Privacy Policy

1. Introduction

Avora ("we," "our," or "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and the choices you have regarding your information when you shop with us or interact with our website.

2. Information We Collect

We collect information you provide directly to us when you place an order or contact us:

• Full name and email address
• Shipping and billing address
• Phone number (if provided)
• Payment information. Stripe processes all payments securely; we never store raw card numbers.
• Order history and product preferences
• Communications you send to our support team

We also collect certain technical data automatically when you visit our site:

• IP address and browser type
• Pages visited and time spent on each page
• Referring URL and device type
• Cookie identifiers (see Section 6)

3. How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders, including sending shipping confirmation and tracking updates
• Respond to customer service inquiries and support requests
• Send transactional emails (order confirmations, shipping updates)
• Send marketing emails to customers who have opted in. You can unsubscribe at any time using the link in any email.
• Detect and prevent fraud, abuse, or unauthorized account activity
• Improve our website, product selection, and customer experience
• Comply with applicable legal and regulatory requirements

4. How We Share Your Information

We do not sell your personal data. We share your information only in the following circumstances:

• Service providers: We share data with trusted third parties who help operate our business, including payment processors (Stripe), shipping carriers, and email service providers. These parties are contractually obligated to use your data only to provide services to us.
• Order fulfillment: Your shipping address is shared with our fulfillment and logistics partners solely to deliver your order.
• Legal requirements: We may disclose your information if required by law, court order, or governmental authority.
• Business transfers: If Avora is acquired or merged, your information may be transferred as part of that transaction, subject to the same privacy protections.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, including maintaining your order history and complying with legal obligations. Order records are typically retained for seven years for accounting and tax purposes. You may request deletion of your personal data at any time (see Section 8).

6. Cookies

We use cookies and similar tracking technologies to enhance your browsing experience. Essential cookies are required for the website to function (e.g., your shopping cart). Analytics cookies help us understand how visitors use our site. You can manage your cookie preferences through our cookie consent banner or your browser settings. Disabling certain cookies may affect site functionality.

7. Security

We implement industry-standard security measures to protect your personal information, including TLS encryption for data in transit and restricted access controls for data at rest. All payment transactions are processed through Stripe, which is PCI-DSS Level 1 certified. While we take reasonable precautions, no security measure is perfectly secure. We encourage you to use strong, unique passwords and to contact us immediately if you suspect unauthorized use of your account.

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Ask us to correct inaccurate or incomplete information
• Deletion: Request deletion of your personal data (subject to certain legal exceptions)
• Portability: Receive your data in a structured, machine-readable format
• Opt-out: Unsubscribe from marketing emails at any time via the link in any email

To exercise any of these rights, email us using the contact information on your order confirmation or reach us via our contact page. We will respond within 30 days.

9. Children's Privacy

Our website is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you by email. Your continued use of our website after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us through the contact page on our website or via the email address included in your order confirmation. We take privacy concerns seriously and will respond promptly.