Privacy Policy
Last Updated: March 29, 2026
This Privacy Policy describes how Oroova ("we," "us," or "our") collects, uses, and shares your personal information when you visit or make a purchase from our website (the "Site").
1. Information We Collect
Information You Provide
When you use our Site, we may collect the following personal information:
- Contact information: name, email address, phone number, shipping and billing address
- Account information: email address and password when you create an account
- Payment information: credit/debit card details and billing address (processed securely by our third-party payment provider)
- Order information: products purchased, order history, and delivery preferences
- Communications: messages you send to us via email or contact forms
Information Collected Automatically
When you visit the Site, we automatically collect certain information about your device and your visit, including:
- Device information: IP address, browser type and version, operating system, device identifiers
- Usage information: pages viewed, time spent on pages, referring/exit pages, click patterns
- Location information: approximate geographic location based on your IP address
- Cookie and tracking data: information collected through cookies, pixel tags, and similar technologies (see Section 5 below)
2. How We Use Your Information
We use the information we collect to:
- Fulfill and manage your orders, including processing payments and shipping
- Communicate with you about your orders, account, and customer service enquiries
- Personalise your shopping experience and provide product recommendations
- Send promotional communications (where you have opted in or where permitted by law)
- Analyse Site usage and improve our products, services, and user experience
- Detect, prevent, and address fraud, security issues, and technical problems
- Comply with legal obligations and enforce our terms of service
3. How We Share Your Information
We do not sell your personal information. We may share your information with the following categories of third parties:
- Service providers: payment processors, shipping carriers, email service providers, cloud hosting, and analytics providers who assist us in operating the Site
- Advertising partners: advertising networks and social media platforms for targeted advertising (subject to your cookie preferences)
- Legal requirements: when required by law, regulation, legal process, or governmental request
- Business transfers: in connection with a merger, acquisition, or sale of assets
4. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
For All Users
- Access: request a copy of the personal data we hold about you
- Correction: request that we correct inaccurate or incomplete data
- Deletion: request that we delete your personal data
- Opt-out of marketing: unsubscribe from promotional emails at any time
For EU/EEA/UK Residents (GDPR)
In addition to the above, you have the right to:
- Restrict processing of your personal data
- Data portability: receive your data in a structured, machine-readable format
- Object to processing based on legitimate interests
- Withdraw consent at any time where processing is based on consent
Our legal bases for processing your data are: performance of a contract (order fulfilment), consent (marketing communications and non-essential cookies), and legitimate interests (fraud prevention, Site improvement).
For California Residents (CCPA/CPRA)
You have the right to:
- Know what personal information we collect, use, and disclose
- Delete your personal information
- Opt out of the sale or sharing of your personal information
- Non-discrimination for exercising your privacy rights
We do not sell personal information as defined by the CCPA. To exercise your rights, contact us using the details in Section 9.
5. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect information about your browsing activity. These include:
| Category | Purpose | Examples |
|---|---|---|
| Strictly Necessary | Essential for the Site to function (e.g., shopping cart, authentication) | Session cookies, CSRF tokens |
| Analytics | Help us understand how visitors use the Site | Google Analytics, Hotjar |
| Marketing | Used to deliver relevant advertisements | Google Ads, Facebook Pixel |
| Functionality | Enable enhanced features and personalisation | Live chat, video embeds |
When you first visit our Site, you will be presented with a cookie consent banner where you can choose which categories of cookies to accept. You can change your preferences at any time by clicking the cookie settings link in the footer.
6. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law. Specifically:
- Order data: retained for 7 years for tax and accounting purposes
- Account data: retained until you delete your account
- Analytics data: retained in anonymised/aggregated form indefinitely
- Marketing data: retained until you opt out or withdraw consent
7. Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include encryption of data in transit (TLS/SSL), secure payment processing, and regular security assessments.
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
8. International Data Transfers
Your information may be transferred to and processed in countries other than your own. When we transfer data internationally, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.
9. Contact Us
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have a complaint about how we handle your data, please contact us at:
Email: [email protected]
We will respond to all legitimate requests within 30 days (or sooner where required by applicable law).
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on this page and updating the "Last Updated" date above.
We encourage you to review this policy periodically.

