Privacy Policy
Privacy Policy
Privacy Policy
Last updated: 27.07.2026
This policy explains how Orma ("we", "us") collects and processes personal data when you visit ormafoundry.com or make a purchase. For any privacy matter, contact hello@ormafoundry.com.
1. What we collect
1. What we collect
When you make a purchase: your name, email address, billing details, and country. Payment card data is collected and processed directly by Stripe — we never see or store your full card details.
When you create an account: your email address and order history.
When you subscribe to our emails: your email address.
When you use the site: basic technical data such as IP address, browser type, and pages visited, collected through cookies and analytics.
When you make a purchase: your name, email address, billing details, and country. Payment card data is collected and processed directly by Stripe — we never see or store your full card details.
When you create an account: your email address and order history.
When you subscribe to our emails: your email address.
When you use the site: basic technical data such as IP address, browser type, and pages visited, collected through cookies and analytics.
2. Why we process it, and on what legal basis
2. Why we process it, and on what legal basis
To fulfil your order and deliver your files — necessary for performance of our contract with you (GDPR Art. 6(1)(b)).
To provide customer support and handle refunds or faulty files — performance of contract and our legitimate interest in supporting customers (Art. 6(1)(f)).
To send marketing emails about new collections — only with your consent, which you can withdraw at any time (Art. 6(1)(a)).
To meet accounting and tax obligations — necessary for compliance with a legal obligation (Art. 6(1)(c)).
To operate and improve the site — our legitimate interest in a functioning, secure store (Art. 6(1)(f)).
To fulfil your order and deliver your files — necessary for performance of our contract with you (GDPR Art. 6(1)(b)).
To provide customer support and handle refunds or faulty files — performance of contract and our legitimate interest in supporting customers (Art. 6(1)(f)).
To send marketing emails about new collections — only with your consent, which you can withdraw at any time (Art. 6(1)(a)).
To meet accounting and tax obligations — necessary for compliance with a legal obligation (Art. 6(1)(c)).
To operate and improve the site — our legitimate interest in a functioning, secure store (Art. 6(1)(f)).
3. Who we share it with
3. Who we share it with
We use third-party processors who handle data on our behalf:
Stripe — payment processing.
Each processes data under its own terms and applicable data protection law. We do not sell your personal data to anyone.
Some of these providers may process data outside the European Economic Area. Where that happens, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses.
We use third-party processors who handle data on our behalf:
Stripe — payment processing.
Each processes data under its own terms and applicable data protection law. We do not sell your personal data to anyone.
Some of these providers may process data outside the European Economic Area. Where that happens, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses.
4. How long we keep it
4. How long we keep it
Order and billing records: as long as required by tax and accounting law.
Account data: until you close your account.
Marketing subscriptions: until you unsubscribe.
Analytics data: for a limited period in line with our analytics provider's settings.
Order and billing records: as long as required by tax and accounting law.
Account data: until you close your account.
Marketing subscriptions: until you unsubscribe.
Analytics data: for a limited period in line with our analytics provider's settings.
5. Your rights
5. Your rights
Under the GDPR you have the right to access your data, correct it, delete it, restrict or object to its processing, and receive a copy in a portable format. Where processing is based on consent, you can withdraw it at any time. To exercise any of these, email hello@ormafoundry.com. You also have the right to lodge a complaint with your local data protection authority — in Poland, the President of the Personal Data Protection Office (UODO).
Under the GDPR you have the right to access your data, correct it, delete it, restrict or object to its processing, and receive a copy in a portable format. Where processing is based on consent, you can withdraw it at any time. To exercise any of these, email hello@ormafoundry.com. You also have the right to lodge a complaint with your local data protection authority — in Poland, the President of the Personal Data Protection Office (UODO).
6. Cookies
6. Cookies
We use cookies that are necessary for the site and store to function, and — with your consent — analytics cookies that help us understand how the site is used. You can manage or disable cookies in your browser settings.
We use cookies that are necessary for the site and store to function, and — with your consent — analytics cookies that help us understand how the site is used. You can manage or disable cookies in your browser settings.
7. Changes
7. Changes
We may update this policy from time to time. The current version is always available on this page, with the date of the last update shown above.
We may update this policy from time to time. The current version is always available on this page, with the date of the last update shown above.
8. Contact
8. Contact
Questions about your data or this policy: hello@ormafoundry.com
Questions about your data or this policy: hello@ormafoundry.com
Newsletter
Join our community of creatives by subscribing to our newsletter and get 15% off your next purchase
Newsletter
Join our community of creatives by subscribing to our newsletter and get 15% off your next purchase