Privacy Policy

ORVIABAG is the trading brand of Guangzhou Lixue Tongye Leather Co., Ltd., a leather goods manufacturer based in Guangzhou, China. We design, produce and export leather wallets, card holders, metal card wallets, money clips, key cases, tool pouches, and custom leather bags and boxes for wholesale, OEM and ODM buyers worldwide.

In this policy, “ORVIABAG”, “we”, “us” and “our” mean Guangzhou Lixue Tongye Leather Co., Ltd. We run www.orviabag.com and decide how the information collected through it is used, which makes us the data controller for that information.

This policy covers www.orviabag.com in every language it is published in, together with the information we receive through it: the inquiry forms on our product and contact pages, the online logo preview, and any email, phone or messaging conversation that starts there.

It does not cover third-party websites we link to, and it does not replace a signed supply or non-disclosure agreement between us. Where such an agreement covers the same ground, the agreement takes precedence.

When you send an inquiry, ask for a quotation, request a sample, or preview your logo on a product, we collect the details you enter. In practice that means:

• your name and, if you give it, your job title;
• your company name, country and website;
• your email address and, if you would rather be called, your phone or WhatsApp number;
• what you are looking for — product, quantity, material, colour, logo method, target price and delivery date;
• the message you write to us, and any file you attach to it.

Our forms ask for business contact details only. Please do not send us payment card numbers, bank credentials, passport or identity-document scans, or any other sensitive personal information through the website — we do not need them to quote or to ship, and we will delete them if they arrive.

If you send artwork — including a mockup you generate in the online logo preview — we store it so that our sales team and our sampling department can open it. Files uploaded this way are held in our content provider's media library and are reachable by anyone who has the link. Please send only artwork you are comfortable storing on those terms; ask us and we will remove it when your inquiry is finished.

You do not have to give us anything to read the site. When you visit, our server and our hosting provider record limited technical information:

• your IP address, and the approximate country or region it resolves to;
• your browser, operating system, device type and screen size;
• the pages you open, when you opened them, and roughly how long you stayed;
• the address of the page, or the search query, that brought you here.

We use this only in aggregate — to keep the site available and secure, to see which products buyers are actually looking for, and to fix pages that load slowly. We do not use it to build advertising profiles, and we do not join it up with what you type into a form.

We keep cookies to a minimum. The site sets no first-party cookies at all: your language choice travels in the page address (/en/, /de/, /fr/, /es/, /pt/), not in a cookie, and we run no advertising or cross-site tracking pixels.

The cookies you may meet come from the third-party services that keep the site running and protected:

• Security — the bot-protection challenge that guards our inquiry forms (Cloudflare Turnstile) may set a short-lived cookie while you are on a page with a form. Its only job is to tell a real buyer from an automated submission.
• Hosting and delivery — the network that serves these pages may set a short-lived technical cookie to route your request, balance load, and block abusive traffic.

If we ever add analytics or advertising tools, we will list them here before they go live and, where the law requires it, ask for your consent first.

You can block or delete cookies at any time in your browser settings. Blocking the security cookie can stop the inquiry forms from submitting — if that happens, just email us instead.

We use what you give us to do the job you asked for. Specifically:

• to answer your inquiry and prepare a quotation;
• to make samples, logo mockups and proofs;
• to confirm and fulfil orders, and to prepare the packing lists, invoices and customs documents that go with them;
• to handle after-sales questions, shortage claims and returns;
• to send service messages about an inquiry or an order already in progress;
• to send occasional product news, new-mould announcements or trade-show invitations, where you asked for them or where we already have a business relationship — every such message tells you how to stop receiving them;
• to keep the accounting, tax and export records the law requires us to keep;
• to detect and block spam, fraud and abuse of the website.

Where data protection law (for example the GDPR in the EEA, or the UK GDPR) asks us to name a legal basis, we rely on the following:

• Your consent — where you have agreed to be contacted, or asked to receive product news. You may withdraw it at any time.
• A contract with you — or the steps needed to prepare one — quoting, sampling and producing your order.
• Our legitimate interests — answering business enquiries, keeping a record of them, keeping the website secure and improving it, and protecting our rights if a dispute arises. We weigh these against your rights and expectations.
• A legal obligation — export control, customs, tax and accounting rules that require us to keep certain records even after an order is finished.

We do not use your information for automated decision-making, and we do not profile you.

We do not sell, rent or trade your information, and we do not pass it to anyone for their own marketing. We share it only where it is genuinely needed, and only with:

• the hosting, content-management and email providers that run this website and our mailbox on our behalf;
• the bot-protection provider that screens our forms for automated submissions;
• freight forwarders, shipping lines, airlines and customs brokers, so that your order can physically reach you;
• our accountants, auditors and legal advisers, where they need it to do their work;
• a buyer or successor, if the business or part of it is sold, merged or reorganised — you will be told before your information moves to a new controller;
• a court, regulator or law-enforcement body, where the law requires it, or where it is needed to establish, exercise or defend a legal claim.

Each provider receives only what its task requires, and is bound to keep it confidential and to use it for no other purpose.

We are based in China, and the providers we use may store data in other countries, including the United States and the European Union. Where information protected by the GDPR or the UK GDPR leaves the EEA or the UK, we put contractual and organisational safeguards in place with the recipient so that it stays protected to a comparable standard, and we limit what is transferred to what the task actually needs.

If you would like to know more about how your information is protected once it leaves your country, write to us and we will explain the arrangements that apply to your inquiry.

• Inquiries and quotations — for as long as we are working together and, afterwards, for as long as our accounting, tax and export records must be retained — which can be several years after our last exchange.
• Orders — for the life of the supply relationship, plus the statutory record-keeping period that follows it.
• Product news — until you unsubscribe.
• Server logs and technical data — for a short period, after which they are deleted or reduced to aggregate statistics that no longer identify you.
• Uploaded artwork and mockups — for as long as the inquiry or order they belong to is active, and removed on request or at our periodic clean-up.

When information is no longer needed, we delete it or make it permanently anonymous.

The site is served over HTTPS, and the inquiry forms sit behind a bot-detection challenge. Access to inquiry data is limited to the sales and support staff who need it to answer you, and our providers apply their own encryption, access controls and monitoring to the systems that store it.

No way of sending or storing information is completely secure, so we cannot promise absolute security — we review these measures as the business grows. If we ever became aware of a breach affecting your information, we would tell you and the relevant authorities as and when the law requires.

Depending on where you live — the EEA, the UK, Switzerland, Brazil, Canada, California and several other jurisdictions grant these rights — you may be entitled to:

• ask whether we hold information about you, and receive a copy of it;
• ask us to correct information that is wrong or incomplete;
• ask us to delete information we no longer have a reason to keep;
• object to processing based on our legitimate interests, or ask us to restrict it;
• receive the information you gave us in a portable, machine-readable format;
• withdraw a consent you gave earlier, without affecting what we lawfully did before you withdrew it;
• stop marketing messages at any time — the unsubscribe link in such an email works immediately, and replying to ask also works;
• complain to your local data protection authority.

We do not sell your information, and we do not share it for cross-context behavioural advertising, so there is nothing of that kind to opt out of. For California residents this also means there is no “sale” or “sharing” to report under the CCPA/CPRA, and we do not treat anyone differently for exercising a privacy right.

To make a request, email linda@orviabag.com with the subject line “Data Request”. We answer within 30 days, and we may ask a question or two first to confirm who you are before we hand over or change anything.

This website is a business-to-business catalogue, not a consumer shop, and it is not directed at children. We do not knowingly collect information from anyone under 16. If you believe a child has sent us information, tell us and we will delete it.

Some of our pages link to services we do not run — for example WhatsApp, so that you can message our sales team directly, or a carrier's tracking page. Those services have their own privacy notices and their own rules about what they collect. This policy stops at our pages, so please read theirs before you submit information there.

We may update this policy when our services, our suppliers or the law change. The date at the top of this page always shows the version you are reading. If a change materially affects how we use information you have already given us, we will say so clearly on this page before it takes effect.

Questions about this policy, or about how we handle your information, are welcome at any time:

• Email — linda@orviabag.com
• Company — Guangzhou Lixue Tongye Leather Co., Ltd., trading as ORVIABAG
• Address — No. 3 Kejia Xianxing Road, Jiahe Street, Baiyun District, Guangzhou, China
• Data requests — please use the subject line “Data Request” so that it reaches the right person.