Privacy Policy

This Privacy Policy explains how Avoreya collects, uses, shares, stores, and protects your personal information when you visit our website, make a purchase, communicate with us, or otherwise use our services.

Throughout this Privacy Policy, “Avoreya,” “we,” “us,” and “our” refer to the business operating the Avoreya online store. “You” and “your” refer to website visitors, customers, and other individuals whose personal information we process.

By using our website or services, you acknowledge the practices described in this Privacy Policy.

1. Who Is Responsible for Your Information

Avoreya is responsible for the personal information described in this Privacy Policy.

Business name: Avoreya
Legal business name: Avoreya
Registered business address: A-8-8, JLN MP1, Subang Jaya, 47500 MALAYSIA
Contact: Business email

2. Personal Information We Collect

The personal information we collect depends on how you interact with our website and services.

Information You Provide Directly

We may collect information such as:

• Your name.
• Your billing and shipping addresses.
• Your email address.
• Your telephone number.
• Your account username and password, where applicable.
• Your order, product, return, refund, and exchange information.
• Your communication and customer-support history.
• Your product reviews, feedback, photographs, or other submissions.
• Your marketing preferences.
• Other information you voluntarily provide when communicating with us.

Payment Information

When you make a purchase, payment information is collected and processed by Shopify and the payment providers made available during checkout.

Depending on the payment method selected, this may include card details, billing information, transaction identifiers, payment status, and information used to prevent fraud.

Avoreya generally does not directly store complete payment-card details. Payment information is handled by the applicable payment processor according to its own privacy and security practices.

Information Collected Automatically

When you visit or use our website, we and our service providers may automatically collect information such as:

• Your IP address.
• Your device type and device identifiers.
• Your browser type and settings.
• Your operating system.
• Your approximate location.
• The pages and products you view.
• The links and advertisements you interact with.
• Your referring website or traffic source.
• Your shopping-cart and checkout activity.
• The date and time of your visits.
• Cookie identifiers and similar online identifiers.
• Website performance and diagnostic information.

Information From Third Parties

We may receive personal information from third parties that help us operate our business, including:

• Shopify and ecommerce service providers.
• Payment processors and financial institutions.
• Shipping carriers, warehouses, and fulfilment partners.
• Fraud-prevention and identity-verification providers.
• Analytics, advertising, and marketing platforms.
• Customer-support and communication providers.
• Social-media platforms when you interact with our pages or ads.

3. How We Use Personal Information

We may use personal information to:

• Provide and operate our website and online store.
• Process, confirm, fulfil, and deliver orders.
• Process payments and transaction refunds.
• Send order confirmations, tracking updates, and service messages.
• Respond to customer-service requests and enquiries.
• Manage returns, refunds, exchanges, and delivery problems.
• Verify transactions and prevent fraud or abuse.
• Maintain the security and functionality of our website.
• Remember your preferences and shopping-cart activity.
• Personalize products, content, and customer experiences.
• Measure website traffic and store performance.
• Understand how customers use our website and services.
• Improve our products, offers, website, and customer support.
• Send marketing communications where you have consented or where otherwise permitted by applicable law.
• Display and measure relevant advertising.
• Comply with legal, accounting, tax, and regulatory obligations.
• Establish, exercise, or defend legal claims.

4. Legal Grounds for Processing

Where applicable law requires us to identify a legal basis for processing, we may process personal information based on:

• Contract: Processing required to accept, fulfil, and support your order.
• Consent: Processing you have agreed to, such as certain marketing communications or non-essential cookies.
• Legitimate interests: Processing reasonably necessary to operate, secure, analyze, and improve our business, provided those interests are not overridden by your rights.
• Legal obligations: Processing required to comply with tax, accounting, regulatory, court, or law-enforcement requirements.

5. Cookies and Similar Technologies

Our website may use cookies, pixels, tags, local storage, and similar technologies to operate the store, remember preferences, understand website activity, prevent fraud, measure performance, and support marketing.

These technologies may include:

• Essential cookies: Required for website security, checkout, shopping-cart functions, and core store operations.
• Functional cookies: Used to remember preferences and improve website features.
• Analytics cookies: Used to understand website traffic, customer interactions, and store performance.
• Advertising cookies: Used to measure advertising, personalize marketing, and understand whether advertisements lead to visits or purchases.

Depending on your location, you may be shown a cookie banner or privacy preference tool that allows you to accept, reject, or manage certain non-essential technologies.

You may also manage cookies through your browser settings. Blocking certain cookies may affect website functionality, checkout, saved preferences, or other features.

6. Advertising and Analytics

We may work with advertising and analytics providers to understand website activity, measure the effectiveness of advertisements, and show products or promotions that may be relevant to you.

Depending on the services enabled on our store, these providers may collect device, browser, cookie, purchase, and website-interaction information.

Certain privacy laws may classify some advertising-related disclosures as “selling,” “sharing,” or using personal information for targeted advertising.

Where legally required, you may use the privacy preference tools available on our website to opt out of these activities.

7. Email and Marketing Communications

We may send promotional emails, product updates, offers, or other marketing communications when you have subscribed or when applicable law otherwise permits us to do so.

You may unsubscribe from promotional emails at any time by using the unsubscribe link included in the message.

Even after you unsubscribe from marketing, we may continue sending non-promotional communications relating to your orders, payments, deliveries, returns, security, or customer-service requests.

8. How We Share Personal Information

We may disclose personal information to service providers and other parties when reasonably necessary to operate our business.

These parties may include:

• Shopify: Our ecommerce platform and store-service provider.
• Payment providers: To authorize payments, process transactions, issue refunds, and prevent payment fraud.
• Suppliers and fulfilment providers: To prepare, package, and fulfil orders.
• Shipping carriers: To deliver orders and provide tracking information.
• Technology providers: To provide website hosting, security, analytics, communications, support, and technical services.
• Marketing providers: To send communications, measure advertising, and manage marketing campaigns.
• Professional advisers: Such as accountants, auditors, insurers, consultants, and legal advisers.
• Government or legal authorities: Where disclosure is required by law, court order, legal process, or a valid regulatory request.

We may also share information when reasonably necessary to investigate fraud, protect our customers, enforce our policies, defend legal claims, or protect the rights, safety, and security of Avoreya and others.

9. Business Transfers

Personal information may be transferred as part of a merger, acquisition, financing, restructuring, sale of assets, insolvency proceeding, or other business transaction involving Avoreya.

Where required, we will take reasonable steps to ensure that the recipient continues to handle personal information in accordance with applicable law.

10. International Data Transfers

Avoreya, Shopify, suppliers, fulfilment partners, payment providers, and other service providers may operate in countries different from the country where you live.

As a result, your personal information may be processed or stored outside your country or region.

Where required by applicable law, we and our service providers use recognized safeguards for international data transfers, such as approved contractual protections or other lawful transfer mechanisms.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods may depend on:

• The duration of our relationship with you.
• Order fulfilment and customer-service requirements.
• Return, refund, warranty, and chargeback periods.
• Tax, accounting, and legal recordkeeping obligations.
• Fraud prevention and security requirements.
• Potential disputes or legal claims.

When personal information is no longer reasonably required, we may delete, anonymize, or securely dispose of it, subject to applicable law and technical limitations.

12. How We Protect Personal Information

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, misuse, alteration, loss, or disclosure.

However, no website, internet transmission, storage system, or security method can be guaranteed to be completely secure.

You are responsible for maintaining the confidentiality of any account login information and for notifying us if you believe your account or personal information has been compromised.

13. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

• Request access to personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of certain personal information.
• Request restriction of certain processing.
• Object to certain processing activities.
• Withdraw consent where processing is based on consent.
• Request a portable copy of certain information.
• Opt out of certain targeted advertising, selling, or sharing of personal information.
• Appeal certain decisions regarding a privacy request.
• Submit a complaint to an applicable data-protection or privacy authority.

These rights are not absolute and may be subject to legal exceptions, identity verification, and jurisdiction-specific requirements.

14. Exercising Your Privacy Rights

To submit a privacy request, contact us through our Business email.

Please include:

• Your full name.
• The email address associated with your order or account.
• Your order number, where applicable.
• The country or region where you live.
• A clear description of the request.

We may need to verify your identity before completing a request. We will only ask for information reasonably necessary to verify your identity and protect your personal information.

Where legally permitted, an authorized representative may submit a request on your behalf. We may require proof of the representative’s authority and verification of your identity.

We will not discriminate against you for exercising a privacy right provided by applicable law.

15. Your Privacy Choices

Depending on your location and the features enabled on our website, you may be able to manage your privacy preferences through:

• The cookie banner or privacy preference tool on our website.
• The unsubscribe link in marketing emails.
• Your browser’s cookie and tracking settings.
• Device-level privacy or advertising settings.
• A “Your Privacy Choices” or similar link displayed on our website, where available.
• A request submitted through our Business email.

16. Do Not Track and Browser Signals

Some browsers and devices allow you to send privacy signals, such as “Do Not Track” or legally recognized opt-out preference signals.

Our response to these signals may depend on the signal, your location, the Shopify privacy settings enabled on our store, and applicable law.

17. Third-Party Websites and Services

Our website may contain links to websites, platforms, or services operated by third parties.

We do not control and are not responsible for the privacy, security, content, or practices of third-party websites.

We recommend reviewing the privacy policy of any third-party website or service before providing personal information.

18. Children’s Privacy

Our website and services are not intended for children below the minimum legal age required to provide consent in their location.

We do not knowingly collect personal information directly from children without appropriate authorization from a parent or legal guardian.

If you believe that a child has provided personal information to us improperly, contact us through our Business email so that we can review the matter and take appropriate action.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, services, technology, legal obligations, or privacy practices.

The revised Privacy Policy will be published on this page with an updated “Last updated” date.

Where legally required, we may provide additional notice of material changes.

20. Contact Us

For questions about this Privacy Policy, our privacy practices, or your personal information, please contact:

Avoreya Customer Support
Business email

Please include a clear description of your request so that we can assist you efficiently.