Privacy policy

Last updated: 21 October 2026

AOORA ("we", "us", "our") operates this website and provides all related information, content, products, features and services (the "Services"). We sell artificial jewellery from India to customers in Australia, the United States, the United Kingdom and Canada, and our store prices are in Australian dollars (AUD).

This Privacy Policy explains how we collect, use, store, protect and disclose your personal information when you visit our website, interact with us, place an order or use any of our Services. By using our Services, you acknowledge that you have read and understood this policy.

1. Personal Information We Collect

"Personal information" means information that identifies, relates to or can reasonably be linked to you. Depending on how you use our Services, we may collect:

a) Contact information

  • Full name, email address and phone number
  • Billing and shipping address

b) Payment and transaction information

  • Payment method details, transaction details and billing-related information

Payment card details are processed securely by our third-party payment partners. We do not store full card details.

c) Account information

  • Login credentials (passwords are encrypted where applicable), saved preferences and account settings

d) Order information

  • Products viewed, added to cart and purchased
  • Claims, store credit, refunds and cancellations
  • Order history and status

e) Communications

  • Messages, enquiries and feedback sent by email, WhatsApp, forms or social channels
  • Customer support interactions, including photos and unboxing videos you send us when making a claim

f) Device and technical information

  • IP address, browser type and version, device type or ID, operating system, network information and referral URLs

g) Usage and analytics information

  • Pages visited, time spent, clicks, scroll behaviour and browsing patterns

h) Advertising and marketing data

We may collect or receive advertising and campaign data through tools such as Meta Pixel, Meta Conversions API, Meta Marketing API and similar integrations, including ad impressions, clicks, reach, conversion events, audience engagement and attribution data. This helps us measure campaign performance, improve our ads and understand customer acquisition.

2. How We Collect Personal Information

Directly from you, when you browse our website, create an account, place an order, subscribe to updates, contact us (including on WhatsApp), submit a claim or fill out a form.

Automatically, through cookies, pixels, tags, log files, analytics tools, device identifiers and similar technologies.

From service providers, such as payment gateways, shipping and logistics providers, customer support and CRM platforms, marketing and analytics providers, fraud prevention services and website infrastructure providers.

From third-party platforms, where permitted by law or your settings, such as Meta (Facebook and Instagram), advertising partners and other sales channels.

3. How We Use Your Personal Information

We use your personal information to:

  • Provide and improve our Services: process and fulfil orders, manage accounts, arrange shipping and delivery, handle claims, replacements and store credit, personalise your experience and improve our website and products.
  • Process payments and prevent fraud: confirm transactions, detect suspicious activity and protect accounts and orders.
  • Communicate with you: order confirmations, shipping and delivery updates, support replies, account and security notices, and service announcements.
  • Market to you: send promotional emails, SMS or messages about new products, restocks and offers, and show you relevant ads, including remarketing. You can opt out at any time (see Section 11).
  • Run advertising and analytics: measure ad performance, analyse spend, impressions, clicks and conversions, and build remarketing and custom audiences using tools such as Meta Pixel and Meta Conversions API.
  • Comply with legal obligations: meet tax, accounting and regulatory requirements, respond to lawful requests and enforce our policies and rights.

Legal bases (UK and EU customers). Where UK or EU data protection law applies, we rely on: performance of a contract (to fulfil your order), legitimate interests (security, fraud prevention, analytics and service improvement), legal obligation (tax and accounting), and your consent (marketing and non-essential cookies, which you can withdraw at any time).

4. How We Share Personal Information

We share personal information only when necessary and for legitimate business purposes:

  • Service providers: payment processors, shipping and logistics partners, website hosting and technical vendors, analytics and marketing providers, customer service tools and fraud prevention services. They may only use your information to provide services to us.
  • Advertising partners: limited information shared with platforms such as Meta to deliver relevant ads, measure campaigns and create remarketing audiences.
  • With your consent: where you ask or authorise us to connect with other services.
  • Affiliates: within our business group, where applicable, for internal operations and compliance.
  • Legal and safety reasons: to comply with law or legal process, respond to lawful government requests, investigate fraud or abuse, or protect our rights, customers and Services.
  • Business transfers: if AOORA is involved in a merger, acquisition, restructure or sale of assets, personal information may be transferred as part of that transaction, subject to applicable law.

We do not sell your personal information for money. See Section 12 for important information about targeted advertising.

5. Overseas Disclosure and International Transfers

Our business is based in India, and our customers are in Australia, the United States, the United Kingdom and Canada. This means your personal information will be processed and stored in India, and may also be stored or accessed in other countries where our service providers operate, including the United States, Singapore, Ireland and other locations where our e-commerce platform, payment processors, advertising platforms, analytics tools and cloud providers host data.

These countries may have different data protection laws from your own. Where we transfer your information internationally, we take reasonable steps to make sure the recipient handles it in a way that is consistent with applicable privacy laws, for example through contractual protections and by using reputable providers. For UK and EU customers, we use appropriate safeguards where required, such as standard contractual clauses.

6. Cookies and Tracking Technologies

We use cookies, pixels, local storage and similar technologies to keep our website working, remember your preferences, analyse traffic, measure advertising results and deliver marketing and remarketing campaigns. These may include tools from Meta, analytics providers and marketing platforms.

You can control or disable cookies in your browser settings, and where required by law we will ask for your consent before using non-essential cookies. Some parts of our website may not work properly if cookies are disabled.

7. Direct Marketing

We send marketing messages only in accordance with applicable laws, including the Spam Act 2003 (Australia), CAN-SPAM and TCPA (United States), PECR and UK GDPR (United Kingdom) and CASL (Canada). Where consent is required, we obtain it before sending. Every marketing email includes an unsubscribe link, and you can opt out of any marketing channel at any time by contacting us. Service messages about your order may still be sent.

Our website may link to third-party websites, tools or services. We are not responsible for their privacy practices or content, and we encourage you to read their privacy policies.

9. Children's Privacy

Our Services are not intended for children or minors under the legal age of majority in their location, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, please contact us and we will take steps to delete it.

10. Security, Data Breaches and Retention

We use appropriate technical, administrative and organisational safeguards to protect your personal information from unauthorised access, misuse, disclosure, alteration or destruction. However, no system or internet transmission can be guaranteed to be completely secure, so please avoid sending sensitive information through unsecured channels.

If a data breach is likely to result in serious harm to you, we will notify you and the relevant regulator where required by law (for example, under the Notifiable Data Breaches scheme in Australia, or the UK GDPR and Canadian breach reporting rules).

We keep personal information only as long as necessary to provide our Services, complete transactions, handle claims and support, meet legal, tax and accounting requirements, resolve disputes and enforce our policies. Retention periods vary by the type of information and purpose. When information is no longer needed, we delete or de-identify it.

11. Your Rights and Choices

Depending on where you live, you may have the following rights. To exercise any of them, contact us using the details in Section 15. We may need to verify your identity first, and we will respond within the time required by applicable law.

All customers: access the personal information we hold about you; ask us to correct inaccurate or incomplete information; ask us to delete your information (subject to legal obligations); withdraw consent where processing is based on consent; and opt out of marketing at any time.

Australia: under the Privacy Act 1988 and the Australian Privacy Principles, you may request access to and correction of your personal information.

United Kingdom and EU: under UK GDPR and GDPR, you also have the right to data portability, to restrict or object to processing (including processing for direct marketing), and not to be subject to solely automated decisions with legal or similarly significant effects.

Canada: under PIPEDA and applicable provincial laws, you may access your personal information, challenge its accuracy and withdraw consent, subject to legal or contractual restrictions.

United States: depending on your state (for example, California, Virginia, Colorado, Connecticut or Texas), you may have the right to know, access, correct, delete and obtain a copy of your personal information, and to opt out of targeted advertising or the sharing of your information (see Section 12). We will not discriminate against you for exercising your rights.

12. Targeted Advertising and Opt-Out (US and Other Regions)

We use advertising and analytics tools such as Meta Pixel and Conversions API, which may share information like browsing activity, purchase events and device identifiers with advertising partners to show you relevant ads. Under some US state privacy laws, this may be considered "sharing" for cross-context behavioural advertising or "targeted advertising".

You can opt out by contacting us at the email below with the subject line "Opt Out of Targeted Advertising", by turning off personalised ads in your Meta account settings, by adjusting your browser cookie settings, and by using a browser-based opt-out signal such as Global Privacy Control, which we will honour where required by law.

13. Automated Processing

We use some automated tools, such as fraud-prevention systems, payment screening and advertising algorithms. We do not make decisions based solely on automated processing that have legal or similarly significant effects on you without human review. If you have questions, please contact us.

14. Complaints

If you have a concern about how we handle your personal information, please contact us first and we will try to resolve it promptly. If you are not satisfied, you may also complain to your local regulator:

  • Australia: the Office of the Australian Information Commissioner (OAIC), oaic.gov.au
  • United Kingdom: the Information Commissioner's Office (ICO), ico.org.uk
  • Canada: the Office of the Privacy Commissioner of Canada, priv.gc.ca
  • United States: your state Attorney General's office

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, legal obligations, business operations or technology. Updates will be posted on this page with a revised "Last updated" date. Where required by law, we will notify you of material changes.

16. Contact Us

If you have questions about this Privacy Policy, want to exercise your privacy rights or need help with your personal information, contact us:

AOORA Email: info@aoora.co WhatsApp: +91-9251211370

Warehouse and business address: P.NO-6 Mahaveer Colony, Kartarpura Phatak, Near Rajasthan Academy School, Jaipur 302006, Rajasthan, India