Last updated: 31 July 2026
This Privacy Policy explains how STACK COMPANY, trading as Ortavio (“Ortavio”, “we”, “us”), collects and processes personal data when you visit Ortavio.co, place an order, contact us, create an account, submit a review or otherwise use our services.
STACK COMPANY is the controller for the processing described in this policy.
STACK COMPANY, trading as OrtavioWe receive data directly from you, automatically from your device, from Shopify and our service providers, and where lawful from analytics, advertising, fraud-prevention, payment, fulfilment and delivery partners.
We share only what is reasonably necessary with Shopify, payment providers, fulfilment partners, warehouses, carriers, customer-support systems, email and messaging providers, analytics and advertising services (subject to your choices), fraud-prevention services, IT providers, professional advisers and public authorities where required by law. A buyer or successor may receive relevant data during a genuine business transaction, subject to appropriate safeguards.
Our store runs on Shopify. Information about Shopify’s processing is available in its Consumer Privacy Policy and the Shopify Privacy Portal.
Essential cookies keep the store, checkout and security functions working. With your consent where required, we also use analytics or advertising technologies. Manage available choices through the cookie settings on our store and your browser. Withdrawing consent does not affect essential cookies.
We send promotional email or other direct marketing only where permitted. You can unsubscribe through the link in a message or by contacting us. Service messages about an order are not marketing and may still be sent when necessary to perform the contract.
Some providers process data outside the EEA. Where required, we rely on an adequacy decision, Standard Contractual Clauses or another recognised transfer mechanism, together with supplementary measures where appropriate.
We keep data only as long as needed for the stated purposes. Order, tax and accounting records are retained for the applicable legal period. Support records, reviews and marketing data are retained according to operational need, consent status and limitation periods. Data is deleted or anonymised when no longer necessary, unless the law requires longer storage.
We use reasonable technical and organisational safeguards designed to protect personal data. No online service is completely secure, so please avoid sending payment-card details or other unnecessary sensitive information by email.
Orders may be screened automatically for fraud and security risks. A suspicious order may be held for human review, rejected or cancelled. Contact us if you believe an automated assessment materially affected you and you want human review.
Subject to legal conditions, you may request access, correction, deletion, restriction, portability or objection to processing. You may withdraw consent at any time and object to direct marketing. We may ask for information necessary to verify your identity and may retain data where a legal exception applies.
Send requests to support@ortavio.co. You also have the right to complain to the supervisory authority where you live or work. Our lead supervisory authority is the Dutch Autoriteit Persoonsgegevens.
Our store is not directed to children under 16 and we do not knowingly collect their data. A parent or guardian who believes a child supplied data may contact us.
We may update this policy for operational, legal or regulatory reasons. The latest version and update date will always appear here. We will provide additional notice where a material change requires it.