Privacy Policy

1. Who we are

This Privacy Policy covers store.color-register.org (ORCN Store), the online store of The Official Register of Color Names, where you can purchase the right to name a color. It explains what personal data we collect when you visit the Store or place an order, and how we use it. The Register site has its own Privacy Policy.

2. Data we collect

Order data

When you place an order we collect the data you enter at checkout: your name, email address, the chosen color, Color Name, and any Personal Message. We use it to process your order, issue your Color Certificate, register your Color Name, and contact you about your order (contract performance, Art. 6(1)(b) GDPR).

Server log files

Our web server automatically records technical data transmitted by your browser: browser type and version, operating system, referrer URL, time of the request, and IP address. We use these logs to keep the site secure and functioning (legitimate interest, Art. 6(1)(f) GDPR). Log data is not combined with other data sources.

Cookies

We use cookies necessary for the store to function (e.g. your shopping cart session) — these are stored on the basis of our legitimate interest in providing a working store (Art. 6(1)(f) GDPR). Analytics cookies are described in section 4. You can configure your browser to refuse or delete cookies; some store features (such as the cart) may then not work.

3. Payments — Stripe and PayPal

Payments are processed by third-party payment providers. We do not store your full card details.

  • Card payments are processed by Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland). The data required for payment (name, email, card details, amount, currency, transaction number) is transmitted directly to Stripe solely to process your payment. See the Stripe Privacy Policy.
  • PayPal payments are processed by PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). See the PayPal Privacy Statement.

All payment transactions are made via encrypted SSL/TLS connections. Legal basis: contract performance (Art. 6(1)(b) GDPR).

4. Analytics — Google Analytics 4

We use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to understand how visitors use the store. GA4 does not log or store full IP addresses; reports are aggregated and do not identify you personally. Legal basis: consent / legitimate interest in improving the store (Art. 6(1)(a)/(f) GDPR). You can opt out with the Google Analytics opt-out browser add-on.

5. Public register data

The Register is a public database. When your order is completed, the registered Color Name and — if you chose to include it — your Personal Message are published on the color's dedicated page on color-register.org and shown on your Color Certificate. Please do not include information in the Color Name or Personal Message that you do not want to be public. If you cancel your order under our Refund Policy, the page and registration are removed.

6. Sharing and international transfers

We share personal data only with the processors named in this policy (Stripe, PayPal, Google) and only as far as needed to provide the service. We do not sell your data or share it for third-party advertising. Google LLC is certified under the EU–U.S. Data Privacy Framework; transfers are additionally safeguarded by Standard Contractual Clauses.

7. Retention

Order and invoice data is retained for as long as statutory accounting and tax retention periods require. The registered Color Name and Personal Message remain published indefinitely — that is the service you purchased — unless the order is cancelled under the Refund Policy or the entry is removed under our Terms and Conditions.

8. Your rights

Under the GDPR you have the right to access, rectify, erase, and receive a copy of your personal data, to restrict or object to processing, and to withdraw consent at any time with future effect. You may also lodge a complaint with your data protection supervisory authority. To exercise any right, use our contact form.

9. Changes to this policy

If we make material changes, we will display a prominent notice above this policy for 30 days. The current version and its effective date are always shown below.

Version 2.0 — Effective July 11, 2026.