Privacy Policy

Effective Date: February 2023 • Last updated: September 25, 2025

Elora Clinic (“Elora Clinic,” “we,” “us,” “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, sell, and “share” personal information when you visit eloraclinic.com, contact us, or purchase our products.

1. Information We Collect

Categories

  • Identifiers: name, email, phone number, billing/shipping address, account details.
  • Commercial data: products purchased, order totals, shipping info, loyalty activity.
  • Payment data: processed by PCI-compliant partners; we do not store full card numbers.
  • Internet / device data: IP address, device & browser type, pages viewed, diagnostics, cookie IDs.
  • Inferences: preferences derived from interactions for personalization and marketing.
  • Sensitive data: we do not intentionally collect sensitive personal information. If collected, you may limit its use (see Your Rights).

Sources

Directly from you (checkout, forms, support), automatically from your device (cookies/pixels), and from service providers/partners (e.g., fraud tools, analytics).

2. How We Use Information

  • Orders & operations: process payments, fulfill/ship, provide support, communicate order updates.
  • Website & product improvement: debugging, analytics, feature development, security/fraud prevention.
  • Marketing: newsletters, loyalty programs, promotions; you can unsubscribe anytime.
  • Advertising: retargeting and cross-context behavioral advertising via cookies/pixels (e.g., Meta, Google) — see Sharing, Sale & “Sharing”.
  • Legal: comply with laws, enforce terms, protect users and our rights.

3. Sharing, Sale & “Sharing” (Cross-Context Ads)

We disclose personal information to service providers (e.g., payment processors, shipping carriers, cloud hosting, email/SMS, analytics) under contracts that limit use to our instructions. Transfers to service providers under such contracts are not “sales.”

We may sell or share (as defined by California law) certain personal information with advertising and analytics partners to deliver and measure personalized ads across different websites/apps (“cross-context behavioral advertising”). You may opt out at any time using the methods below.

Opt-out of Sale/Sharing: Use the site-wide “Do Not Sell or Share My Personal Information” link (footer) or submit a request via email. We also honor browser-based opt-out signals such as Global Privacy Control (GPC).

Categories disclosed/sold/shared

  • Identifiers and internet/device data for ads/analytics (e.g., cookie IDs, IP, page activity).
  • Commercial data (e.g., purchase events) for measurement/attribution (hashed or pseudonymous where possible).

Minors

We do not knowingly sell or share personal information of consumers under 16. For ages 13–15, sale/sharing requires opt-in; for under 13, parental consent is required.

4. Cookies, Pixels & Tracking

We use first- and third-party cookies and similar technologies to keep carts and sessions, understand site usage, prevent fraud, and show more relevant ads.

  • Strictly necessary (cart/session, security)
  • Analytics (e.g., Google Analytics)
  • Advertising (e.g., Meta/Instagram, Google Ads) for cross-context ads

You can manage cookies in your browser and ad settings. Opting out of sale/sharing reduces cross-context ads. Some features may not function without certain cookies. (We will honor GPC where applicable.)

5. Data Retention

We retain personal information for as long as needed for the purposes described and to meet legal/accounting obligations. Typical periods include: order/transaction records up to 7 years; marketing contact data until you unsubscribe or opt out; security/fraud logs per risk needs. We review retention periodically and delete or de-identify when no longer needed.

6. Data Security

We use technical and organizational measures (TLS/SSL, access controls, secure hosting, vetted vendors). No method of transmission or storage is 100% secure.

7. Your Rights & Choices (California)

If California privacy law applies to us and to you, you may exercise the following rights:

  • Know/Access the categories and specific pieces of personal information we collected and disclosed.
  • Delete personal information (subject to legal exceptions).
  • Correct inaccurate personal information.
  • Limit the use/disclosure of sensitive personal information (if collected).
  • Opt-out of sale or sharing for cross-context advertising.
  • Non-discrimination for exercising your rights.

How to make a request

  1. Footer link: Click “Do Not Sell or Share My Personal Information.”
  2. Email: customerservice@eloraclinic.com with subject “Privacy Request” (Know/Access, Delete, Correct, Limit Sensitive, Opt-out Sale/Share).

Verification & timelines: We will acknowledge receipt within 10 business days and respond within 45 days (we may extend once by 45 days with notice). We may request information to verify your identity and will maintain records of requests as required.

Authorized agents

You may use an authorized agent to submit a request; we may require proof of authorization and verification of your identity.

8. Children’s Privacy

Our Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us to request deletion.

9. International Users

If you access our Services outside the United States, you understand your information may be transferred to, stored, and processed in the United States and other countries with privacy laws that may differ from those where you live.

10. Updates to this Policy

We may update this Privacy Policy from time to time. Changes will be posted here with a new “Last updated” date. Material changes will be highlighted where reasonable. Continued use of the Services after posting means you accept updates.

11. Cross-Company Use (Elora Clinic & eLOR Production)

Our affiliate eLOR Production may access and use collected information for lawful business purposes, including marketing, collaboration outreach, and joint promotions. Where such use would constitute a “sale” or “sharing” under California law for cross-context advertising, you may opt out using the methods above. Service-provider transfers between the companies will be governed by appropriate contracts.

Contact Us

Email: customerservice@eloraclinic.com

Do Not Sell or Share • Exercise Your Rights

↑ Back to top