Privacy policy

PRIVACY POLICY

Last updated: 15 June 2026

1. Data Controller

The controller of personal data is:

Alora Wellness OÜ
Registration code: 17464399
Address: Põlde 14, Tallinn, Estonia
Email: alorawellness.eu@gmail.com
Phone: +372 504 6016

This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, place an order, subscribe to our newsletter, or otherwise interact with us.

2. Personal Data We Collect

We may collect the following personal data:

  • First and last name

  • Email address

  • Telephone number

  • Billing and shipping address

  • Order information

  • Payment information

  • IP address and browser information

  • Communication history with customer support

3. Purpose and Legal Basis of Processing

We process personal data for the following purposes:

Order Fulfilment

To process orders, arrange deliveries, process returns and communicate regarding purchases.

Customer Service

To respond to inquiries and provide support.

Marketing

If you have given consent, we may send newsletters and promotional offers.

You can withdraw your consent at any time by clicking the unsubscribe link in our emails or contacting us directly.

Website Analytics

To improve our website and user experience through anonymous analytics data.

4. Payment Processing

Payments in our online store are processed through Maksekeskus AS.

When making a purchase, the personal data necessary for payment processing may be transferred to Maksekeskus AS, including:

  • Name

  • Contact information

  • Order details

  • Payment amount

  • Payment-related information

Maksekeskus AS processes personal data for payment processing, fraud prevention and compliance with legal obligations.

More information:
https://maksekeskus.ee/en/privacy-policy/

5. Service Providers

To operate our business, we may share personal data with trusted service providers, including:

  • Shopify – online store platform and hosting

  • Maksekeskus AS – payment processing

  • Omniva, DPD and Smartpost – shipping and delivery services

  • Analytics and marketing service providers

These parties process personal data only to the extent necessary for providing their services.

6. International Transfers

Some service providers, including Shopify, may process personal data outside the European Economic Area.

Where such transfers occur, appropriate safeguards are used in accordance with applicable data protection laws.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy or to comply with legal obligations.

Accounting documents are retained according to applicable legal requirements.

8. Your Rights

Under applicable data protection laws, you may have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion of your data

  • Restrict processing

  • Object to processing

  • Receive your data in a portable format

  • Withdraw consent at any time

To exercise your rights, please contact us at:

alorawellness.eu@gmail.com

9. Cookies

Our website uses cookies and similar technologies to ensure website functionality, improve user experience and analyse website traffic.

You can manage cookie preferences through your browser settings or our cookie consent banner.

10. Complaints

If you believe your personal data has been processed unlawfully, you have the right to file a complaint with your local data protection authority.

For Estonia:

Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon)
https://aki.ee

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

The latest version will always be available on our website.