Privacy policy

Last updated: August 14, 2026

ORTTU Online LLC ("ORTTU," "we," "us" or "our") operates orttu.com, the ORTTU mobile applications and the related services described below (collectively, the "Services"). This Privacy Policy explains how ORTTU collects, uses and discloses personal information when you use the Services, purchase ORTTU products or communicate with us.

ORTTU Online LLC is the business and privacy controller responsible for the practices described in this Policy. The seller and merchant of record for a purchase is WithReach LLC for United States deliveries and the applicable Global-e entity for deliveries outside the United States, as identified at checkout and in your order documentation. Those entities, Shopify and other providers may process personal information for their own purposes under their own privacy notices as well as on ORTTU's behalf.

This Policy should be read together with our Terms of Service, Refund Policy, Shipping Policy and any privacy information presented when you use a particular feature.

1. Personal information we collect

The information we collect depends on how you interact with ORTTU and may include:

  • Identity and contact information, such as your name, email address, telephone number, billing and delivery addresses and account identifiers.
  • Order and transaction information, such as products viewed or purchased, order number, discounts, returns, exchanges, refunds, loyalty activity, gift cards, membership status, payment method type and limited payment details made available by payment providers. Full payment-card credentials are generally collected and processed by the relevant payment provider rather than stored directly by ORTTU.
  • Account, membership and preference information, such as login and verification information, saved products, wishlist and loyalty activity, communication preferences, Insiders Club participation, referrals and survey responses.
  • Communications and support information, such as messages, return reasons, photographs supplied for a damaged or incorrect item, reviews, comments, accessibility requests and other information you send to Customer Care.
  • Device, network and usage information, such as IP address, browser and device type, operating system, identifiers, referring pages, pages and products viewed, interactions, approximate location inferred from IP address and cookie or similar-technology data.
  • Mobile-app information, such as app version, device and advertising identifiers, push-notification token, crash and diagnostic information, app interactions, mobile-attribution data and location information where you permit the app or device to provide it.
  • Marketing and advertising information, such as campaign interactions, inferred interests, advertising audiences, consent choices and whether an advertisement led to a visit or purchase.
  • Reviews and user content, such as ratings, photographs, video, comments and other material you submit for publication or promotional use.
  • Fraud, security and compliance information, such as risk indicators, authentication results, chargeback information and records needed to detect abuse, protect accounts or comply with law.

Please do not send payment-card details, passwords or unnecessary sensitive information through the Contact form or ordinary email.

2. Sources of personal information

We collect personal information:

  • directly from you when you browse, purchase, create or use an account, join a programme, submit a form, contact us or change your preferences;
  • automatically from your browser, device, app, cookies, pixels, software development kits and similar technologies;
  • from Shopify, Shop Pay, WithReach LLC or the applicable Global-e seller, payment providers, carriers, fulfilment providers, Loop Returns and Checkout+;
  • from account, loyalty, review, referral, support, email, SMS, analytics, testing, search, personalisation and advertising providers;
  • from social networks, advertising partners and public sources where permitted; and
  • from another person who sends you a gift, makes a referral or otherwise provides your information with an appropriate basis.

3. How we use personal information

We may use personal information to:

  • provide, personalise and maintain the Services, website and mobile apps;
  • display products, localise content and remember preferences;
  • create and manage accounts, wishlists, loyalty activity and Insiders Club memberships;
  • process and support orders, payments, delivery, returns, exchanges, refunds and gift cards;
  • provide Customer Care, sizing guidance, accessibility support and professional-enquiry routing;
  • send transactional messages and requested push notifications;
  • send email, SMS and other marketing where permitted and manage opt-outs;
  • measure performance, understand customer journeys, test experiences and improve products and Services;
  • personalise content and advertising and measure advertising effectiveness;
  • publish and moderate reviews and other user content;
  • prevent fraud, abuse, security incidents and unauthorized access;
  • establish, exercise or defend legal claims and enforce our terms;
  • meet accounting, tax, consumer-protection, privacy and other legal obligations; and
  • complete a corporate transaction such as a merger, financing, reorganisation or sale of assets.

4. How we disclose personal information

We may disclose personal information to:

  • Shopify and Shop Pay, which provide ecommerce, checkout, account, payment and related infrastructure;
  • the applicable seller and merchant of record, WithReach LLC for United States deliveries or the applicable Global-e entity for deliveries outside the United States;
  • payment, fulfilment, delivery, returns and protection providers, including relevant payment processors, carriers, warehouses, Loop Returns and Checkout+;
  • account, loyalty, app and customer-experience providers, including Fuego, Rivo and providers supporting mobile-app operation, attribution and diagnostics;
  • communications and support providers, including Klaviyo, Postscript, Gorgias and Richpanel/CustomerDesk while those legacy support systems remain in use or are being retired;
  • analytics, testing, review, search, video and personalisation providers, including Intelligems, Okendo, Tolstoy, Depict, Alia and similar providers used to operate and improve the Services;
  • advertising and social-media partners, including Meta, Google, TikTok and Pinterest;
  • cookie and privacy-choice providers, including Consentmo;
  • professional advisers, auditors, insurers, financing parties, regulators, law enforcement or courts where reasonably necessary and lawful;
  • a buyer, investor or successor in connection with a proposed or completed corporate transaction; and
  • another party at your direction or with your consent.

A service may change, be replaced or be used only in certain regions. This list identifies material categories and representative providers rather than every technical recipient involved in delivering a webpage or transaction.

5. Shopify, WithReach LLC and Global-e

Shopify provides the platform used to operate the online store. Depending on the feature and context, Shopify may process information as ORTTU's processor or service provider and may also process information for purposes described in the Shopify Consumer Privacy Policy.

WithReach LLC is the seller and merchant of record for United States deliveries. The applicable Global-e entity identified at checkout is the seller and merchant of record for deliveries outside the United States. Each may independently determine how it processes information needed for payment, tax, fraud prevention, import, delivery, returns, refunds and legal compliance. Review the privacy information presented by the applicable seller at checkout.

If Shopify Network Intelligence or Enhanced Services are enabled, Shopify may use information from your interactions with this store and other participating merchants to provide enhanced services, including measurement, personalisation, fraud prevention and advertising-related services, as described in Shopify's notices and available controls.

6. Cookies, analytics and advertising

We and our providers use cookies, pixels, local storage, mobile software development kits and similar technologies to keep the Services working, remember choices, understand performance, prevent fraud and support analytics, personalisation and advertising.

Where required, non-essential technologies are used according to your consent choices. You can use the cookie or privacy controls made available on the Services and adjust browser or device settings. Blocking technologies may affect how some features work.

We do not sell personal information for money. We may disclose identifiers, internet activity, commercial information and inferences to advertising and analytics partners for cross-context behavioural advertising, targeted advertising, measurement or personalisation. Some U.S. privacy laws may define those disclosures as a "sale," "sharing" or "targeted advertising" even when no money is exchanged. Where applicable, you may opt out through our Your Privacy Choices page or the privacy controls made available on the Services.

Where required by applicable law and supported by our systems, we treat a recognised Global Privacy Control or other legally valid universal opt-out signal as a request to opt out for the browser and device sending the signal. Because these signals are device- and browser-specific, you may need to apply them on each browser or device you use.

7. Email, SMS and push notifications

You can unsubscribe from marketing email using the link in the message. You can opt out of marketing SMS by replying STOP where supported or following the instructions in the message. You can disable app push notifications in your device settings.

You may also contact info@orttu.com for help with a marketing opt-out. Marketing choices do not prevent necessary transactional or service communications, such as order, security, membership or support messages.

8. Legal bases for EEA and UK processing

Where EEA or UK data-protection law applies, we rely on one or more of the following legal bases:

  • Contract, to provide requested Services, administer an account or membership and support an order, return, exchange or refund.
  • Legitimate interests, including operating and improving the Services, understanding performance, providing Customer Care, preventing fraud, securing systems, protecting legal rights and marketing similar products where permitted. We balance these interests against your rights.
  • Consent, for non-essential cookies, certain advertising, location, push notifications or direct marketing where consent is required. You may withdraw consent prospectively.
  • Legal obligation, including tax, accounting, sanctions, consumer-protection, product-safety and privacy requirements.
  • Legal claims and vital interests, where processing is necessary to protect a person or establish, exercise or defend legal rights.

You may object to processing based on legitimate interests. You may object to direct marketing at any time.

9. International transfers

ORTTU is based in the United States and uses providers and sellers operating in multiple countries. Your personal information may therefore be processed outside the country where you live, including in countries whose laws may provide different protections.

Where applicable law requires a transfer safeguard, the responsible party will use a lawful mechanism appropriate to the transfer, such as an adequacy decision, approved contractual protection or another permitted mechanism. Contact us if you want information about safeguards used by ORTTU for a relevant transfer. WithReach LLC, Global-e, Shopify and other independent recipients are responsible for the safeguards applicable to transfers they control.

10. Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to:

  • provide and document orders, returns, memberships and Customer Care;
  • maintain an account or preference while active;
  • meet tax, accounting, payment, product, consumer and legal obligations;
  • prevent fraud and protect systems;
  • resolve disputes and enforce agreements; and
  • maintain consent, opt-out and rights-request records.

The period varies by information category, transaction, country, contractual requirement and limitation period. When information is no longer needed, we delete, de-identify or securely isolate it, subject to backup cycles and legal holds.

11. Security

We use administrative, technical and organisational measures designed to protect personal information. No method of storage or transmission is completely secure, and we cannot guarantee absolute security. Use unique credentials, protect access to your email and device and contact us if you suspect unauthorised account activity.

12. Your rights and choices

Depending on where you live, you may have the right to:

  • know or access personal information and obtain information about its processing;
  • correct inaccurate personal information;
  • delete personal information;
  • receive a portable copy of certain information;
  • restrict or object to certain processing;
  • withdraw consent prospectively;
  • opt out of sale, sharing, targeted advertising or certain profiling;
  • limit certain uses of sensitive personal information where applicable;
  • appeal our refusal of a privacy request; and
  • complain to a privacy or data-protection regulator.

To submit a request, email info@orttu.com with the subject PRIVACY REQUEST and describe the right you want to exercise. Customer Support coordinates requests for ORTTU.

We may ask for information reasonably necessary to verify your identity and authority. An authorised agent may submit a request where permitted, but we may require proof of authority and direct identity verification. We will respond within the period required by applicable law and explain any available appeal process. To appeal a decision, reply to our response with the subject PRIVACY APPEAL.

We will not discriminate against you for exercising an applicable privacy right. A request to ORTTU does not automatically control information independently held by WithReach LLC, Global-e, Shopify or another controller; we will explain or route the request where reasonably possible.

13. Regional information

United States

Residents of states with applicable comprehensive privacy laws may exercise the rights described above, subject to scope, thresholds, exceptions and verification requirements. ORTTU does not sell personal information for money. Our targeted-advertising disclosures and opt-out methods are described in Section 6.

EEA and United Kingdom

Where applicable, you may contact the data-protection authority where you live or work or where you believe an infringement occurred. ORTTU Online LLC has no employees or establishment in the EEA or UK. The absence or details of any legally required representative remain subject to final applicability review.

Other regions

You may have additional rights under the law of your country or region. Contact us using the method below, and we will assess the request under applicable law.

14. Children's information

The Services are not directed to children under 13, and ORTTU does not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

Customers under 18 may use the Services only with parent or legal-guardian involvement and where they have the legal capacity required for the transaction. This does not mean the Services are directed to children.

15. Third-party services and links

The Services may link to or integrate services controlled by other parties. Their processing is governed by their own notices and terms. Review those notices before providing information directly to them.

16. Changes to this Policy

We may update this Policy to reflect changes in the Services, providers, practices or law. We will post the revised version, update the date and provide additional notice where required. Changes apply prospectively unless law requires otherwise.

17. Contact and complaints

For privacy questions, requests or complaints, contact:

ORTTU Online LLC
175 SW 7th St STE 1517
Miami, Florida 33130
United States
Email: info@orttu.com
Subject: PRIVACY REQUEST

We do not provide a public telephone support line. If you are dissatisfied with our response, you may appeal as described above and may contact the regulator available to you under applicable law.