πŸ” Privacy Policy

Introduction

The purpose of this Privacy Policy is to inform you in a clear, transparent, and comprehensive way about how we collect, use, store, protect, and share your personal data when you visit our website, interact with us, or purchase our products and services.
We are committed to processing your personal data in accordance with the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality as required by Regulation (EU) 2016/679 (GDPR), the UK GDPR, and applicable privacy laws.

By continuing to browse our website or using our services, you acknowledge that you have read and understood this Privacy Policy.


1. Data Controller

The entity responsible for determining the purposes and means of processing your personal data is:

MORRISROE-LIMITED
πŸ“ 6Unit 4 Oaks Court Warwick Road, Borehamwood,
Hertfordshire, WD6 1GS
πŸ“ž +44 7756229463
πŸ“§ email@onviraloffers.com

Β (hereinafter referred to as “the Company”, “we”, “us”, or “our”).

You may contact us at any time regarding the processing of your personal data, the exercise of your rights, or to request additional information about how your data is handled.


2. Categories of Data Collected

We collect various categories of personal data depending on your interactions with our website and services. These include:

πŸ“₯ Data provided voluntarily by the user

When you create an account, place an order, subscribe to our newsletter, or contact us for support, you may provide us with the following:

  • First and last name

  • Shipping and billing address

  • Email address and phone number

  • Payment information (processed securely by third-party gateways; we never store full card details)

  • Any additional data you voluntarily provide (e.g., order notes, support messages, feedback)

This information is necessary to deliver our services, fulfill your orders, and communicate with you effectively.


🌐 Browsing and technical data

When you access our website, we automatically collect certain data through server logs and cookies:

  • IP address and approximate geolocation

  • Browser type, operating system, and device identifiers

  • Pages visited, session duration, and navigation patterns

  • Date, time, and source of access

  • Technical logs related to system security and server activity

This data is collected primarily for security, statistical analysis, and website optimization.


πŸͺ Cookies and tracking technologies

We use cookies and similar technologies to improve website functionality, analyze traffic, and deliver personalized content. These include:

  • Technical cookies: essential for basic website functions and do not require consent.

  • Analytical cookies: used in anonymized or aggregated form to improve performance.

  • Profiling/marketing cookies: activated only upon explicit consent to deliver targeted ads and personalized offers.

For more details, please refer to our Cookie Policy.


3. Purposes and Legal Basis for Processing

We process personal data for the following purposes, each associated with a specific legal basis under the GDPR:

πŸ“¦ Execution of a contract (Art. 6.1.b GDPR)

We process your personal data to provide the services you request and fulfill contractual obligations, including:

  • Processing orders and payments

  • Delivering products and handling returns

  • Managing customer accounts

  • Providing support and responding to inquiries

Without this data, we would be unable to fulfill our contractual commitments.


πŸ“œ Legal obligations (Art. 6.1.c GDPR)

We are required to process certain data to comply with legal, regulatory, and administrative obligations, including:

  • Tax and accounting requirements

  • Anti-fraud and anti-money laundering laws

  • Compliance with judicial orders or requests from competent authorities


πŸ›‘οΈ Legitimate interests (Art. 6.1.f GDPR)

We process some data to pursue our legitimate interests, provided that your fundamental rights are not overridden. These include:

  • Preventing fraud and abuse of our services

  • Ensuring the security of IT systems and networks

  • Protecting our rights in legal proceedings

  • Improving our services and customer experience

You may object to such processing at any time by contacting us.


πŸ“’ Marketing communications (Art. 6.1.a GDPR)

With your consent, we may use your contact details to send newsletters, promotional offers, product updates, and personalized recommendations.

You can withdraw your consent at any time by clicking β€œunsubscribe” in our emails or contacting us directly.


🎯 Profiling and targeted advertising (Art. 6.1.a GDPR)

We may analyze your preferences and purchasing behavior to offer personalized product recommendations and deliver targeted ads through third-party platforms such as Google Ads or Meta Ads. This includes the use of cookies, pixels, and similar technologies.

Such processing occurs only with your explicit consent, which you can withdraw at any time.


4. Processing Methods

We process personal data using electronic and telematic tools and, where appropriate, manual means. All processing activities are carried out according to principles of minimization, accuracy, and purpose limitation.

We adopt technical and organizational security measures to protect your data from unauthorized access, loss, alteration, or disclosure. These include encryption, secure servers, access controls, regular audits, and continuous monitoring.

All personnel authorized to process your data are bound by confidentiality obligations and receive regular training on data protection.


5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, unless longer retention is required by law. The retention periods are as follows:

  • πŸ“ Accounting and billing data: 10 years (legal requirement)

  • πŸ“¦ Order and shipping data: 36 months from the order date

  • βœ‰οΈ Marketing and profiling data: Until consent is withdrawn or up to 24 months

  • πŸ› οΈ Technical logs and browsing data: 12 months for security and diagnostic purposes

After these periods, data will be securely deleted, anonymized, or archived in compliance with applicable laws.


6. Data Disclosure and Transfer

We may share personal data only when necessary and in compliance with the GDPR. Recipients may include:

  • πŸ“¦ Couriers and logistics partners – for product delivery

  • πŸ’³ Payment service providers – such as PayPal, Stripe, or banking circuits

  • πŸ“Š Tax, accounting, and legal consultants – to comply with legal obligations

  • πŸ–₯️ IT and hosting service providers – for website operation and data storage

  • πŸ›οΈ Competent public authorities – when required by law or legal proceedings

If data is transferred outside the European Economic Area (EEA) or the United Kingdom, this occurs only when adequate safeguards are in place, such as participation in the EU-US Data Privacy Framework or the use of Standard Contractual Clauses approved by the European Commission.


7. User Rights

Under Articles 15–22 GDPR, you have the following rights:

  • πŸ“„ Access: Obtain confirmation of whether your personal data is being processed and access it.

  • ✏️ Rectification: Request the correction of inaccurate or incomplete data.

  • πŸ—‘οΈ Erasure: Request deletion of data in certain cases (β€œright to be forgotten”).

  • ⏸️ Restriction: Limit processing where permitted by law.

  • πŸ”„ Portability: Receive your data in a structured, machine-readable format and transfer it to another controller.

  • ❌ Objection: Object to processing based on legitimate interests or for direct marketing.

  • πŸ”“ Withdraw consent: At any time, without affecting the lawfulness of prior processing.

To exercise your rights, contact us at πŸ“§ email@onviraloffers.com. We will respond within 30 days, extendable by 60 days for complex cases.


8. Cookie Policy

Our website uses cookies and similar technologies to ensure proper operation and improve user experience. As part of our transparency commitment, we provide a dedicated Cookie Policy that explains in detail how cookies are used and how you can manage them.

  • Technical cookies: mandatory for website functionality, no consent required.

  • Analytical cookies: used in aggregated form to analyze site performance.

  • Profiling/marketing cookies: activated only with your explicit consent and manageable via the cookie banner or preferences panel.

You may also manage or revoke consent directly through your browser settings or third-party opt-out tools.


9. Data Security

We take the protection of your data seriously and implement multiple layers of security measures, including:

  • πŸ” HTTPS/SSL encryption: All data transmitted between your browser and our servers is encrypted.

  • πŸ›‘οΈ Encryption of sensitive data: Sensitive information is encrypted at rest and in transit.

  • πŸ“‚ Regular backups: Ensuring business continuity and data recovery.

  • πŸ‘€ Access controls: Only authorized personnel have access to personal data.

  • πŸ•΅οΈβ€β™‚οΈ Continuous monitoring: Systems are monitored to detect and prevent unauthorized access, data breaches, or cyberattacks.

In the event of a data breach that may pose a risk to your rights and freedoms, we will notify both you and the relevant supervisory authority in accordance with GDPR requirements.


10. Minors

Our services and website are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors.
If we become aware that we have inadvertently collected personal data from a minor, we will promptly delete it and, if necessary, notify the parent or guardian.


11. Changes to this Policy

We reserve the right to amend or update this Privacy Policy at any time to reflect changes in laws, technology, or our business practices. Any modifications will be published on this page with an updated β€œLast updated” date. In case of significant changes, we may also notify you by email or through a pop-up notice on our website.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

Last updated: August 25, 2025