer with appropriate protections.

The store uses Shopify. Shopify Network Intelligence is enabled: Shopify can use interactions with this store alongside data from other merchants for its services, advertising and personalisation, subject to applicable law and privacy choices. Other merchants do not thereby receive access to our customer records. Shopify may act as our processor and as a controller for its own services. Its Consumer Privacy Policy explains its processing and privacy portal. Independent payment/wallet and other services have their own notices; this does not remove our own responsibilities.

6. International processing / المعالجة الدولية

The Shopify hosting setting is the European Union. Providers and authorised business operations may involve processing or access outside the UAE; hosting location is not a promise that all processing stays in one territory. Cross-border disclosures must meet applicable UAE requirements, using a legally permitted protection, safeguard or exception as appropriate. Contact us for information about recipients, destinations and applicable safeguards for your information. A notice is not itself consent to every international transfer.

7. Retention and security / الاحتفاظ والأمن

We retain information only as needed for its purpose and applicable obligations. Transaction/accounting records follow relevant tax/company requirements and necessary claims periods. Enquiry/project records depend on activity, whether an order results and dispute needs. Limited purchase/specification evidence can be needed to administer a long-term warranty; that does not justify indefinite retention of all browsing or marketing data. Marketing records require a continuing lawful basis; a limited suppression record can be kept to honour an opt-out. Legal holds may require retention of relevant records. We assess necessity and sensitivity and delete or anonymise information no longer needed. Appropriate access and security safeguards are required; no system is risk-free. Contact us about a suspected data-security issue and protect account credentials.

8. Rights, automated decisions and complaints / الحقوق والقرارات الآلية والشكاوى

Subject to applicable conditions and exceptions, you may request information/access, correction, erasure, portability, restriction or cessation of processing, object where the law permits, and withdraw consent. Rights do not require us to destroy records lawfully required for an obligation or claim. If processing involves a solely automated decision with legal or similarly significant effects, you may request the information and human review or challenge safeguards provided by applicable law. Fraud/risk signals or advertising profiles do not automatically mean that every order is decided solely by automation.

Use the contact in section 1. We may seek proportionate identity/authority evidence to protect information, explain applicable limits and respond within the legally required period. Ask for management review if unresolved. You may also approach the competent UAE data-protection authority or another authority/court with jurisdiction; our process does not require you to waive or postpone a legal remedy. Statutory protections applicable to a person outside the UAE are preserved where applicable.

9. Changes / التغييرات

We revise this notice to reflect changes in practice or law and provide further notice or obtain consent where legally required. Publication does not retrospectively create consent, validate unlawful processing or override an existing obligation. You can request a copy relevant to your interaction.