Privacy policy

AMORA PRIVACY POLICY

Effective Date: August 31, 2026

This Privacy Policy explains how Amora ("Amora," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit or make a purchase from https://amoranow.com (the "Website"), contact us, or otherwise use services that link to this Policy (collectively, the "Services").

Please read this Policy carefully. By using the Services, you acknowledge that you have received this Policy. Where applicable law requires consent—for example, for certain marketing communications or non-essential cookies—we will request that consent separately. You may withdraw consent as described below.

1. Scope and Controller

Amora is the controller or business responsible for the personal information described in this Policy, except where another party identifies itself as an independent controller.

This Policy applies to information collected through the Website and related customer-service, order, marketing, and support activities. It does not govern an independent third party's website, marketplace, application, or service, even if linked from the Website.

1.1 Contact

For privacy questions or requests:

1.2 Changes to This Policy

We may update this Policy to reflect changes in our Services, technology, vendors, legal obligations, or data practices. The revised Policy will be posted on the Website with a new effective date. Where required by law, we will provide additional notice or obtain consent before a material change takes effect.

Your continued use of the Services after an update does not constitute consent where applicable law requires a separate affirmative choice.

2. Definitions

"Personal Information" or "Personal Data" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual, household, or device. The precise definition depends on applicable law.

Personal Information generally does not include information that is lawfully public, aggregated, or deidentified so that it cannot reasonably be linked to an individual. We will not attempt to reidentify deidentified information except as permitted to test our deidentification processes or as otherwise allowed by law.

"Processing" means any operation performed on Personal Information, such as collecting, recording, organizing, storing, using, analyzing, disclosing, transferring, restricting, deleting, or destroying it.

3. Personal Information We Collect

The information we collect depends on how you interact with the Services, the features you use, and the choices you make.

3.1 Information You Provide

We may collect:

  • Identity and contact information: name, email address, telephone number, billing address, shipping address, and account identifier;
  • Account information: login credentials, account preferences, saved addresses, communication preferences, and account history;
  • Order and transaction information: products viewed or purchased, cart activity, order details, subscriptions, discounts, returns, refunds, and transaction status;
  • Payment-related information: billing details, payment method type, and tokenized or limited payment information. Full card details are generally collected and processed by Shopify, Shopify Payments, or another payment provider rather than stored directly by Amora;
  • Communications: messages, support requests, return requests, survey responses, reviews, testimonials, contest entries, and other correspondence;
  • User content: photographs, videos, comments, reviews, or other material you choose to submit;
  • Marketing preferences: email, SMS, cookie, advertising, and communication choices; and
  • Other information: information you voluntarily provide in a form, survey, promotion, or communication.

Please do not submit sensitive information that we have not requested.

3.2 Information Collected Automatically

When you use the Website, we and authorized technology providers may automatically collect:

  • Device and browser information: IP address, browser type, operating system, device type, language, screen or display information, and device or cookie identifiers;
  • Usage information: pages viewed, links selected, referring URL, timestamps, session duration, navigation path, cart interactions, and checkout events;
  • Approximate location: general location inferred from IP address, such as country, region, or city;
  • Network information: internet service provider and connection information;
  • Storefront and transaction events: interactions needed to operate, secure, analyze, and improve the Website; and
  • Cookie and preference information: consent status and identifiers associated with cookies, pixels, tags, local storage, or similar technologies.

We do not collect precise device location unless a feature clearly requests permission and you choose to grant it.

3.3 Information from Other Sources

We may receive Personal Information from:

  • Shopify and Shopify-related services;
  • Payment processors and fraud-prevention providers;
  • Shipping, fulfillment, and delivery providers;
  • Customer-service, returns, subscription, and communication platforms;
  • Marketing and advertising platforms, when enabled and permitted by your choices;
  • Analytics providers;
  • Social networks when you interact with Amora or use a social feature;
  • Referral partners or another person who sends a gift to you; and
  • Public sources or authorities where permitted by law.

We may combine information from these sources with information collected directly or automatically, but only for the purposes and legal bases described in this Policy.

3.4 Sensitive Personal Information

Amora does not intentionally request government identification numbers, account passwords for third-party services, precise geolocation, biometric identifiers, health records, or other highly sensitive information through ordinary storefront activities.

We may process limited sensitive information when necessary for payment security, fraud prevention, legal compliance, accessibility, or another purpose permitted by law. We do not use sensitive Personal Information to infer characteristics about you except where clearly disclosed and legally permitted.

4. Cookies and Similar Technologies

We and our authorized providers use cookies, pixels, tags, local storage, and similar technologies. The exact technologies present can change as the Website and its installed Shopify applications change.

4.1 Categories

  • Strictly necessary: required for checkout, authentication, cart functionality, security, fraud prevention, load balancing, and core Website operations;
  • Functional or preference: remember selections such as language, region, display, and customer preferences;
  • Analytics or performance: help us understand Website traffic, usage, errors, and performance;
  • Advertising or marketing: measure campaigns, limit ad repetition, build audiences, attribute conversions, and personalize advertising where legally permitted; and
  • Social-media technologies: support embedded content or measure interactions with social campaigns when enabled.

4.2 Consent and Controls

Where required by law, non-essential cookies and similar technologies will not be activated until you make the relevant choice through our cookie banner or privacy settings.

You may manage available choices through:

  • The Website's cookie banner or privacy-preferences link;
  • A "Do Not Sell or Share My Personal Information" or similar opt-out page, if displayed;
  • Browser or device settings;
  • A supported Global Privacy Control ("GPC") signal; and
  • privacy@amoranow.com.

Blocking cookies may affect some Website functions. Strictly necessary technologies cannot be disabled through our preference manager because the Website may not work without them.

4.3 Third-Party Analytics and Advertising

Depending on the tools enabled for the Website, analytics or advertising providers may process identifiers, device data, browsing events, and purchase or conversion events. These providers may include Shopify services and integrations with advertising or analytics platforms.

We will use consent, opt-out, and disclosure tools where required. The cookie banner or privacy-preferences interface should provide the most current view of non-essential tracking categories enabled on the Website.

5. How We Use Personal Information

We may use Personal Information for the following purposes.

5.1 Providing the Services

  • Operate and display the Website;
  • Create and manage accounts;
  • Process payments, orders, subscriptions, shipments, returns, and refunds;
  • Provide order confirmations, shipping updates, and service messages;
  • Save customer preferences and cart information;
  • Respond to questions and provide customer support; and
  • Maintain records of transactions and customer requests.

5.2 Security and Fraud Prevention

  • Authenticate users and secure accounts;
  • Detect, investigate, and prevent fraud, abuse, unauthorized activity, and security incidents;
  • Protect the integrity and availability of our systems;
  • Enforce our Terms of Service and other policies; and
  • Maintain evidence needed to investigate disputes or chargebacks.

5.3 Analytics and Improvement

  • Understand Website usage and performance;
  • Diagnose errors and technical problems;
  • Measure product, page, and feature effectiveness;
  • Conduct testing and improve the Website, products, and customer experience;
  • Prepare aggregated business reports and forecasts; and
  • Develop new features or services.

5.4 Marketing and Advertising

Subject to applicable law and your choices, we may:

  • Send promotional email or SMS messages;
  • Provide personalized content or offers;
  • Send cart or browse reminders;
  • Measure advertising effectiveness and conversions;
  • Create or use advertising audiences;
  • Display advertising on third-party platforms; and
  • Conduct surveys, promotions, or market research.

You may opt out of marketing as described in Section 10. Transactional messages about an order, account, security issue, or policy change are not marketing.

5.5 Legal and Business Purposes

  • Comply with tax, accounting, consumer-protection, privacy, sanctions, and other legal obligations;
  • Respond to valid legal process and lawful government requests;
  • Establish, exercise, or defend legal claims;
  • Protect the rights, safety, and property of Amora, customers, and others;
  • Conduct audits and maintain business records;
  • Manage vendors and professional advisors; and
  • Evaluate or complete a merger, financing, acquisition, sale, restructuring, or similar transaction.

5.6 Other Purposes

We may process information for another purpose disclosed when it is collected, with your consent, or as otherwise permitted by law. We will not use Personal Information for a materially incompatible new purpose without taking the steps required by applicable law.

6. Legal Bases for Processing

Where the EEA, UK, Swiss, or similar law requires a legal basis, we rely on one or more of the following:

  • Contract: processing needed to take steps at your request, complete a purchase, deliver an order, administer an account, or otherwise perform our contract with you;
  • Legitimate interests: processing needed to operate, secure, analyze, and improve our business; provide customer service; prevent fraud; and conduct proportionate marketing, unless your rights override those interests;
  • Consent: processing for which you make a freely given, specific, informed, and unambiguous choice, such as certain non-essential cookies or electronic marketing;
  • Legal obligation: processing needed to comply with law, tax, accounting, regulatory, or valid legal-process requirements; and
  • Vital interests: processing needed to protect a person's life or physical safety in an emergency.

When we rely on consent, you may withdraw it at any time without affecting processing that occurred before withdrawal. When we rely on legitimate interests, you may have the right to object.

7. How We Disclose Personal Information

We may disclose Personal Information to the following categories of recipients for the purposes described in this Policy.

7.1 Shopify

The Website is hosted on Shopify. Shopify processes Personal Information to provide storefront, checkout, payment, security, analytics, and related commerce services. Depending on the merchant settings and features enabled, Shopify may also process information for enhanced services or other purposes described in Shopify's own notices.

Information about Shopify's privacy practices and controls is available at https://privacy.shopify.com/.

7.2 Service Providers

We may disclose information to providers that support:

  • Payment processing and billing;
  • Website hosting, cloud storage, and technical infrastructure;
  • Order management, fulfillment, shipping, and delivery;
  • Returns and customer support;
  • Email, SMS, and transactional communications;
  • Fraud prevention, security, and identity verification;
  • Analytics, testing, and Website performance;
  • Subscription or loyalty services, if offered; and
  • Legal, accounting, insurance, audit, and consulting services.

These providers receive information needed to perform their services and are subject to contractual or legal obligations appropriate to their role.

7.3 Advertising and Marketing Partners

When permitted by law and your choices, we may disclose identifiers, contact information, device data, browsing activity, and purchase or conversion events to advertising, social-media, analytics, or marketing platforms.

Amora does not sell Personal Information for money. However, some U.S. privacy laws may define certain advertising disclosures as a "sale," "sharing," or use for "targeted advertising." Where those definitions apply, you may opt out as described in Sections 4 and 10.

7.4 Affiliates and Business Transactions

We may disclose information to a parent, subsidiary, affiliate, successor, buyer, investor, lender, or advisor in connection with a proposed or completed merger, financing, acquisition, restructuring, bankruptcy, or sale of all or part of the business. A recipient will be required to handle the information in accordance with applicable law.

7.5 Legal, Safety, and Enforcement Disclosures

We may disclose information when we reasonably believe disclosure is necessary to:

  • Comply with applicable law, legal process, or a lawful government request;
  • Detect, investigate, or prevent fraud, abuse, or security incidents;
  • Protect the rights, property, or safety of Amora, customers, or others;
  • Enforce agreements and policies; or
  • Establish, exercise, or defend legal claims.

7.6 At Your Direction or With Consent

We may disclose information when you ask us to, authorize an integration, use a third-party service, enter a jointly administered promotion, or otherwise provide consent.

7.7 Public Content

A review, testimonial, comment, or other content you intentionally post publicly may be visible to others. Do not include information in public content that you do not want publicly available.

7.8 Aggregated or Deidentified Information

We may use and disclose aggregated or deidentified information that cannot reasonably identify you. We will maintain deidentified information in deidentified form and will not attempt to reidentify it except as permitted by law.

8. International Data Transfers

Amora, Shopify, and other providers may process Personal Information in countries other than the country where you live. Those countries may have different data-protection laws.

Where required, we use recognized safeguards such as:

  • Adequacy decisions;
  • Standard Contractual Clauses or an approved UK addendum;
  • Contractual, organizational, and technical safeguards;
  • A legally recognized certification or transfer framework; or
  • Another transfer mechanism permitted by law.

A transfer may also occur where necessary to perform a contract with you, respond to your request, protect legal claims, or with valid consent where permitted.

You may contact privacy@amoranow.com for information about safeguards relevant to your Personal Information.

9. Data Retention

We retain Personal Information only for as long as reasonably necessary for the purposes described in this Policy, including to:

  • Fulfill orders and provide the Services;
  • Maintain accounts and customer-service records;
  • Meet tax, accounting, consumer-protection, product, and legal obligations;
  • Prevent fraud and protect security;
  • Resolve disputes and enforce agreements; and
  • Establish, exercise, or defend legal claims.

Retention depends on the type of information, sensitivity, purpose, legal requirements, risk of harm, and whether the purpose can be achieved through aggregation or deidentification.

When information is no longer needed, we will delete, anonymize, or securely dispose of it, subject to reasonable backup cycles and legal holds. Backup copies may remain isolated until overwritten under our ordinary backup schedule.

10. Your Privacy Rights and Choices

Depending on where you live and subject to legal exceptions, you may have the right to:

  • Confirm whether we process your Personal Information;
  • Access or obtain a copy of it;
  • Correct inaccurate information;
  • Delete information;
  • Receive certain information in a portable format;
  • Restrict or object to processing;
  • Withdraw consent;
  • Opt out of sale, sharing, or targeted advertising;
  • Limit certain uses of sensitive Personal Information;
  • Opt out of certain profiling or automated decisions;
  • Appeal a denied request; and
  • Lodge a complaint with a privacy regulator.

These rights are not absolute. We may retain or continue processing information when permitted or required for reasons such as completing a transaction, maintaining security, complying with law, protecting free expression, or handling legal claims.

10.1 Exercising a Request

Submit a request through:

  • Email: privacy@amoranow.com; or
  • A privacy-request, cookie-settings, or data-sharing opt-out link made available on the Website.

Describe the right you wish to exercise and provide enough information to locate the relevant records. We may verify your identity using information reasonably related to the request. We will not ask for more information than needed.

An authorized agent may submit a request where permitted. We may request proof of authorization and may verify the customer's identity directly.

We will respond within the period required by applicable law. If we deny a request, we will explain the reason when required and provide appeal instructions where applicable.

10.2 Sale, Sharing, and Targeted-Advertising Opt-Out

Where applicable, you may opt out through the Website's "Do Not Sell or Share My Personal Information," "Privacy Choices," or similar link; through a supported GPC signal; or by emailing privacy@amoranow.com.

A browser-based opt-out may apply only to the browser and device from which it is sent unless the request can be associated with your account. If you clear cookies or use another device, you may need to renew browser-based preferences.

10.3 Marketing Choices

  • Use the unsubscribe link in a marketing email;
  • Reply STOP to an SMS marketing message;
  • Adjust account or Website preferences; or
  • Contact privacy@amoranow.com.

Opting out of marketing does not stop transactional or service messages.

10.4 Non-Discrimination

We will not unlawfully discriminate against you for exercising a privacy right. A lawful loyalty, rewards, discount, or financial-incentive program may involve different benefits if the program is reasonably related to the value of the information and provides the notices and choices required by law.

11. U.S. State Privacy Notice

This section applies where a U.S. state privacy law covers Amora's processing and grants the relevant right.

11.1 Categories Collected and Disclosed

During the preceding 12 months, Amora may have collected and disclosed the following categories for the business and commercial purposes described in Sections 5 and 7:

  • Identifiers and contact information;
  • Customer-record and account information;
  • Commercial information, including purchase and cart activity;
  • Internet or electronic-network activity;
  • Approximate geolocation;
  • Audio, visual, or user-submitted content;
  • Preference and marketing information; and
  • Inferences drawn from shopping or Website activity, such as likely product interests.

Sources are described in Section 3. Recipient categories are described in Section 7.

11.2 Sale, Sharing, and Targeted Advertising

Amora does not sell Personal Information for money. If advertising or audience tools are enabled, related disclosures may be considered "sale," "sharing," or targeted advertising under some state laws. You may opt out through the methods in Section 10.2.

We do not knowingly sell or share Personal Information of individuals under 16.

11.3 Sensitive Personal Information

Amora uses sensitive Personal Information, if any, only for permitted operational, security, legal, or consented purposes. We do not use or disclose it to infer characteristics except where separately disclosed and legally permitted.

11.4 Appeals

If we deny a request and your state provides an appeal right, reply to the denial or email privacy@amoranow.com with the subject Privacy Appeal. We will review and respond within the legally required period.

11.5 California "Shine the Light"

California residents may request information, where applicable, concerning disclosure of certain personal information to third parties for their own direct-marketing purposes. Submit the request to privacy@amoranow.com with the subject California Shine the Light Request.

12. EEA, UK, and Swiss Privacy Rights

If EEA, UK, or Swiss data-protection law applies, Amora acts as controller for the activities described in this Policy. Legal bases are described in Section 6.

You may have rights to access, correct, erase, restrict, port, or object to processing, and to withdraw consent. You have an absolute right to object to processing for direct marketing where the law provides that right.

We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects without providing the notice, safeguards, and rights required by law. Automated signals may assist with fraud screening, but material actions may be subject to review where required.

You may lodge a complaint with the data-protection authority where you live, work, or believe a violation occurred. UK residents may contact the Information Commissioner's Office. Swiss residents may contact the Federal Data Protection and Information Commissioner.

Amora has not appointed a Data Protection Officer unless the Website or a later notice expressly identifies one. Privacy inquiries should be sent to privacy@amoranow.com.

13. Other Regional Notices

13.1 Canada

Canadian residents may request access to and correction of Personal Information and may withdraw consent subject to legal or contractual restrictions. Residents may complain to the Office of the Privacy Commissioner of Canada or the applicable provincial regulator. Quebec residents may have additional rights under Quebec law.

Personal Information may be processed outside Canada and may be accessible to foreign authorities under local law.

13.2 Australia

Australian residents may request access to or correction of Personal Information and may submit privacy complaints to Amora. If a complaint remains unresolved, you may be able to contact the Office of the Australian Information Commissioner.

13.3 New Zealand

New Zealand residents may request access to or correction of Personal Information and may complain to the Office of the Privacy Commissioner. We will address notifiable privacy breaches as required by the New Zealand Privacy Act 2020.

14. Children's Privacy

The Services are intended for adults and are not directed to children under 13 or the higher minimum age required by local law. Individuals under the age of majority should not make purchases without involvement of a parent or legal guardian.

We do not knowingly collect Personal Information from children in a manner that requires parental consent without obtaining that consent. If you believe a child has submitted Personal Information improperly, contact privacy@amoranow.com. We will investigate and delete the information where required.

15. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect Personal Information. Measures may include access controls, encryption in transit, vendor management, authentication, monitoring, backups, and incident-response procedures appropriate to the nature of the information.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for protecting account credentials and should notify support@amoranow.com promptly if you suspect unauthorized account activity.

If a security incident creates a legal notification obligation, we will notify affected individuals and authorities as required.

16. Third-Party Services and Links

The Website may link to or integrate with services operated by third parties. Their privacy practices are governed by their own notices, not this Policy, when they act independently. Review the privacy notice of a third party before providing information or using its service.

We are not responsible for the content or privacy practices of an independent third-party service merely because the Website links to it.

17. Contact and Complaints

For questions, complaints, or requests concerning this Policy or Amora's privacy practices:

Amora Privacy Team
Email: privacy@amoranow.com
Customer Service: support@amoranow.com
Website: https://amoranow.com

Please include enough detail for us to understand the issue. We will investigate and respond within a reasonable period and within any timeframe required by applicable law.

If you are dissatisfied with our response, you may have the right to contact your local privacy, data-protection, or consumer-protection authority.

ACKNOWLEDGMENT

BY USING THE SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY. WHERE CONSENT IS REQUIRED BY LAW, AMORA WILL REQUEST IT THROUGH AN APPROPRIATE AFFIRMATIVE CHOICE.

END OF PRIVACY POLICY