Privacy Policy

Last updated: June 2026

This Privacy Policy describes how alorea.co (the "Site", "we", "us") collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site. Alorea is a trading name of DBA ECOM MASTER LIMITED.

Contact

After reviewing this policy, if you have additional questions, want more information about our privacy practices, or would like to make a complaint, please contact us by email at support@alorea.co.

Collecting Personal Information

When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, we refer to any information about an identifiable individual as "Personal Information". See below for what we collect and why.

Device information. Purpose: to load the Site accurately for you, and to perform analytics on Site usage to optimise our Site. Source: collected automatically when you access our Site using cookies, log files, web beacons, tags, or pixels. Disclosed to our processor Shopify. Personal Information collected: version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Site.

Order information. Purpose: to provide products to you and fulfil our contract, process your payment, arrange shipping, provide invoices and order confirmations, communicate with you, screen orders for potential risk or fraud, and, where in line with your preferences, provide you with information or advertising about our products. Source: collected from you. Disclosed to our processors Shopify and, where you have consented to marketing, Omnisend. Personal Information collected: name, billing address, shipping address, payment information, email address, and phone number.

Customer support information. Purpose: to provide customer support. Source: collected from you. Disclosed to our processor Shopify.

Minors

The Site is not intended for individuals under the age of 18. We do not intentionally collect Personal Information from children. If you are a parent or guardian and believe your child has provided us with Personal Information, please contact us at the address above to request deletion.

Sharing Personal Information

We share your Personal Information with service providers who help us provide our services and fulfil our contracts with you, as described above. For example:

• We use Shopify to power our online store. You can read how Shopify uses your Personal Information at https://www.shopify.com/legal/privacy.
• We use Omnisend to send our email and, where applicable, SMS marketing and order-related messages, including abandoned checkout reminders. You can read how Omnisend handles your Personal Information at https://www.omnisend.com/privacy/.

We may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information, or to otherwise protect our rights.

Behavioural Advertising

We use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:

• We use Google Analytics to understand how customers use the Site. See https://www.google.com/intl/en/policies/privacy/. You can opt out at https://tools.google.com/dlpage/gaoptout.
• We use Omnisend to send marketing communications to customers who have consented to receive them.
• We use Shopify Audiences to help show ads on other websites to buyers who may be interested in our products. We share information about your use of the Site, your purchases, and the email address associated with your purchases with Shopify Audiences.

For more about how targeted advertising works, see the Network Advertising Initiative's educational page at https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by:

• FACEBOOK - https://www.facebook.com/settings/?tab=ads
• GOOGLE - https://www.google.com/settings/ads/anonymous
• BING - https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads

You can also opt out of some of these services through the Digital Advertising Alliance at https://optout.aboutads.info/.

Using Personal Information

We use your Personal Information to provide our services to you, which includes: offering wellness devices and topical products for sale, processing payments, shipping and fulfilment of your order, and keeping you up to date on new products, services, and offers where you have consented.

Lawful Basis

If you are a resident of the United Kingdom or the European Economic Area, we process your Personal Information under the UK GDPR or EU GDPR respectively, on the following lawful bases:

• Your consent;
• The performance of the contract between you and the Site;
• Compliance with our legal obligations;
• To protect your vital interests;
• For our legitimate interests, which do not override your fundamental rights and freedoms.

Retention

When you place an order through the Site, we will retain your Personal Information for our records unless and until you ask us to erase it. For more information on your right of erasure, see the "Your Rights" section below.

Automated Decision-Making

We do not engage in fully automated decision-making that has a legal or otherwise significant effect on you using customer data.

Our processor Shopify uses limited automated decision-making to prevent fraud, which does not have a legal or otherwise significant effect on you. This includes:

• A temporary blacklist of IP addresses associated with repeated failed transactions, which persists for a small number of hours.
• A temporary blacklist of credit cards associated with blacklisted IP addresses, which persists for a small number of days.

If you are a resident of the UK or EEA, you have the right to object to processing based solely on automated decision-making (including profiling) where it has a legal or similarly significant effect on you.

Selling Personal Information

Our Site may share Personal Information in ways that are treated as a "sale" under the California Consumer Privacy Act ("CCPA"), through advertising features such as Shopify Audiences. The categories of information involved are: information about your use of the Site, your purchases, and the email address associated with your purchase.

To opt out, please contact us at support@alorea.co. Alorea does not sell the Personal Information of minors under 16 years of age without affirmative authorisation.

Your Rights

UK GDPR. If you are a resident of the United Kingdom, you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that it be corrected, updated, or erased. To exercise these rights, contact us using the details above.

EU GDPR. If you are a resident of the EEA, you have the same rights as above. Your Personal Information may be transferred outside the UK and EEA for storage and further processing, including to Canada and the United States. For more on how these transfers comply with the GDPR, see Shopify's GDPR Whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR.

CCPA. If you are a resident of California, you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that it be corrected, updated, or erased. To exercise these rights, or to designate an authorised agent to do so on your behalf, contact us using the details above.

Cookies

A cookie is a small amount of information downloaded to your device when you visit our Site. We use functional, performance, advertising, and social media or content cookies. Cookies remember your actions and preferences, and provide information on how people use the website.

Cookies necessary for the functioning of the store (examples): _ab (admin access, 2y), _secure_session_id (storefront navigation, 24h), _shopify_country (checkout, session), cart (shopping cart, 2w), checkout_token (checkout, 1y), secure_customer_sig (customer login, 20y), shopify_pay (checkout, 1y).

Reporting and analytics cookies (examples): _landing_page (track landing pages, 2w), _orig_referrer (track landing pages, 2w), _s (Shopify analytics, 30min), _shopify_y (Shopify analytics, 1y), _shopify_ga (Shopify and Google Analytics, session).

You can control and manage cookies through your browser settings, usually found under "Tools" or "Preferences". For more information, see www.allaboutcookies.org.

Do Not Track

Because there is no consistent industry standard for responding to "Do Not Track" signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.

Currency Conversion

By using our website, you agree to allow third parties to process your IP address to determine your location for currency conversion, and to store that currency in a session cookie in your browser, so the selected currency stays consistent as you browse.

SMS Marketing

Where you have opted in, we use your information to send text notifications (including order updates and abandoned checkout reminders), text marketing offers, and transactional texts, including review requests. Opt-in data and consent for text messaging will not be shared with any third parties except our messaging partners, for the purpose of operating our text messaging program. You can opt out at any time by replying STOP.

Changes

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons.

Complaints

If you would like to make a complaint, please contact us by email at support@alorea.co.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority. In the United Kingdom, this is the Information Commissioner's Office (ICO), https://ico.org.uk. If you are in the EEA, you may contact your local data protection authority.