Privacy Policy

This policy explains how OD Accessories, which markets its creations under the Olivia Dar brand, collects, uses, shares and protects the personal data of visitors to and customers of oliviadar.com.

Last updated: 16 September 2026.

1. Data controller

The data controller is OD Accessories, 5G, 3rd Floor, Dada Jungi House, Shahpur Jat, 110049 New Delhi, India.

For any question about your data or to exercise your rights, contact info@oliviadar.com.

2. Data we collect

Browsing and use of the website

We may collect your IP address, device and browser type, pages viewed, language, currency, source of the visit, interactions with the Website, technical identifiers and data stored in cookies or similar technologies.

Account, basket and order

When you create an account, add products to your basket or place an order, we may process your first and last name, email address, telephone number, billing and delivery addresses, country, basket contents, selected products and options, amount, currency, delivery method, payment status, order history, return requests and customer-service communications.

A payment or attempted payment may also generate transaction identifiers, fraud-prevention information and the last four digits or brand of the card where supplied by the payment provider. OD Accessories does not store your full payment-card number or security code.

Incomplete checkout

If you begin checkout without completing it, WooCommerce or our technical tools may temporarily create a basket or draft order containing the information already entered. These data are used to maintain the basket, resume checkout, diagnose a payment failure and prevent fraud. No marketing reminder is sent solely on this basis without an appropriate legal ground.

Newsletter

If you subscribe to the newsletter, we process your email address, chosen language, the date and evidence of consent and, depending on the features enabled, information about delivery, opens and clicks. You may unsubscribe at any time through the link in every message.

Customer service and chat

When you contact us by email or chat, we process your contact details, the content of the communication and any attachments required to handle your request.

3. Purposes and legal bases

We use personal data only for specific purposes:

• Performance of a contract: to manage the basket, account, order, payment, production, delivery, returns, refunds, guarantees and after-sales service.
• Legal obligations: to issue and retain invoices, comply with accounting, tax and customs obligations, and respond to lawful requests from authorities.
• Consent: to send the newsletter and place or read non-essential cookies where your agreement is legally required.
• Legitimate interests: to secure the Website, prevent fraud, retain evidence of transactions, respond to requests, improve the Website and compile strictly necessary statistics, subject to your rights and freedoms.

Where information is required for an order, failing to provide it may prevent the order from being processed or delivered. Optional fields are identified as such.

4. Recipients and service providers

Your data are available only to authorised people at OD Accessories and to service providers that need them to provide their services. These may include:

• our host, WordPress, WooCommerce and technical-maintenance providers;
• Stripe and, where offered, PayPal, for payments and fraud prevention;
• carriers, freight forwarders, logistics providers and customs authorities required for delivery;
• Mailchimp for newsletter management;
• Google Analytics and Google Tag Manager for audience measurement and tag management, according to your cookie choices;
• Crisp for chat and customer relations;
• our advisers, insurers, auditors or authorities where required by law or to establish, exercise or defend a legal claim.

We do not sell your personal data. Each provider acts according to its legal role and its own privacy terms.

5. International processing and transfers

As OD Accessories is established in India, your data may be accessed and processed in India to manage your order and customer relationship. Some providers may also process data outside the European Economic Area, including in the United States.

Where the GDPR requires it, such processing and transfers rely on a recognised mechanism, such as an adequacy decision, the European Commission’s Standard Contractual Clauses or another appropriate safeguard. You may contact us for further information about the applicable safeguards, subject to confidential information.

6. Retention periods

We retain data only for as long as required for their purpose, followed by an archive period where required by law or to defend our rights:

• Orders, invoices and accounting records: throughout the commercial relationship and then for the applicable statutory period, generally up to ten years for accounting records.
• Customer account: while it is used, followed by deletion or anonymisation after a reasonable period of inactivity, without affecting data that must be kept for orders or legal obligations.
• Baskets and incomplete orders: normally for up to thirty days, unless they become an order or security needs justify a different period.
• Customer-service requests, returns and complaints: for the time required to handle them and then for up to three years, or longer where justified by a dispute or legal obligation.
• Newsletter and marketing: until consent is withdrawn or, for an inactive person, no later than three years after the last active contact, without affecting the retention of evidence of consent or objection.
• Technical and security logs: normally for up to twelve months, unless an incident requires longer retention.
• Cookie choices: for the period shown by the cookie manager; the choice to accept or refuse is generally stored for six months.

Data may be kept for longer in a strictly restricted archive where necessary to establish, exercise or defend legal claims.

7. Cookies and similar technologies

The Website uses cookies required for the basket, checkout, security, language and currency choices and general operation. Strictly necessary cookies do not always require consent where they are essential to the service you request.

Audience-measurement cookies and cookies linked to third-party services may also be used. Where consent is required, they should be activated only according to the choice expressed in the cookie manager.

You may accept, refuse or change your choices at any time using the “Manage cookies” button in the footer. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

8. Your rights

Depending on the law applicable to you, you may request:

• access to and a copy of your data;
• correction of inaccurate or incomplete data;
• deletion of your data where the relevant conditions are met;
• restriction of processing;
• an objection to processing based on legitimate interests and, at any time, to direct marketing;
• portability of data you provided where processing is automated and based on consent or a contract;
• withdrawal of consent at any time.

To exercise a right, email info@oliviadar.com and describe your request. We may ask for information strictly required to verify your identity. We will respond within the period required by law, normally one month.

You may also lodge a complaint with the data-protection authority in your country of residence. In France, this is the CNIL.

9. Security

We use reasonable technical and organisational measures to protect data against loss, unauthorised access, alteration and disclosure. No system is completely risk-free, so we recommend using a unique password and keeping your credentials confidential.

10. Third-party services and social networks

The Website may contain links to third-party websites, social networks or services. When you use them, those third parties process your data under their own policies. Please review the privacy policies of Stripe, PayPal, Mailchimp/Intuit, Google and Crisp.

11. Children

The Website is not intended for people who do not have legal capacity to contract on their own. If you believe that a child has provided data without appropriate authorisation, contact us so that we can take the necessary steps.

12. Changes to this policy

We may update this policy to reflect changes to the Website, our providers or applicable law. The version published on this page, together with its update date, is the applicable version. If a change is material, an additional notice may be displayed on the Website or sent to the people concerned.