Privacy Policy

1. INTRODUCTION

Orovira (website: https://orovira.com/) appreciates your business and trust. We are a Lahore (Pakistan) based company providing both fashion products and digital products to enhance your style, beauty, and lifestyle experience.

By using our services, you agree to this Privacy Policy. Please read it carefully before accessing or using our website.

2. Data Collected

Data Storage Location

We are a Pakistan-based company, and our web servers are hosted in the United States of America. Our hosting and development partner, Huzi Developers, ensures that your data is securely stored and GDPR compliant. For more information on their policies, please see: Huzi Developers Terms and Conditions.

Registration Data

When you register on our website, we store your chosen username, email address, and any other personal details you add to your user profile.

You can view, edit, or delete your information at any time (except for your username).
Website administrators can also view and edit this information.

Purchase Data

When you buy fashion or digital products from Orovira:

We collect order details, payment transaction ID (processed securely via third-party payment gateways such as Stripe, PayPal, or local providers), billing/shipping address (for physical products), and your email.
We may also store purchase codes or licenses for digital products to provide support and downloads.

We do not store credit card or banking details. These are processed directly by secure payment providers.

Comments

When visitors leave comments, we collect the data shown in the comments form, as well as the IP address and browser user agent string to help with spam detection.

This data is used only for moderation and customer service purposes, not for marketing.

Analytics

We use Google Analytics for anonymous reporting of website usage. No personally identifiable information is collected.
You may opt out of Google Analytics tracking here: Google Analytics Opt-out.

Cases for Using Personal Data

We may use your personal information for the following purposes:

Verification/identification of the user.
Processing and fulfilling orders.
Providing technical assistance and product support.
Sending important updates about products, promotions, or service changes.
Preventing fraudulent transactions and ensuring account security.
Personalizing the website experience.
Maintaining overall performance and administrative functions.

3. EMBEDDED CONTENT

Pages on this site may include embedded content (e.g., YouTube videos, social media feeds). Embedded content behaves as if you visited the external website directly.

These websites may collect data, use cookies, or track your interaction. Please review their respective privacy policies:

4. COOKIES

This site uses cookies to enhance your browsing experience. Cookies may store preferences, shopping cart details, and anonymous analytics data.

Necessary Cookies for All Visitors

cfduid (Cloudflare) – Identifies trusted clients.
PHPSESSID – Identifies your unique session.

Additional Cookies for Registered Customers

Used by Web to authenticate and customize your experience.

You can disable cookies in your browser, but this may limit site functionality.

database table. This is used to customize your view of admin interface, and possibly also the main site interface.

5. WHO HAS ACCESS TO YOUR DATA

If you are not a registered customer, we do not retain personal data.
If you register or place orders, your data may be accessed by:
- Our system administrators.
- Our support staff (only when necessary to provide customer service).

6. THIRD PARTY ACCESS TO YOUR DATA

We do not sell or rent your personal data.
However, certain trusted third parties may require limited access to provide services, such as:

Payment processors (e.g., PayPal, Stripe).
Shipping providers (for physical products).
Analytics and marketing platforms (Google Analytics, Meta Ads).

7. HOW LONG WE RETAIN YOUR DATA

Comments and support requests are retained indefinitely unless you request deletion.
Registered accounts remain until you request removal.
Order history is retained for tax and accounting purposes (minimum 6 years or as required by law).

8. SECURITY MEASURES

We use SSL/HTTPS throughout our site. This encrypts data between your browser and our servers.
In case of a breach, we will take immediate steps, notify affected users, and reset credentials if necessary.

9. YOUR DATA RIGHTS

General Rights

You may request an export of your personal data.
You may request deletion of your data (except that which we are legally required to retain).
If you request full deletion, we may no longer be able to provide product access or support.

GDPR Rights (EU Customers)

We comply with GDPR regulations, allowing EU residents to:

Access, correct, or delete their data.
Restrict or object to processing.
Request portability of their data.

CCPA Rights (California Residents)

Residents of California have the right to:

Know what personal information is collected.
Request deletion of personal information.
Opt-out of the sale of personal data (we do not sell data).

10. THIRD PARTY WEBSITES

Our website is not intended for children under 13 years of age (or the minimum age in your country). We do not knowingly collect personal information from children. If we discover that we have collected data from a child, we will delete it immediately.