GDPR
How we protect personal data under the EU General Data Protection Regulation.
EU General Data Protection Regulation (GDPR) commitment
OrvexaTech operates as a compliant Data Processor for merchants and a Data Controller for our direct account holders, in full adherence to EU Regulation 2016/679.
1. Dedicated database & schema isolation
Every merchant store provisioned on the Orvexa Platform is allocated a fully isolated MongoDB schema (orvexa_tenant_{slug}). Customer Personally Identifiable Information (PII), order history, and product catalogs are never stored in shared tables. Platform Super Administrators are restricted from accessing consumer PII or unmasking customer credentials without cryptographic audit logging.
2. Lawful basis & special category data
Processing is conducted strictly under Article 6(1)(b) (performance of contract for order fulfillment) and Article 6(1)(a) (explicit consent for marketing messages). We do not intentionally collect special category data under Article 9. Personal data is protected by encryption in transit (HTTPS/TLS) and other technical and organisational safeguards.
3. Exercise your GDPR data subject rights
Under Articles 15 through 22, you have the Right to Access, Rectification, Erasure (“Right to be Forgotten”), Data Portability, and Restriction of Processing.
To access, correct, delete or move your personal data, or to object to how it is used, email us from the address you used with us. We acknowledge every request and reply within the time limits set out in our Privacy Policy.
Email your data requestOr write to support@orvexacloud.in yourself.
See also our Privacy Policy, Terms of Service and the trust centre.