Your information.

Last updated: 21 September 2026. This notice covers Rollivane visitors and website administration.

Who is responsible?

Website delivery and security

Our server receives your IP address, requested URL, browser information and request time to deliver pages and protect the service. The website is hosted by Amazon Web Services (AWS) in the United States. Routine website access logging is disabled. Error logs may contain request details and are used for troubleshooting and security; they are rotated daily and removed within 15 days. Do not put names, diagnoses, medical history or other sensitive information in search queries or URLs.

Optional first-party analytics

Analytics starts only after you choose “Allow analytics”. Declining does not affect access to this website. We respect browser Do Not Track and Global Privacy Control signals. You can withdraw your choice using the control below; withdrawal stops new collection and clears analytics identifiers in your browser.

With your consent, we record visited page paths, clicks, reading progress, device category, language, time zone, referring website or campaign category, and random browser and session identifiers. We use your IP address temporarily on our own server to estimate your country using the DB-IP database. We retain the country result, not the raw IP address, in the analytics database. No visitor IP is sent to DB-IP for lookup. This is approximate country information; VPNs and mobile networks may affect accuracy. We do not collect precise location, search text or form entries.

We use these records to understand readership and improve website content. Analytics events are retained for up to 90 days and cleaned at least daily; analytics backups follow the same retention limit. Authorised team members may access this data for website operations and analysis. Existing records are not automatically erased when you withdraw; contact us if you wish to request deletion.

Google Search Console

We retrieve aggregate search-performance reports from Google Search Console, including search queries, pages, countries, devices, clicks and impressions, to understand how our website appears in Google Search. This server-side connection does not add a Google tracking script or cookie to your browser. We do not match these reports to individual visitor sessions. Cached reports are retained for up to 490 days, and synchronisation logs for 90 days.

Browser storage and cookies

• Region and comparison shortlist: localStorage keys pcg-region and pcg-compare, used only to remember your choices on this device until you clear them.
• Analytics choice: rollivane-analytics-consent-v3, a browser preference that expires after 180 days. We request a new choice when the version of this preference changes.
• Analytics identifiers: rollivane-analytics-visitor-v1 (a fixed maximum of 90 days) and rollivane-analytics-session-v1 (a tab session with a 30-minute inactivity limit). These identifiers are cleared when you withdraw consent or collection is disabled.
• Administrator authentication: essential, secure, HttpOnly cookies are used for the sign-in flow (10 minutes) and authenticated session (8 hours). They are not advertising cookies.

We do not embed third-party advertising, analytics pixels or social widgets. An external link opens the destination website, whose own notice and choices then apply. Clearing your browser storage removes local preferences; it does not delete records already held on the server.

Contact and administrator information

If you email us, the company receives your email address and message to respond to your request. Please send only what is necessary and do not send medical records. Correspondence is handled through the company email service, separately from website analytics. We retain correspondence as needed to resolve the request and meet applicable obligations; contact us to request deletion or details of the retention that applies to your message.

Authorised editors sign in using Feishu. We process their company account identifiers, display name, authentication state and content-editing audit records for access control and accountability. Feishu is involved only when an administrator uses sign-in. These administration records are separate from public visitor analytics.

Purposes, recipients and international processing

We process essential technical information for our legitimate interests in delivering and securing this website. Optional analytics uses consent. Contact information is used to answer your request and meet applicable obligations. Access is limited to authorised personnel and service providers for these purposes, including AWS for hosting and Feishu for administrator authentication. We do not sell visitor information or use it for behavioural advertising.

Accessing the website from outside the United States sends necessary request information to the United States. Access is restricted to authorised team members and relevant service providers for the purposes described above. Processing and authorised access may involve international transfers. Contact us for information about the processing locations and safeguards applicable to your data; this notice does not assert a particular certification or transfer agreement.

Your rights and choices

Depending on your location, you may request access, correction, deletion, restriction or portability of your personal information, object to relevant processing, and withdraw consent without affecting earlier lawful processing. Email global_business@orionstar.com with “Rollivane privacy request”. We will verify only the information reasonably needed to handle your request and respond within the applicable legal timeframe. You may complain to your local data protection authority; UK visitors can contact the ICO and EEA visitors their national supervisory authority.

For records linked only to a browser identifier, we may need that identifier or the approximate visit date to locate them. We do not ask you to provide medical information. Use the controls below to clear region and comparison preferences.