Privacy Notice
Last updated: October 28, 2026
Who is responsible for your information
Xiamen Xiongqitong Technology Co., Ltd., operating ORVESSAORV at https://orvessaorv.com/, is the controller of personal information used to run this store and manage customer relationships. Contact service@orvessaorv.com or write to the registered address below about this Notice or your privacy rights. This Notice covers store visitors, customers, and people who contact us.
Information and its sources
Information you supply includes your name, email, telephone number, billing and delivery addresses, account information if you create an account, order instructions, and messages sent to support. Returns and complaints may include photographs, product details, and correspondence. Avoid including unrelated personal information in an image or message.
Order and payment records include products, quantities, prices, discounts, transaction references, payment status, and limited payment details received from processors. Payment providers handle the credentials needed to authorize payment. We do not ask you to email complete card numbers or card security codes.
Technical and usage information can include IP address, browser, device type, cookie identifiers, referring pages, searches, page visits, cart interactions, and purchase events. Approximate location may be inferred from IP address. Information comes from your browser and device, Shopify, payment providers, carriers, and service providers that support the store. We do not require precise location or sensitive personal information for an ordinary purchase.
Why we process information
To form and perform the purchase contract, we use contact, delivery, order, and transaction information to accept orders, collect payment, arrange delivery, communicate about a purchase, and handle returns or refunds.
To meet legal obligations, we keep required tax, accounting, transaction, and complaint records and respond to valid legal requests. To pursue legitimate interests, where that basis is available, we use proportionate information for security, fraud prevention, customer support, dispute handling, and reliable store operation. We balance those interests against your rights and reasonable expectations.
For optional advertising technologies, non-essential analytics, and promotional messages, we obtain consent where required. Where another legal basis is permitted, we apply the relevant opt-out rights. Permission to receive advertising is not a condition of buying a product. Withdrawing consent does not affect earlier lawful processing.
Who receives information
Shopify provides the commerce platform and related hosting, checkout, security, and operational services. Shopify may also process information for its own purposes as described in its Consumer Privacy Policy: https://www.shopify.com/legal/privacy/consumers. You can review Shopify's information and rights portal at https://privacy.shopify.com/.
Payment services available for your transaction receive the information needed for authorization, settlement, fraud screening, and disputes. Logistics and fulfillment providers receive delivery details and the order information needed to ship or return goods. Support, technical, and communication providers process information needed to deliver their services.
Our storefront includes an AppLovin integration and Axon Pixel configuration for advertising attribution and measurement. When enabled and permitted by your choices and applicable law, these technologies may receive online identifiers, device and browsing information, and shopping or purchase events to measure campaigns or support advertising. The Cookie Policy explains categories and controls. Disclosures for advertising can be treated as a sale, sharing, or targeted advertising under some laws even without a monetary payment.
Professional advisers, authorities, or a successor business may receive relevant records where reasonably necessary for legal compliance, rights protection, or a genuine business transaction, with applicable safeguards. We limit disclosures to the information needed for the relevant purpose and require appropriate protections from providers acting on our instructions.
Advertising and U S privacy disclosures
For the store activities described above, the relevant categories are identifiers and contact information, commercial and transaction information, internet or device activity, approximate location, and customer communications. Their sources, purposes, and recipients are described in this Notice. Advertising disclosures concern online identifiers, internet activity, approximate location, and shopping events; they are not necessary to fulfill an ordinary order.
Where applicable U.S. state laws cover our activities, you may opt out of sale, sharing, or targeted advertising through Your Privacy Choices and the site's preference controls. We process legally recognized Global Privacy Control signals as required. We do not knowingly sell or share personal information of people under 16. We do not use sensitive personal information to infer personal characteristics or require it for normal shopping. If a legally regulated practice changes, we will provide the required notice and controls before starting it.
International processing
Our company is established in China. Shopify and other providers may process information in the United States and other countries. Privacy protections can differ between countries. Where EEA, UK, or other transfer rules apply, transfers must use an appropriate lawful mechanism, such as an adequacy decision or applicable standard contractual clauses with necessary additional safeguards. Contact us for information about the mechanism relevant to your data or a copy of available safeguards, subject to lawful redactions.
How long information is kept
Order, payment, tax, and accounting records are retained for the period required by the relevant recordkeeping laws and for unresolved legal claims. Support and return records are kept for the time needed to resolve the matter and any applicable complaint or limitation period. Account information is kept while the account remains active and thereafter only for a justified legal or operational reason.
Marketing contact details are kept until you unsubscribe, withdraw consent, or they are no longer needed; we may retain a minimal suppression record to respect an opt-out. Cookie and device data follow the lifetimes of the applicable technology and consent settings; session technologies normally expire when the session ends, while persistent technologies remain until expiry or deletion. We do not keep identifiable information indefinitely merely because it might be useful. We delete or de-identify records when their justified retention ends, subject to legal holds and secure backup cycles.
Your rights and how to request them
Depending on the law that applies, rights may include access, correction, deletion, portability, restriction, objection, withdrawal of consent, and opting out of advertising-related sale or sharing. Where applicable, you may appeal a refusal by replying to our response with “Privacy appeal.” We will explain the outcome and any available regulator complaint route. We will not unlawfully discriminate against you for using a right.
Send requests to service@orvessaorv.com. We verify identity only as reasonably necessary and may verify an authorized agent's authority. An advertising opt-out does not require an account or an unnecessary identity check. For requests governed by the GDPR or UK GDPR, we normally respond within one month; a permitted extension of up to two further months will be explained within the first month. Applicable U.S. state requests are normally answered within 45 days, with a permitted extension explained within the initial period. Shorter deadlines and specific opt-out deadlines take priority.
You may complain to your local data protection authority where that right applies, including an EEA supervisory authority or the UK Information Commissioner's Office. You do not have to contact us before approaching an authority.
Cookies and promotional messages
Necessary technologies support checkout, security, and choices. Optional analytics and advertising follow applicable consent and opt-out requirements. See Cookie Policy and Your Privacy Choices for controls. Browser cookie deletion is an additional option, but it may reset saved choices and does not replace a provider's opt-out mechanism. Use the unsubscribe link in a promotional email or contact us to stop marketing; necessary order, security, and service messages may continue.
Security and automated checks
We use reasonable technical and organizational safeguards, restrict access according to service needs, and address incidents as required by law. No system can promise absolute security. Payment and fraud services may use automated checks to identify risk. If an order is declined or held and you believe a mistake occurred, contact us for review. Where law grants safeguards concerning a solely automated decision with legal or similarly significant effects, you may request the applicable explanation, human intervention, and opportunity to challenge it.
Children and external services
The store is intended for adult shoppers and is not directed to children under 16. If you believe a child has supplied personal information inappropriately, contact us so we can investigate and take the required action. External sites and independently offered payment services have their own privacy notices; review them before submitting information.
Changes to this Notice
We update the date when this Notice changes. Material changes receive additional notice or consent where required. An update does not authorize a new use of previously collected information when another legal permission is necessary.
Business and contact information
ORVESSAORV is operated by Xiamen Xiongqitong Technology Co., Ltd..Registered business address: Room 1904, No. 307 Chengyi North Road, Jimei District, Xiamen, Fujian, China.Email: service@orvessaorv.comTelephone: +86 180 6449 9995Website: https://orvessaorv.com/