LIDEMI · LEGAL

Privacy Policy

Last updated: 8 October 2026

How MCTRID LTD (“Lidemi”, “we”, “us”) collects, uses, shares and protects your personal information when you visit orefia.com or buy our products.

1. Who is responsible for your data

Data controller	MCTRID LTD (trading as Lidemi)
Registered office	71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
Company registration	Registered in England & Wales, Company No. 16710521
Email (privacy & support)	helpcustomersup@gmail.com
Supervisory authority	Information Commissioner’s Office (ICO), United Kingdom. EU/EEA residents may also contact their local data protection authority.

2. Personal information we collect

• Identity data: first and last name;
• Contact data: billing and shipping address, email, telephone;
• Order data: products purchased, order ID, payment status, returns;
• Payment data: payment token, masked card digits, transaction ID — we never store full card details;
• Usage data: pages visited, clicks, IP address, device, browser;
• Marketing data: newsletter opt-in status and ad interactions (including Meta Pixel and Google Ads), only if you consent;
• Technical data: server log files, error codes, cookie IDs, user-agent string.

We do not knowingly collect data from anyone under 16 years of age (under 15 in Australia).

3. Purposes and legal bases

Purpose	EU / UK / CH legal basis	Australia
Processing and delivering orders	Contract (Art. 6(1)(b))	APPs 3, 6
Customer support	Contract; legitimate interest	APPs 3, 6
Fraud prevention and site security	Legitimate interest	APP 11
Tax and accounting compliance	Legal obligation (Art. 6(1)(c))	APP 6
Analytics and site improvement	Consent (Art. 6(1)(a))	Consent
Personalised advertising	Consent	Consent
Email marketing	Consent	Consent

4. Sharing of personal information

We share personal information only when necessary and under a written data-processing agreement. Recipients include payment processors (such as Stripe and PayPal), logistics partners, Meta Platforms Ireland Ltd. and Google LLC (if you consent), email and CRM providers, IT hosting providers, accountants and tax advisers, and public authorities when required by law.

We never sell or rent your personal information.

5. International data transfers

• European Economic Area: EU Standard Contractual Clauses (SCC) plus supplementary measures;
• United Kingdom: UK International Data Transfer Addendum (IDTA);
• Switzerland: SCC plus Swiss addendum (Annex 2 revFADP);
• Australia: reasonable steps to ensure overseas recipients do not breach the APPs (APP 8.1).

6. Data retention

Data	Kept for
Accounting records and invoices	7 years
Order and shipping records	6 years
Customer-support tickets	2 years after closure
Marketing consent logs	Until withdrawal, plus 5 years as evidence
Analytics data	14 months
Meta Pixel and Google Ads event data	180 days
Server logs	12 months

7. Your rights

EU, UK and Switzerland: access, rectification, erasure, restriction, data portability, objection and withdrawal of consent.

Australia: access and correction, and the right to complain to us and to the OAIC.

To exercise your rights, email helpcustomersup@gmail.com with the subject “Data Request”. We reply within 30 days.