Legal
Privacy Policy
Last updated: August 3, 2026
OREALAS GROUP LLC ("OREALAS", "we", "us") respects your privacy. This policy explains what personal information we collect, why we collect it, who we share it with, and the rights you have over it. It applies to this website and to the online stores we operate.
If you have questions about this policy or wish to exercise any of your rights, contact us at support@orealas.com.
1. Information we collect
We collect the following categories of personal information:
- Contact information — name, email address, postal address, and telephone number when you place an order or contact us.
- Order information — items purchased, order value, delivery address, and order history.
- Payment information — processed directly by our payment providers. We do not store or have access to your full card number.
- Device and analytics data — IP address, browser type, device type, pages viewed, and referring site, collected automatically when you visit.
- Communications — the content of emails and support messages you send us.
2. How we use your information
We use personal information for the following purposes:
- To process, fulfil, and deliver your orders, including sending order and shipping confirmations.
- To provide customer support and respond to your inquiries.
- To process returns, refunds, and replacements.
- To detect and prevent fraud and to secure our website.
- To improve our products, website, and service using aggregated analytics.
- To send marketing communications where you have opted in. You can unsubscribe at any time using the link in any marketing email.
- To comply with legal, tax, and accounting obligations.
3. Legal bases for processing
Where the GDPR applies, we process personal information on the following legal bases: performance of a contract (to fulfil your order), legitimate interests (to secure our services, prevent fraud, and improve our products), consent (for marketing communications and non-essential cookies), and legal obligation (for tax and accounting records).
4. We do not sell your personal information
We do not sell your personal information, and we do not share it for cross-context behavioural advertising as those terms are defined under the California Consumer Privacy Act. We have not sold personal information in the preceding twelve months.
7. Data retention
We keep order and transaction records for as long as required by tax and accounting law, which is generally seven years. Support correspondence is kept for up to three years. Marketing contact details are kept until you unsubscribe. Analytics data is retained in aggregated form.
When personal information is no longer needed for the purpose it was collected for, we delete it or anonymise it.
8. Your rights
Depending on where you live, you have some or all of the following rights over your personal information:
- Access — request a copy of the personal information we hold about you.
- Correction — ask us to correct information that is inaccurate or incomplete.
- Deletion — ask us to delete your personal information, subject to records we are legally required to keep.
- Portability — receive your information in a portable, machine-readable format.
- Objection and restriction — object to or restrict certain processing, including direct marketing.
- Withdraw consent — withdraw consent at any time where processing is based on consent.
- Non-discrimination — we will not deny service, charge different prices, or provide a lesser quality of service because you exercised your privacy rights.
9. How to exercise your rights
Email support@orealas.com with your request. We may need to verify your identity before acting, usually by confirming details of a recent order. We respond to verified requests within 30 days, or within 45 days where the request is complex, and we will tell you if we need the additional time. Exercising these rights is free of charge.
Residents of California may designate an authorised agent to make a request on their behalf. Residents of Canada may address requests under PIPEDA to the same email.
10. Security
We use appropriate technical and organisational measures to protect personal information, including encryption in transit, access controls, and vetted processors. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. International transfers
We are based in the United States and our service providers may process information in the United States, Canada, and other countries. Where personal information is transferred out of a jurisdiction with data transfer restrictions, we rely on appropriate safeguards such as standard contractual clauses.
12. Children's privacy
Our website and stores are not directed at children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
13. Changes to this policy
We may update this policy from time to time. The current version is always published on this page with the last-updated date shown above. Material changes will be communicated by email where we have your address and the change affects you.
14. Contact
Privacy questions and requests: support@orealas.com
OREALAS GROUP LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States
Policy issued by
OREALAS GROUP LLC30 N Gould St Ste R, Sheridan, WY 82801, United States
support@orealas.com