Privacy Policy

Last updated: 2026-07-02

Orrex OÜ is the data controller for personal data processed in connection with your purchases. We process data in accordance with the EU General Data Protection Regulation (GDPR).

Data we collect

• Contact details you provide: email, and optionally name and country.
• Order data: products purchased, amounts, invoice/receipt numbers, license keys.
• Payment data is processed by our payment provider; we do not store full card numbers.

Why we process it

• To deliver your purchase and provide access (contract performance).
• To issue invoices and receipts and meet accounting obligations (legal obligation).
• To provide support and prevent fraud (legitimate interests).

Sharing

We share data with service providers who help us operate: our payment provider, hosting, and email delivery. They process data on our behalf under appropriate agreements.

Retention

We keep order and accounting records for the period required by law, and other data only as long as needed for the purposes above.

Your rights

You may request access, correction, deletion, or portability of your data, and object to certain processing. Contact admin@orrex.ee. You may also lodge a complaint with the Estonian Data Protection Inspectorate.