Privacy policy
Last updated: April 2026
This Privacy Policy explains how Doriela (doriela.com), operated by Okanshop, collects, uses, stores, and shares your personal data. It applies to all customers in the United Kingdom and complies with the UK GDPR and the Data Protection Act 2018.
Who We Are
1. Data Controller
| Data Controller | Okanshop, trading as Doriela |
| Registration No. | 88051609 |
| VAT Number | NL004530802B06 |
| Address | Dissel 60, 5684 KN Best, Noord-Brabant, Netherlands |
| info@doriela.com | |
| Phone | +31 6 42431745 |
Data We Collect
2. What Personal Data We Collect
Information you provide directly:
— Full name, email address, phone number
— Billing and delivery address
— Order details and payment confirmation reference
— Messages sent to our customer service team
Automatically collected:
— Device and browser information
— IP address
— Cookies and tracking technologies
From third parties:
— Payment providers — confirmation and fraud signals
— DHL — delivery status updates
— Shopify Inc. — our e-commerce platform
Legal Basis
3. Why We Use Your Data
| Purpose | Legal Basis |
|---|---|
| Processing and fulfilling your order | Performance of a contract |
| Sending order and shipping updates | Performance of a contract |
| Handling returns and refunds | Performance of a contract |
| Complying with tax and accounting obligations | Legal obligation |
| Fraud prevention and security | Legitimate interests |
| Sending marketing emails (if opted in) | Consent |
Data Sharing
4. Who We Share Data With
We do not sell your personal data. We share it only where necessary:
— Shopify Inc. — hosts the store and processes order data (privacy.shopify.com)
— DHL — your name and address to fulfil your order
— Payment processors — Shopify Payments, PayPal (we never store your full card number)
— Analytics providers — anonymised usage data only
— Legal authorities — where required by law
Retention
5. How Long We Keep Your Data
— Order and transaction records: 7 years (UK tax obligations)
— Customer service communications: 2 years after resolution
— Marketing data: until you unsubscribe or withdraw consent
— Analytics/cookie data: up to 13 months
Your Rights
6. Your UK GDPR Rights
— Access — request a copy of your data
— Rectification — ask us to correct inaccurate data
— Erasure — ask us to delete your data
— Restriction — limit how we process your data
— Object — object to processing based on legitimate interests
— Portability — receive your data in a machine-readable format
— Withdraw consent — at any time where processing is consent-based
To exercise any of these rights, email info@doriela.com. We will respond within 30 days.
Supervisory Authority
7. Information Commissioner's Office (ICO)
If you are unhappy with how we have handled your data, you can lodge a complaint with the ICO — ico.org.uk · 0303 123 1113. We would appreciate the opportunity to resolve your concern directly first at info@doriela.com.
Marketing
8. Marketing Communications
We only send marketing emails if you have explicitly opted in. Unsubscribe at any time via the link in our emails or by emailing info@doriela.com. Transactional emails (order confirmations, shipping updates) are not affected.
Children
9. Children's Data
Our website is intended for adults. We do not knowingly collect data from anyone under 16. If you believe a child has provided us with personal data, contact info@doriela.com and we will delete it promptly.