Privacy Policy

1. Introduction & Scope

This Privacy Policy explains how ORLITHY, LLC collects, uses, processes, protects, and shares personal information when customers visit, browse, create an account on, communicate with, or make purchases through orlithy.com. This policy also describes the choices and privacy rights that may be available to customers under applicable data protection laws.

By using orlithy.com, you acknowledge that personal information may be processed as described in this Privacy Policy. Where applicable law requires consent for a particular processing activity, we will request that consent separately.

2. Website Platform & Store Infrastructure

This website is a self-hosted store built on WordPress and powered by WooCommerce. WordPress provides the website content-management framework, while WooCommerce provides ecommerce functionality including product presentation, shopping cart functions, checkout, order records, customer accounts, and related store operations.

Because the store is self-hosted, ORLITHY, LLC is responsible for administering the website environment and taking reasonable technical and organizational measures to protect information stored within systems under our control. Certain functions, including payment processing, shipping, analytics, security, and communications, may be provided by authorized third-party service providers.

3. Information We Collect

Depending on how you interact with our website, we may collect information such as your name, billing address, shipping address, email address, telephone number, order number, products purchased, order value, shipping method, transaction status, customer account information, messages submitted through contact forms, and other information reasonably necessary to process an order or respond to a request.

We may also collect technical information such as IP address, browser type, device type, operating system, approximate location derived from IP information, referring pages, pages viewed, session information, timestamps, cookie identifiers, and security-related logs.

4. Information Collected During Checkout

When you place an order, we collect the information reasonably required to confirm the purchase, fulfill the order, communicate with you, arrange delivery, process returns or refunds, maintain transaction records, and prevent fraudulent or unauthorized activity.

Checkout information may include your name, billing and shipping details, contact information, selected delivery method, order contents, transaction reference information, and payment status. Payment credentials themselves are handled by the applicable payment provider as described below.

5. Stripe & PayPal Payment Processing

Payments made through orlithy.com are processed through authorized third-party payment service providers, including Stripe and PayPal. Depending on the payment method selected at checkout, Stripe or PayPal may securely collect and process information necessary to authorize and complete the transaction.

We do not store customers' complete payment credentials on our own systems. In particular, ORLITHY, LLC does not store complete credit or debit card numbers, CVV/CVC security codes, online banking credentials, or complete digital-wallet authentication credentials.

Sensitive payment information is transmitted directly to the applicable payment processor through its secure payment environment. We may receive limited transaction information, such as payment status, payment method type, transaction reference, authorization result, refund status, or the last digits of a card where supplied by the processor, where necessary to administer an order and maintain appropriate transaction records.

6. How We Use Personal Information

We use personal information for legitimate ecommerce and business purposes, including processing and fulfilling orders, arranging delivery, communicating order status, providing customer service, managing returns and refunds, operating customer accounts, preventing fraud, maintaining website security, complying with legal obligations, resolving disputes, and maintaining appropriate business and transaction records.

We do not use personal information in a manner materially incompatible with the purposes for which it was collected unless permitted or required by applicable law.

7. Order Processing & Fulfillment

We use customer information to verify orders, prepare merchandise, identify the correct recipient, generate shipping information, communicate with logistics providers, provide tracking information, and address delivery problems.

For worldwide shipping, relevant information such as recipient name, shipping address, telephone number, email address, package information, and other necessary delivery details may be provided to shipping carriers, postal operators, courier companies, customs authorities, or logistics partners where required to complete delivery.

8. Customer Service & Communications

When you contact us through email, a website form, or another available communication channel, we may collect your name, email address, order number, message content, photographs, attachments, and other information you voluntarily provide.

We use this information to respond to questions, investigate delivery or product concerns, assist with returns and refunds, resolve payment matters, and maintain appropriate records of customer communications.

9. Returns, Refunds & Dispute Records

When processing a return, refund, damaged-item claim, payment inquiry, or chargeback-related matter, we may retain relevant records such as order confirmations, delivery tracking, delivery confirmation, customer correspondence, submitted photographs, return tracking, inspection results, transaction references, and refund confirmation.

These records help us determine the history of a transaction, process legitimate customer requests, respond accurately to payment providers, prevent misuse, and provide appropriate evidence when Stripe, PayPal, a bank, card issuer, or other authorized payment institution reviews a payment dispute.

10. Fraud Prevention & Transaction Security

We may use information relating to an order, device, network connection, payment status, delivery address, account activity, and transaction history to identify potentially unauthorized, fraudulent, or abusive activity.

Stripe, PayPal, card issuers, banks, and other payment providers may independently apply fraud screening, authentication, transaction monitoring, automated risk assessment, or security checks. Where supported, technologies such as 3D Secure authentication may be used to help confirm authorized payment activity.

11. Data Security Measures

We use reasonable technical and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, loss, destruction, or misuse. These safeguards include HTTPS connections, SSL/TLS encryption, controlled administrative access, strong account credentials, access restrictions, software updates, security monitoring, server-level protections, and secure configuration practices.

We also take steps to limit access to personal information to persons or service providers who reasonably require access to perform legitimate business functions. Administrative access to WordPress, WooCommerce, hosting environments, and related systems is restricted and managed according to operational need.

12. Payment Security Measures

Payment security is supported through Stripe, PayPal, and other applicable financial networks rather than by storing sensitive payment credentials directly on our website. Payment-related protections may include SSL/TLS encrypted transmission, secure payment gateways, tokenization, PCI DSS-aligned payment environments, 3D Secure authentication, fraud screening, transaction monitoring, and automated risk controls.

Tokenization can allow payment providers to represent payment credentials using secure reference tokens rather than exposing complete card information to our store. These measures are designed to reduce the risk of unauthorized access to sensitive payment data.

13. Website Security & Monitoring

We may maintain technical logs and security records relating to website access, failed login attempts, administrative activity, suspicious requests, errors, and other events reasonably necessary to identify security threats and maintain website reliability.

Depending on our hosting and security configuration, protections may include firewall technologies, web application firewall protections, malware monitoring, automated backups, access logs, server monitoring, rate limiting, and security updates intended to reduce unauthorized access and malicious activity.

14. Cookies & Similar Technologies

Our website may use cookies and similar technologies that are necessary for functions such as maintaining shopping cart contents, remembering session information, supporting checkout, maintaining customer login sessions, protecting website security, and preserving basic website preferences.

Where optional analytics, advertising, or other non-essential cookies are used and applicable law requires consent, appropriate choices may be provided. Browser settings may also allow customers to restrict or delete cookies, although disabling necessary cookies may prevent certain shopping or checkout functions from working correctly.

15. Third-Party Service Providers

We may share limited personal information with service providers when reasonably necessary to operate our store. These providers may include Stripe, PayPal, website hosting providers, WooCommerce-related technology providers, shipping carriers, logistics companies, email service providers, fraud-prevention providers, security providers, analytics providers, and professional advisers.

We provide service providers only with information reasonably necessary for the relevant service. Their processing of information may also be governed by their own privacy policies, security practices, contractual obligations, and applicable laws.

16. Disclosure of Information

We do not sell customer payment credentials. Personal information may be disclosed when necessary to fulfill an order, provide requested services, comply with law, protect our rights, investigate suspected fraud, respond to lawful requests from authorities, enforce our policies, or resolve payment and transaction disputes.

Information may also be disclosed where reasonably necessary to Stripe, PayPal, banks, card issuers, payment networks, logistics providers, customs authorities, legal advisers, courts, regulators, or other authorized parties in connection with a legitimate transaction, legal obligation, or dispute.

17. International Data Processing

Because orlithy.com provides worldwide shipping and uses third-party service providers, personal information may be processed or transferred in countries other than the country where the customer resides.

Where personal information is transferred internationally, we seek to use service providers and processing arrangements that provide appropriate safeguards where required by applicable data protection law.

18. European Economic Area & GDPR Rights

If you are located in the European Economic Area, United Kingdom, or another jurisdiction applying comparable data protection requirements, applicable law may provide rights concerning your personal information.

Where the General Data Protection Regulation (GDPR) applies, personal information may be processed on legal bases including performance of a contract, compliance with legal obligations, legitimate interests, and consent where consent is specifically required.

Subject to applicable legal conditions and exceptions, GDPR rights may include the right to request access to personal information, correction of inaccurate information, deletion of certain information, restriction of processing, objection to certain processing, data portability, and withdrawal of consent where processing is based on consent.

Requests concerning applicable privacy rights may be submitted to [email protected]. We may need to verify the identity of the person making the request before providing, modifying, or deleting personal information.

19. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including order fulfillment, customer service, returns, refunds, fraud prevention, transaction reconciliation, payment disputes, accounting obligations, tax obligations, legal compliance, and enforcement of contractual rights.

Where no longer reasonably required for these purposes, operational customer information is generally deleted, anonymized, or otherwise removed from active systems within approximately 1 year, unless a longer retention period is required by law or is reasonably necessary for an unresolved transaction, refund, dispute, chargeback, legal claim, accounting requirement, or regulatory obligation.

20. Customer Accounts & Information Accuracy

Customers who create an account are responsible for maintaining the confidentiality of their login credentials and for providing accurate account information. Customers should not share account passwords with unauthorized persons.

If you believe your account has been accessed without authorization, please contact us promptly at [email protected]. Customers may also request correction of inaccurate contact or account information, subject to any records we are legally required to retain.

21. Children's Privacy

Our website is intended for general ecommerce use and is not specifically directed to children. We do not knowingly seek to collect personal information from children in violation of applicable law.

If a parent or legal guardian believes that a child has provided personal information to us without appropriate authorization, they may contact [email protected] so that we can review the matter and take appropriate action where required.

22. Privacy Questions, Requests & Policy Updates

For questions about this Privacy Policy, requests concerning personal information, or concerns regarding how information has been handled, customers may contact ORLITHY, LLC using the following information:

Company: ORLITHY, LLC
Address: 1144 Lake St, Ste 310, Oak Park, IL 60301, US
Telephone: +1(708)613-5411
Email: [email protected]

We may update this Privacy Policy when necessary to reflect changes in our website, WordPress or WooCommerce configuration, service providers, payment processing arrangements, legal requirements, security practices, or business operations. The version published on orlithy.com will represent the current Privacy Policy applicable to use of the website.