Privacy Policy

This Privacy Policy explains how Qorava.com, operated by Evozone Eco Ltd (Company Number: 15909852) and hosted by Shopify Inc., collects, uses, protects, and manages your personal information when you visit our website or make a purchase. We are committed to protecting your privacy and complying with all applicable UK data protection laws.

1. Data Controller Information

Data Controller: Evozone Eco Ltd
Company Number: 15909852
Registered Address: 71-75, Shelton Street, Covent Garden, London, England, WC2H 9JQ, United Kingdom
Contact Email: support@qorava.com
Phone: +44 0749 4309743

2. Types of Personal Data We Collect

2.1 Device and Technical Information

What we collect: Browser type and version, IP address, time zone, operating system, device type, screen resolution, cookie information, pages viewed, products viewed, search terms, referral sources.
Purpose: To ensure website functionality, optimize user experience, prevent fraud, and improve our services.
Legal basis: Legitimate interests (website operation and improvement).
How collected: Automatically via cookies, log files, web beacons, and analytics tools.
Sharing: Shared with Shopify (our hosting platform) and analytics providers under strict data processing agreements.

2.2 Order and Customer Information

What we collect: Full name, billing address, shipping address, email address, phone number, payment information (processed securely by payment providers), order history, communication preferences.
Purpose: To process orders, handle payments, arrange shipping, send order confirmations, provide customer support, comply with legal obligations, and (with your consent) send marketing communications.
Legal basis: Contract performance, legal obligations, and consent (for marketing).
How collected: Directly from you during account creation, checkout, and customer service interactions.
Sharing: Shared with Shopify, payment processors (Stripe, Klarna), shipping partners, and customer service providers under strict data processing agreements compliant with UK GDPR.

2.3 Customer Support Information

What we collect: Name, email address, phone number, order details, support inquiry details, communication history.
Purpose: To provide effective customer support, resolve issues, and improve our services.
Legal basis: Contract performance and legitimate interests.
How collected: Directly from you when you contact customer support.
Sharing: Shared only with authorized customer service representatives and relevant service providers as necessary.

2.4 Marketing and Communication Data

What we collect: Email address, communication preferences, marketing consent status, engagement data.
Purpose: To send promotional emails, product updates, and relevant offers (only with your explicit consent).
Legal basis: Consent.
How collected: Through opt-in forms, newsletter subscriptions, and account preferences.
Sharing: Shared with email marketing service providers under strict data processing agreements.

3. Legal Basis for Data Processing

We process your personal data based on the following legal grounds under UK GDPR:

• Consent: For marketing communications, non-essential cookies, and optional data processing
• Contract Performance: To fulfill orders, process payments, and provide customer service
• Legal Obligations: To comply with tax laws, consumer protection laws, and other legal requirements
• Legitimate Interests: To improve our website, prevent fraud, and enhance user experience (balanced against your privacy rights)

4. How We Share Your Data

We share your data only when necessary and under strict data protection agreements:

• Shopify Inc.: Our e-commerce platform provider (data processing agreement in place)
• Payment Processors: Stripe and Klarna for secure payment processing
• Shipping Partners: Trusted logistics providers for order fulfillment
• Customer Service: Authorized support providers for customer assistance
• Analytics Providers: Google Analytics and similar services (anonymized data where possible)
• Legal Compliance: When required by law, court order, or to protect our legal rights

International Transfers: Some service providers may be located outside the UK. We ensure adequate protection through Standard Contractual Clauses and adequacy decisions.

5. Data Security and Protection

We implement comprehensive security measures to protect your data:

• Encryption: All data transmission is encrypted using SSL/TLS technology
• Secure Storage: Data is stored on secure servers with access controls
• Payment Security: PCI-DSS compliant payment processing
• Access Controls: Limited access to personal data on a need-to-know basis
• Regular Audits: Security assessments and vulnerability testing
• Staff Training: Regular data protection training for all staff

6. Data Retention

We retain your data only as long as necessary:

• Order Data: 7 years for tax and legal compliance
• Customer Accounts: Until account deletion or 3 years of inactivity
• Marketing Data: Until you withdraw consent or 2 years of inactivity
• Technical Data: 2 years for analytics and improvement purposes
• Support Data: 3 years for quality assurance and legal protection

7. Cookies and Tracking Technologies

We use cookies to enhance your browsing experience:

7.1 Essential Cookies

Required for website functionality (shopping cart, checkout, login). These cannot be disabled.

7.2 Analytics Cookies

Google Analytics: Tracks website usage and performance. You can opt-out at Google Analytics Opt-out.

7.3 Marketing Cookies

Used for personalized advertising and remarketing (only with your consent).

Cookie Management: You can manage cookie preferences through our cookie banner or your browser settings. Note that disabling certain cookies may affect website functionality.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal obligations)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing or optional processing

Exercising Your Rights: Contact us at support@qorava.com. We will respond within 30 days.

9. Marketing Communications

Opt-in Required: We only send marketing emails with your explicit consent.
Unsubscribe: You can unsubscribe anytime using the link in our emails or by contacting us.
Frequency: We respect your preferences and won't overwhelm you with communications.

10. Children's Privacy

Our website is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, please contact us immediately at support@qorava.com so we can delete it.

11. Third-Party Links and Services

Our website may contain links to third-party websites or services. We are not responsible for their privacy practices. Please review their privacy policies before sharing any personal information.

12. Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify the Information Commissioner's Office (ICO) within 72 hours
• Inform affected individuals without undue delay
• Take immediate steps to contain and remedy the breach

13. Changes to This Privacy Policy

We may update this policy to reflect changes in our practices, technology, or legal requirements. We will:

• Post the updated policy on this page
• Update the "Last Updated" date
• Notify you of significant changes via email or website notice
• Obtain new consent where required by law

14. Contact Us and Complaints

For privacy-related questions, requests, or complaints:

Email: support@qorava.com
Phone: +44 0749 4309743
Address: 71-75, Shelton Street, Covent Garden, London, England, WC2H 9JQ, United Kingdom
Business Hours: Monday to Friday, 9:00 AM–6:00 PM (GMT)

Regulatory Authority: If you're not satisfied with our response, you can lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Last Updated: August 23, 2025