Privacy policy

Last updated: June 12, 2026

OroHeal ("we," "us," or "our") operates this store and website, including all related information, content, features, tools, products, and services (the "Services"), to provide you with a curated shopping experience. OroHeal is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase through the Services, or otherwise communicate with us.

By using the Services, you acknowledge that you have read this Privacy Policy and understand how your information is collected, used, and disclosed.

Personal information we collect

Depending on how you interact with the Services, we may collect:

  • Contact details — name, billing and shipping address, phone number, email address
  • Financial information — payment card details, transaction information, billing details (note: full payment card numbers are processed directly by our payment providers and are not stored by us)
  • Account information — username, password, preferences, order history
  • Transaction information — items viewed, added to cart or wishlist, purchased, returned, or exchanged
  • Communications — messages you send us, including customer support inquiries
  • Device information — browser type, IP address, device identifiers
  • Usage information — how you interact with and navigate our site

How we collect this information

  • Directly from you — when you create an account, place an order, or contact us
  • Automatically — through cookies and similar technologies as you browse our site
  • From service providers — such as Shopify, payment processors, and shipping partners
  • From marketing partners — including advertising platforms used for marketing (see below)

How we use your information

  • To provide the Services — process orders, payments, shipping, returns, exchanges, manage your account, and provide customer support
  • For marketing — to send promotional emails (with the option to unsubscribe at any time) and to show relevant ads on platforms such as Meta (Facebook/Instagram), Google, and TikTok, based on your activity on our site
  • For security and fraud prevention — to protect your account and our store from fraudulent or unauthorized activity
  • To comply with the law — including responding to valid legal requests

How we disclose information

We may share your information with:

  • Shopify and our service providers (payment processing, shipping/fulfillment, customer support tools, email marketing platforms such as Klaviyo or Shopify Email)
  • Advertising partners (Meta, Google, TikTok), to deliver and measure ads — these partners may use cookies or similar technologies and have their own privacy policies
  • Legal or regulatory authorities, where required by law
  • A successor business, in the event of a merger, acquisition, or sale of assets

We do not sell your personal information for money.

Cookies and advertising

We use cookies and similar technologies, including pixels from Meta, Google, and TikTok, to understand how visitors use our site and to show you relevant ads. You can manage cookie preferences through your browser settings, and where applicable, through any cookie consent tool on our site. Depending on where you live, you may have the right to opt out of this kind of targeted advertising.

Relationship with Shopify

Our store is hosted on Shopify, which also processes your personal information to help operate, secure, and improve the Services, including certain features that use data from your interactions with our store and other Shopify merchants. To learn more, see Shopify's Consumer Privacy Policy at privacy.shopify.com, where you can also exercise certain rights regarding data processed by Shopify.

Children's data

Our Services are not directed to children, and we do not knowingly collect personal information from children under the age of 16 (or the applicable age of consent in your jurisdiction). If you believe a child has provided us with personal information, please contact us so we can delete it.

Data security and retention

We use reasonable security measures to protect your information, but no method of transmission or storage is completely secure. We retain personal information only as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements.

Your rights

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate information
  • Delete your personal information
  • Receive a copy of your information (data portability)
  • Opt out of marketing communications at any time
  • Object to or restrict certain processing (EEA/UK residents)
  • Withdraw consent where processing is based on consent (EEA/UK residents)

To exercise any of these rights, contact us using the details below. We may need to verify your identity before fulfilling your request. If you reside in the EEA, you may also lodge a complaint with your local data protection authority.

International transfers

Your information may be processed and stored in countries other than where you live. Where we transfer personal information from the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

Contact us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at info@oroheal.com.