Privacy Policy
Evora Luxuries — Privacy Policy
Last updated: 02/08/2026
Introduction
Evora Luxuries is committed to protecting your privacy and personal data. This policy explains what information we collect, how we use it, and the rights you have over your data.
By using our website (www.evoraluxuries.com) and purchasing our products, you agree to the terms of this Privacy Policy.
This policy complies with the UK GDPR and the Data Protection Act 2018.
What Data We Collect
We collect the following types of information:
Information you provide directly:
- Name and email address (when you create an account or place an order)
- Shipping and billing address
- Phone number (for delivery purposes)
- Payment information (processed securely by our payment provider — we do not store card details)
- Product reviews and communications with our team
- Marketing preferences (email opt-in/opt-out)
Information collected automatically:
- IP address and browser type
- Pages visited and time spent on our website
- Referring website or search engine
- Device and location data (general, not precise)
- Cookies and similar tracking technologies
Information from third parties:
- Payment processors (to complete transactions)
- Shipping carriers (to fulfil orders)
- Marketing platforms (if you interact with our email or ad campaigns)
How We Use Your Data
We use your personal data for the following purposes:
- Processing and fulfilling your orders
- Communicating about your order (confirmations, tracking, delivery updates)
- Providing customer support
- Sending marketing emails (only if you've opted in)
- Improving our website, products, and services
- Preventing fraud and protecting our business
- Complying with legal obligations
We do not sell your personal data to third parties. We do not share your data for advertising purposes without your consent.
Legal Basis For Processing
Under the UK GDPR, we process your data based on:
- Contract: to fulfil your order and provide the products you've purchased
- Consent: for marketing emails and non-essential communications (you can withdraw consent at any time)
- Legal obligation: to comply with tax, accounting, and consumer protection laws
- Legitimate interest: to improve our services, prevent fraud, and communicate about orders
Cookies
Our website uses cookies to:
Essential cookies (required for the site to function):
- Shopping cart and checkout functionality
- Security and fraud prevention
- Remembering your preferences
Analytics cookies:
- Understanding how visitors use our website
- Measuring website performance
- Improving user experience
Marketing cookies (only with consent):
- Showing relevant ads on other platforms
- Tracking the effectiveness of our marketing campaigns
You can manage your cookie preferences at any time through the cookie banner on our website or your browser settings.
Data Sharing
We share your data with trusted third parties only when necessary:
Shopify — our e-commerce platform (to process orders and payments)
Payment processors — to handle transactions securely (we do not see or store your card details)
Shipping carriers — to deliver your orders (name and address only)
Email marketing platform — to send newsletters (only if you've opted in)
Analytics providers — to help us understand website usage
All third parties are required to protect your data in accordance with the UK GDPR.
Data Retention
We retain your personal data only for as long as necessary:
- Order data: 7 years (for tax and legal compliance)
- Account data: until you request deletion
- Marketing data: until you unsubscribe or request removal
- Website analytics: 26 months
You can request deletion of your data at any time (see Your Rights below).
Your Rights
Under the UK GDPR, you have the right to:
- Access: Request a copy of the personal data we hold about you
- Rectification: Ask us to correct inaccurate or incomplete data
- Erasure: Request that we delete your personal data (right to be forgotten)
- Restriction: Ask us to limit how we use your data
- Objection: Object to certain types of processing
- Data portability: Receive your data in a portable format
- Withdraw consent: Withdraw consent for marketing communications at any time
To exercise any of these rights, email us at evoralux.support@gmail.com.
We will respond to all data subject requests within 30 days.
Data Security
We take data security seriously and implement appropriate measures:
- All payment transactions are encrypted and processed by PCI-compliant providers
- Access to customer data is restricted to authorised team members only
- We use SSL encryption on our website
- Regular security reviews and updates
No method of transmission or electronic storage is 100% secure, but we work hard to protect your data.
International Data Transfers
Your data may be processed by third parties located outside the UK (e.g. Shopify in Canada, email platforms in the US). Where this occurs, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses approved by the UK government
- Data transfer agreements with third parties
- Ensuring third parties comply with the UK GDPR
Children'S Privacy
Our products are intended for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us with personal data, contact us at evoralux.support@gmail.com and we will delete it immediately.
Marketing Communications
If you opt into marketing emails, you will receive:
- Product launches and new arrivals
- Special offers and promotions
- Wellness tips and content
You can unsubscribe at any time by:
- Clicking the unsubscribe link in any marketing email
- Emailing evoralux.support@gmail.com with "Unsubscribe" in the subject line
We will process your unsubscribe request within 2 business days.
Your Data Rights Complaints
If you have a concern about how we handle your data, please contact us first at evoralux.support@gmail.com.
If you're not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO):
ICO website: https://ico.org.uk
ICO phone: 0303 123 1113
ICO address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Changes To This Policy
We may update this Privacy Policy from time to time. The most current version will always be posted on our website with the updated date.
If we make significant changes, we'll notify you by email or through a banner on our website.
Contact Us
For any questions about this Privacy Policy or your personal data:
Email: evoralux.support@gmail.com
Phone: +44 7926295674
Hours: Monday to Friday, 9:00 AM – 5:00 PM GMT