Privacy Policy
Last updated: 8 November 2026
1. Who we are
This Privacy Policy explains how Ora Chocolate collects, uses, and protects your personal data when you visit www.ora-chocolate.com (the "Site") or purchase our products.
For any questions about this policy or your personal data, contact us at customer-care@ora-chocolate.com.
2. The data we collect
We collect the following categories of personal data:
- Information you provide directly: name, email address, phone number, delivery and billing address, and order details when you make a purchase, subscribe to our newsletter, or contact us.
- Payment information: processed securely by our payment provider. We do not store full card details on our servers.
- Information sent automatically by your browser: when pages and typefaces load, our website host and Google Fonts receive technical information such as your IP address and browser type. This website does not use analytics or advertising cookies (see our Cookie Policy); our checkout, provided by Shopify, sets its own cookies.
- Communications: records of your correspondence with us, including via email and WhatsApp.
3. How we use your data
We use your personal data to:
- Process and deliver your orders, and manage payments, returns, and refunds;
- Communicate with you about your orders and respond to enquiries;
- Send you marketing communications, including our newsletter, where you have consented;
- Operate and improve the Site;
- Comply with our legal and regulatory obligations;
- Prevent fraud and protect the security of our Site and business.
4. Legal basis for processing
We process your data on the basis of: the performance of our contract with you (to fulfill orders); your consent (for marketing); our legitimate interests (to operate and improve our business); and compliance with legal obligations. You may withdraw consent for marketing at any time.
5. Sharing your data
We share personal data only with:
- Service providers who help us operate: Shopify (online shop and checkout), Klaviyo (newsletter), Web3Forms (contact form), GitHub Pages (website hosting), Google Fonts (typefaces), our payment processor and our delivery partners;
- Professional advisors such as accountants and lawyers, where necessary;
- Authorities, where required by law or to protect our legal rights.
We do not sell your personal data to third parties.
6. International transfers
Some of our service providers may store or process data outside the UAE. Where this occurs, we take reasonable steps to ensure your data is protected in accordance with the UAE Personal Data Protection Law and applicable safeguards.
7. Data retention
We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, including to meet legal, accounting, or reporting requirements.
8. Your rights
Under the UAE Personal Data Protection Law, you have the right to: access your personal data; request correction of inaccurate data; request deletion of your data; object to or restrict certain processing; withdraw consent; and request a copy of your data in a portable format. To exercise any of these rights, contact us at customer-care@ora-chocolate.com. We will respond within the timeframes required by law.
9. Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
10. Children
The Site is not directed at children under 18, and we do not knowingly collect personal data from children. If you believe we have collected such data, please contact us.
11. Changes to this policy
We may update this policy from time to time. The current version will always be posted on this page with the "last updated" date. Material changes will be communicated where appropriate.
12. Contact
For any questions, requests, or complaints regarding this Privacy Policy or your personal data, contact us at customer-care@ora-chocolate.com.