Privacy Policy

Last Updated: March 29, 2026

This Privacy Policy describes how Oroova ("we," "us," or "our") collects, uses, and shares your personal information when you visit or make a purchase from our website (the "Site").


1. Information We Collect

Information You Provide

When you use our Site, we may collect the following personal information:

  • Contact information: name, email address, phone number, shipping and billing address
  • Account information: email address and password when you create an account
  • Payment information: credit/debit card details and billing address (processed securely by our third-party payment provider)
  • Order information: products purchased, order history, and delivery preferences
  • Communications: messages you send to us via email or contact forms

Information Collected Automatically

When you visit the Site, we automatically collect certain information about your device and your visit, including:

  • Device information: IP address, browser type and version, operating system, device identifiers
  • Usage information: pages viewed, time spent on pages, referring/exit pages, click patterns
  • Location information: approximate geographic location based on your IP address
  • Cookie and tracking data: information collected through cookies, pixel tags, and similar technologies (see Section 5 below)

2. How We Use Your Information

We use the information we collect to:

  • Fulfill and manage your orders, including processing payments and shipping
  • Communicate with you about your orders, account, and customer service enquiries
  • Personalise your shopping experience and provide product recommendations
  • Send promotional communications (where you have opted in or where permitted by law)
  • Analyse Site usage and improve our products, services, and user experience
  • Detect, prevent, and address fraud, security issues, and technical problems
  • Comply with legal obligations and enforce our terms of service

3. How We Share Your Information

We do not sell your personal information. We may share your information with the following categories of third parties:

  • Service providers: payment processors, shipping carriers, email service providers, cloud hosting, and analytics providers who assist us in operating the Site
  • Advertising partners: advertising networks and social media platforms for targeted advertising (subject to your cookie preferences)
  • Legal requirements: when required by law, regulation, legal process, or governmental request
  • Business transfers: in connection with a merger, acquisition, or sale of assets

4. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

For All Users

  • Access: request a copy of the personal data we hold about you
  • Correction: request that we correct inaccurate or incomplete data
  • Deletion: request that we delete your personal data
  • Opt-out of marketing: unsubscribe from promotional emails at any time

For EU/EEA/UK Residents (GDPR)

In addition to the above, you have the right to:

  • Restrict processing of your personal data
  • Data portability: receive your data in a structured, machine-readable format
  • Object to processing based on legitimate interests
  • Withdraw consent at any time where processing is based on consent

Our legal bases for processing your data are: performance of a contract (order fulfilment), consent (marketing communications and non-essential cookies), and legitimate interests (fraud prevention, Site improvement).

For California Residents (CCPA/CPRA)

You have the right to:

  • Know what personal information we collect, use, and disclose
  • Delete your personal information
  • Opt out of the sale or sharing of your personal information
  • Non-discrimination for exercising your privacy rights

We do not sell personal information as defined by the CCPA. To exercise your rights, contact us using the details in Section 9.


5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activity. These include:

CategoryPurposeExamples
Strictly NecessaryEssential for the Site to function (e.g., shopping cart, authentication)Session cookies, CSRF tokens
AnalyticsHelp us understand how visitors use the SiteGoogle Analytics, Hotjar
MarketingUsed to deliver relevant advertisementsGoogle Ads, Facebook Pixel
FunctionalityEnable enhanced features and personalisationLive chat, video embeds

When you first visit our Site, you will be presented with a cookie consent banner where you can choose which categories of cookies to accept. You can change your preferences at any time by clicking the cookie settings link in the footer.


6. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law. Specifically:

  • Order data: retained for 7 years for tax and accounting purposes
  • Account data: retained until you delete your account
  • Analytics data: retained in anonymised/aggregated form indefinitely
  • Marketing data: retained until you opt out or withdraw consent

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include encryption of data in transit (TLS/SSL), secure payment processing, and regular security assessments.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.


8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. When we transfer data internationally, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.


9. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have a complaint about how we handle your data, please contact us at:

Email: [email protected]

We will respond to all legitimate requests within 30 days (or sooner where required by applicable law).


10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on this page and updating the "Last Updated" date above.

We encourage you to review this policy periodically.