Privacy policy

Last updated: 6 June 2026

ORION BY AEF operates this store and website, together with all related information, content, features, tools, products and services, to provide you with a personalised shopping experience (the “Services”). ORION BY AEF is powered by Shopify, which enables us to provide these Services to you. This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use or make a purchase through the Services, or when you communicate with us. If there is any conflict between our Terms and Conditions of Sale and this Privacy Policy, this Policy takes precedence with regard to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read and understood the information collection, use and disclosure practices described below.

Personal information we collect or process

“Personal information” means any information that identifies you or can reasonably be associated with you or another person. Information collected anonymously or that has been anonymised does not constitute personal information. Depending on how you use the Services, where you live and the limits permitted by applicable law, we may collect or process the following categories of information:

Contact details: name, address, billing address, delivery address, telephone number and email address. Financial information: payment card numbers, payment information, transaction details and payment confirmation. Account information: username, password, security questions, preferences and settings. Transaction information: items viewed, added to your cart, saved as favourites, purchased, returned, exchanged or cancelled, together with your transaction history. Communications with us: information provided when you contact our customer service team. Device information: device type, browser, network connection, IP address and other unique identifiers. Usage data: information about your interaction with the Services, including how often and how you browse.

Sources of personal information

We collect your personal information from the following sources:

Directly from you when you create an account, use the Services or communicate with us. Automatically through the Services, from your device, including through cookies and similar technologies. From our service providers, who collect or process your data on our behalf. From our partners or other third parties.

How we use your personal information

Depending on how you use the Services, we use your personal information for the following purposes:

Providing, personalising and improving the Services: processing your orders, payments, returns and exchanges; managing your account; arranging delivery; sending notifications; and personalising your shopping experience. Marketing and advertising: sending promotional communications by email, text message or post; and displaying personalised advertisements on the Services or other websites. Security and fraud prevention: authenticating your account, securing payments, and detecting and addressing fraudulent or malicious activity. Communicating with you: providing customer support, responding to your enquiries and maintaining our business relationship. Legal obligations: complying with applicable law, responding to requests from the competent authorities and enforcing our terms and conditions.

Disclosure of your personal information

We may disclose your personal information to third parties in the following circumstances:

To Shopify, our service providers and subcontractors (IT management, payment processing, data analysis, customer support, cloud storage and shipping). To our business and marketing partners to deliver personalised advertisements. Depending on where you live, you may object to this sharing for targeted advertising purposes. When you expressly authorise us to do so, including to deliver your orders or through social media integrations. Within our group of companies and subsidiaries. As part of a business transaction (merger, acquisition or bankruptcy), to comply with a legal obligation, enforce our terms and conditions, or protect our rights and those of our users.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes your personal data to provide and improve the Services. Information you submit is transmitted to Shopify and to third parties that may be located in countries other than your own. To learn more about how Shopify uses your data and about your rights, please consult Shopify's Privacy Policy and the Shopify Privacy Portal.

Third-party websites and links

The Services may contain links to third-party websites. We are not responsible for their privacy and security practices. Information shared in public or semi-public spaces may be visible to other users.

Children's data

The Services are not intended for children. We do not knowingly collect personal information about minors. If you are the parent or guardian of a child who has provided their data, please contact us to request its deletion.

Security and retention of your information

No security measure is infallible. We advise against sending sensitive information through unsecured channels. How long we retain your data depends, among other things, on legal obligations, the management of your account and the resolution of any disputes.

Your rights and choices

Depending on where you live, you may have the following rights:

Right of access: obtain the personal information we hold about you. Right to erasure: request the deletion of your personal data. Right to rectification: request the correction of inaccurate information. Right to data portability: receive a copy of your data and request its transfer to a third party. Communication preferences: unsubscribe from promotional emails at any time using the unsubscribe link.

If you live in the United Kingdom or the European Economic Area, you also have the following rights:

Right to object to and restrict processing. Withdrawal of consent: you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, contact us using the details below. We may verify your identity before processing your request. You may appoint an authorised representative to act on your behalf.

Complaints

If you have a complaint about the processing of your data, please contact us. Depending on where you live, you may also contact your local data protection authority. For the EEA, the list of competent authorities is available here.

International transfers

Your personal data may be transferred, stored and processed outside your country of residence. For transfers outside the EEA or the United Kingdom, we rely on recognised mechanisms, such as the European Commission's Standard Contractual Clauses.

Changes to this Policy

We may update this Privacy Policy at any time. The revised version will be published on this website with an updated date and any notifications required by applicable law.

Contact

If you have any questions about this Policy or wish to exercise your rights, contact us at: 

Email: contact@orionbyaef.com
Address: 47 Rue Vivienne, Paris, 75002, France

In our capacity as the controller of your personal data within the meaning of applicable data protection law.