Privacy Policy

Understanding the information boundaries of an Ortavino purchase

There are several separate decisions behind an online order: deciding whether the website can recognize your session, deciding what details are needed to prepare a purchase, deciding which organization needs an address to deliver it, and deciding how long a record must remain available. This Privacy Policy explains the information boundaries at those decisions. It concerns use of https://ortavino.com, orders placed through the store, and messages related to shopping with Ortavino. A payment partner or another organization may also issue its own privacy notice for activities it controls independently.

Data Controller

For personal information that the Ortavino store determines how and why to process, the identified data controller is Wuhan Pinglixin Trading Co., Ltd.. We decide the purposes of store administration, order records, customer assistance, and our own communications. Other organizations may be independent controllers for their own legal obligations or services; their privacy notices can apply separately. Privacy questions or rights requests can be directed to the contact details here:

Operating Company: Wuhan Pinglixin Trading Co., Ltd.
Unified Social Credit Code (USCC): 91420114MAKC8T2H9F
Company Address: Factory Building 6-1381, No. 91 Huayuanwan 2nd Street, Daji Street, Caidian District, Wuhan, Hubei Province
Privacy Contact Email: service@ortavino.com
Contact Phone: +86 15035629847
Business Hours: Monday to Friday: 9:00 AM - 5:00 PM (UTC+8, China Standard Time)

When writing about a personal-information request, use “Privacy Request — Ortavino” as the subject and describe the action sought. Do not email passwords, full payment-card credentials, or identity documents unless a secure, proportionate verification step is specifically required. We may request information adequate to establish that you are entitled to act on the records concerned.

1. The point at which information enters the store

A browser connects. A visit can create network and device records such as an IP address, requested web pages, browser and operating-system characteristics, session identifiers, approximate region inferred from network information, timestamps, and error or security logs. These records are used to present pages, preserve essential features, recognize unusual traffic, and diagnose service interruptions. They may arise even if you do not complete a purchase.

A basket is prepared. The site may remember selected items, quantities, and other session choices so that navigation does not erase a shopping basket. Browser storage or cookies may support this continuity. When a sign-in feature is available and used, information associated with that feature may also be processed to authenticate the person returning to it.

A buyer submits checkout details. The information entered for a transaction can include a name, email address, telephone number, billing and delivery addresses, selected products, quantities, and other instructions needed for fulfillment. The store also creates order identifiers, totals, status events, and records of payments, shipment progress, cancellation, or refund decisions. These details make it possible to connect a purchase with its delivery and after-sales treatment.

A question or complaint is sent. If you write to us, we may receive your message, contact details, order reference, and any photographs or documents you choose to attach. We use the information to investigate and respond. Please share only what is needed for the issue. We may keep the conversation with the associated service record to avoid asking you to repeat the same facts.

A preference is recorded. If an optional subscription, communications preference, or privacy choice is offered and you make a selection, that selection and an associated contact or technical record may be stored so it can be honored. Not every visitor has the same preferences or uses the same features.

2. What each purpose permits us to do

An address given for shipment is used to arrange delivery and manage delivery problems; it is not automatically a request to receive promotional email. An order number may be used to retrieve a purchase history for a refund inquiry; it is not a reason to expose another buyer's information. Technical event records may help distinguish a normal checkout from automated misuse; they do not, on their own, tell us everything about a visitor.

More generally, we use relevant information to operate the online store, process and fulfill requested transactions, communicate necessary order events, answer support questions, manage refunds or claims, protect against fraud and unauthorized use, and meet accounting or other lawful recordkeeping requirements. If optional marketing is offered, it is treated separately from the communications needed to complete an order or respond to a request.

3. The legal reasons for these uses

Where the law requires a lawful basis for processing, the basis depends on the particular activity rather than a single permission covering the entire store. Preparing, dispatching, and supporting an order can require processing necessary to perform the purchase contract or take requested steps before a contract. Certain records are kept to comply with tax, accounting, consumer-protection, or other applicable obligations. Protecting website integrity, investigating abuse, and managing genuine disputes may involve legitimate interests where the law allows and those interests are properly balanced against individual rights.

Some nonessential communications, cookies, or other uses may require consent under the applicable rules. Where consent is the basis, it can be withdrawn for future use through the method provided for that activity or by contacting us. Withdrawal does not undo processing that was lawful when performed and does not override recordkeeping duties resting on another valid legal ground. Legal bases and available rights can differ by jurisdiction.

4. When a record leaves our immediate control

Ortavino uses Shopify infrastructure to host and operate its e-commerce storefront. The platform may handle website-session and transaction information in connection with those services. Other recipients may be involved when their work is necessary for a specific event: a payment service may determine whether a transaction was authorized; a delivery or logistics provider needs recipient details to move a parcel; communications or technical providers may transmit a necessary message; and professional advisers or authorities may receive relevant records for lawful claims or legal duties.

The purpose of the handoff matters. A carrier ordinarily requires shipment details, not the content of every service message. A payment organization may return a transaction result or reference to the store instead of revealing complete card credentials. A professional adviser may need records related to a dispute, not unrestricted access to all customers. We seek to limit disclosures to information relevant to the service or lawful purpose. Where an organization decides its own processing purposes, its independent privacy terms may govern that activity.

Information sent to a third-party service can also be subject to that provider’s security checks, legal obligations, and privacy choices. When a provider is independently responsible for those activities, questions about its separate processing may also be directed to that organization.

5. Cookies: continuity is different from observation

Some technologies help a website function. For example, a cookie or comparable browser storage may preserve the contents of a basket, remember a session setting, or help identify suspicious requests. Other technologies, if enabled, can measure interactions, personalize an experience, or support advertising. These functions are not interchangeable, and applicable consent and opt-out rules can treat them differently.

If the store provides a cookie banner or privacy-preference interface, the choices displayed there apply to the technologies described by that interface. Your browser may also let you inspect, block, or delete stored cookies. Restricting essential storage can cause portions of the basket, checkout, or account experience to stop working correctly. Where the law requires advance permission for a nonessential technology, that requirement governs its operation. A general visit to the store should not be treated as an unlimited authorization for unrelated processing.

6. Messages you requested and messages you did not

Service communications may be needed to confirm a purchase, clarify a shipping address, provide a delivery update, or resolve a return request. Such communications are connected to the transaction or support you initiated. If an optional promotional subscription is available and you choose it, we may process the contact details and preference necessary to send those messages. You can discontinue promotional emails through the unsubscribe method shown in a message, where provided, or by emailing service@ortavino.com. Stopping promotional messages does not necessarily stop essential order communications.

In locations that provide a right to object to direct marketing or to opt out of specific targeted advertising, sales, or sharing of personal information, you may exercise applicable choices through any store control presented for that purpose or by contacting the Data Controller. We will assess the request against the actual activity and the law that applies. For choices that concern a specific technology or processing activity, the availability of controls depends on the service involved and the rights provided by the law that applies to you.

7. Geography and cross-border processing

The operating company's address is in Hubei Province, China. A purchase may involve a customer, service platform, delivery company, and payment organization in different countries. As a result, information may be accessed, transmitted, or stored outside the country in which the customer lives. Foreign privacy laws may differ from the laws of the customer's residence. When a particular cross-border transfer is restricted, the transfer is subject to the safeguards or other mechanism required by the relevant law. This may include contractual terms or other recognized protections where applicable; the appropriate arrangement depends on the transfer concerned.

8. Different records have different end points

A brief technical session is not the same as a completed sale. Information connected solely to a session may be needed for a shorter time, while an order record can remain relevant for delivery, returns, taxes, financial reconciliation, fraud investigations, and consumer disputes. Correspondence about a complaint may be necessary until that matter is resolved and for a reasonable period afterward. Limited records of a privacy preference may be retained to ensure that the preference continues to be respected.

Retention is determined by the purpose, applicable duties, and legitimate need to resolve or defend a claim, together with the capabilities of the relevant systems. When there is no valid reason to keep personal information, it is deleted, de-identified, or otherwise handled using appropriate procedures. A fixed universal deletion timetable would not accurately reflect different statutory requirements, so no single period is promised for all categories.

9. Security without claims of perfect protection

We use reasonable administrative and technical protections appropriate to the type of information and the systems handling it. Examples of security objectives include controlling access, detecting irregular activity, and reducing the risk of unauthorized disclosure or alteration. People and services should have access only to information connected with their responsibilities. No website or online transmission method is completely free of risk. If you suspect an unauthorized use of your order information or an unusual message claiming to represent Ortavino, contact us without sharing secret credentials.

10. Requests you can make about your information

Privacy laws in different places give different rights. Depending on your location and the processing involved, you may be entitled to ask what personal information is held about you; obtain access to or a copy of it; correct inaccurate details; request deletion; limit or object to particular processing; seek portability; withdraw consent; or ask about certain automated decision-making. Some laws also provide rights to opt out of specified advertising-related activities, appeal a refusal, or complain to a supervisory authority.

To begin, write to service@ortavino.com and identify your request and, where available, the order or account to which it relates. We will use reasonable measures to verify authority before providing personal information or making a sensitive change. We will respond under the deadlines and exceptions of applicable law. For example, a request to delete a purchase record may be limited by a legal obligation to keep transaction documentation. Where the law requires an explanation, we will describe the reason for a refusal or limitation and available next steps.

11. Children, other websites, and changes to this notice

Ortavino's shopping functions are intended for people able to make purchases lawfully, including purchases arranged through a parent or guardian where appropriate. We do not knowingly seek personal information from children in breach of applicable child-privacy rules. Please contact us if you believe a child's details have been provided improperly, so the matter can be reviewed.

A link from our store to another website does not make that website part of our own data-handling environment. The external operator may collect and use information according to its own notice. We may update this policy when services, data handling, or legal requirements change, and the latest version will be made available on the website. An update does not remove privacy rights given by applicable law.

Contact for privacy matters

For questions about this notice or the way customer information is handled, contact the Data Controller using service@ortavino.com or +86 15035629847. Our stated customer-support hours are Monday to Friday: 9:00 AM - 5:00 PM (UTC+8, China Standard Time). The operator's full business identification and address are provided in the Data Controller section above.