Privacy Policy

We collect information you provide directly: name, email address, shipping address, and payment details when you make a purchase or create an account.

We automatically collect certain technical information when you visit our site, including IP address, browser type, device type, pages visited, and referring URLs. This data is collected through cookies and similar technologies.

We do not collect or store biometric data, health records, or information about your skin condition beyond what you voluntarily share through our observation submission form.

We use your information to: process and fulfil orders, communicate about your purchases, improve our products and website experience, send marketing communications (only with your consent), and comply with legal obligations.

We never sell, rent, or trade your personal information to third parties for their marketing purposes.

We share your information only with service providers who help us operate our business: payment processors, shipping carriers, email service providers, and website analytics tools. These providers are contractually obligated to protect your data.

We may disclose information if required by law, to protect our rights, or in connection with a merger or acquisition.

We use essential cookies to operate our website (shopping cart, authentication) and analytics cookies to understand how visitors use our site. We do not use advertising cookies or cross-site tracking.

You can control cookie settings through your browser preferences. Disabling essential cookies may affect site functionality.

We retain order and account information for as long as your account is active or as needed to provide services. Transaction records are kept for 7 years for tax and legal compliance.

You may request deletion of your account and personal data at any time by emailing hello@oxora.com. We will process deletion requests within 30 days.

Depending on your jurisdiction, you may have the right to: access, correct, or delete your personal data; object to or restrict processing; data portability; and withdraw consent.

To exercise any of these rights, contact us at hello@oxora.com. We will respond within 30 days.

We use industry-standard security measures to protect your information, including TLS encryption for data in transit and encrypted storage for sensitive data at rest. Payment information is processed by PCI-compliant third-party processors and is never stored on our servers.

We may update this policy from time to time. Material changes will be communicated via email or a prominent notice on our website. Your continued use of our services after changes take effect constitutes acceptance of the updated policy.