Privacy Policy - Evora

Privacy Policy

Last updated: 12 August 2026

Welcome to Evora, also referred to as herEVORA (“Evora”, “herEVORA”, “we”, “us”, or “our”).

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, purchase our products, subscribe to our services, use the Evora application, or otherwise interact with us.

We aim to handle your personal information transparently and responsibly. This policy is intended to provide the information generally expected under applicable data-protection laws, including the UK GDPR where applicable. Privacy notices should explain what information is collected, why it is used, who it is shared with, how long it is retained, and what rights individuals have.

1. Who We Are

The website and services are operated by:

Business name: [YOUR LEGAL BUSINESS NAME]
Trading name: Evora / herEVORA
Website: [YOUR WEBSITE URL]
Email: [YOUR PRIVACY/CONTACT EMAIL]
Business address: [YOUR BUSINESS ADDRESS]
Country: [YOUR COUNTRY]

For privacy-related questions or requests, contact us at [YOUR PRIVACY EMAIL].

2. Information We Collect

Depending on how you interact with Evora, we may collect the following information:

Information you provide to us

When you create an account, place an order, subscribe to Evora+, contact us, or complete a form, we may collect:

  • Full name

  • Email address

  • Billing and delivery address

  • Telephone number

  • Account login information

  • Order and purchase information

  • Subscription information

  • Customer-service communications

  • Information you voluntarily provide through the Evora application

Payment information

Payments are processed through Shopify and/or the payment providers available at checkout.

We generally do not store complete payment-card details on our own systems. Payment information may be processed directly by Shopify or the relevant payment provider in accordance with their own privacy policies and security practices. Shopify provides merchants with privacy and customer-data tools as part of its platform.

Automatically collected information

When you visit our website or use our services, certain information may be collected automatically, including:

  • IP address

  • Browser type and version

  • Device type

  • Operating system

  • Pages viewed

  • Referring website or source

  • Approximate location derived from IP address

  • Date and time of visits

  • Website interactions and usage information

  • Cookies and similar technologies

We use this information for purposes such as security, analytics, website functionality, troubleshooting, and improving our services.

3. Information Collected Through the Evora App

If you use the Evora application, we may collect information necessary to provide the features and functionality of the app.

Depending on the features you use, this may include:

  • Account information

  • App preferences

  • Wellness-related information that you voluntarily enter

  • Cycle or period-related information that you choose to record

  • Goals, preferences, reminders, or other information you submit

  • Device and application usage information

  • Technical and diagnostic information

We only use information submitted through the app for the purposes described in this Privacy Policy and to provide and improve the services you request.

Important: Please do not submit information through the app that you do not want us to process.

Where information you provide may constitute sensitive or special-category personal data under applicable law, we will process it only where permitted by applicable law and with an appropriate legal basis.

4. How We Use Your Information

We may use personal information to:

  • Process and fulfil orders

  • Deliver products to you

  • Manage subscriptions and recurring payments

  • Create and manage customer accounts

  • Provide access to the Evora application

  • Provide customer support

  • Respond to enquiries

  • Communicate with you about orders, subscriptions, accounts, and services

  • Send service-related notifications

  • Improve our website, products, application, and services

  • Personalise your experience

  • Detect, investigate, and prevent fraud, abuse, and security incidents

  • Maintain the security and integrity of our systems

  • Meet legal, tax, accounting, and regulatory obligations

  • Establish, exercise, or defend legal claims

  • Send marketing communications where permitted by law and, where required, with your consent

We do not use your information for purposes that are incompatible with the purposes described in this Privacy Policy without providing appropriate notice or obtaining consent where required.

5. Legal Bases for Processing

Where UK GDPR or similar data-protection laws apply, we may rely on one or more of the following legal bases:

Contract: We process information where it is necessary to provide products, subscriptions, accounts, or services you have requested.

Legal obligation: We process information where necessary to comply with applicable laws, regulations, tax requirements, accounting obligations, or lawful requests.

Legitimate interests: We may process information where reasonably necessary for purposes such as operating and improving our business, securing our services, preventing fraud, maintaining our systems, and communicating with customers, provided those interests are not overridden by your rights.

Consent: We may rely on your consent where required, including for certain marketing communications, cookies, or other optional processing.

Where we rely on consent, you may withdraw that consent at any time. Withdrawal does not affect processing carried out before the withdrawal.

6. Marketing Communications

We may send promotional emails or other marketing communications where permitted by law.

You can unsubscribe from promotional emails at any time by using the unsubscribe link included in the communication or by contacting us.

You may continue to receive essential service communications, such as order confirmations, subscription notices, security alerts, or account-related messages even after opting out of marketing.

7. Cookies and Similar Technologies

Our website may use cookies, pixels, local storage, and similar technologies.

These technologies may be used to:

  • Keep the website functioning

  • Remember preferences

  • Maintain shopping-cart functionality

  • Understand how visitors use our website

  • Measure website performance

  • Improve our services

  • Support marketing and advertising where applicable

Some cookies may be strictly necessary for the operation of the website, while others may be optional.

Where applicable law requires consent for non-essential cookies, we will provide appropriate controls through our cookie or consent mechanism.

You can also manage cookies through your browser settings.

8. Shopify and Service Providers

Our online store is powered by Shopify. Shopify and other service providers may process personal information on our behalf to provide functions such as ecommerce, payments, hosting, security, analytics, customer support, subscription management, and communications.

Depending on the services we use, information may be shared with providers such as:

  • Shopify

  • Payment processors

  • Shipping and fulfilment providers

  • Subscription-management providers

  • Email and communications providers

  • Analytics providers

  • Customer-support providers

  • Fraud-prevention and security providers

  • Technology and hosting providers

We expect service providers that process personal information on our behalf to handle that information in accordance with applicable data-protection requirements and appropriate contractual safeguards.

9. Sharing of Personal Information

We do not sell your personal information as a standalone customer database.

We may share information where reasonably necessary with:

  • Service providers working on our behalf

  • Payment processors

  • Delivery and fulfilment partners

  • Technology and hosting providers

  • Professional advisers, such as legal, accounting, or financial advisers

  • Law-enforcement authorities, regulators, courts, or other government bodies where legally required

  • Successors or potential buyers in connection with a merger, acquisition, restructuring, financing, or sale of all or part of our business

We may also disclose information where necessary to protect our legal rights, customers, users, property, or the security of our services.

10. International Transfers

Some of our service providers may process personal information outside the UK or the country in which you live.

Where applicable law requires safeguards for international transfers, we will use appropriate legal mechanisms and safeguards for those transfers.

These may include adequacy decisions, contractual safeguards, or other mechanisms permitted by applicable data-protection law.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including to provide our services, maintain business and transaction records, resolve disputes, prevent fraud, enforce agreements, and comply with legal, tax, or accounting obligations.

Retention periods may vary depending on the type of information and the reason it was collected.

When personal information is no longer required, we will take reasonable steps to delete it, anonymise it, or securely dispose of it, subject to applicable legal requirements.

12. Data Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.

However, no website, application, storage system, or transmission over the internet can be guaranteed to be completely secure.

You are responsible for keeping your account credentials confidential and should notify us if you believe your account has been compromised.

13. Your Privacy Rights

Depending on where you live and the applicable law, you may have rights including:

  • The right to access your personal information

  • The right to correct inaccurate or incomplete information

  • The right to request deletion of your information

  • The right to restrict certain processing

  • The right to object to certain processing

  • The right to data portability in applicable circumstances

  • The right to withdraw consent where processing is based on consent

  • The right to opt out of certain marketing activities

  • Rights relating to automated decision-making or profiling where applicable

These rights are subject to applicable legal conditions and exceptions.

To exercise a privacy right, contact us at:

[YOUR PRIVACY EMAIL]

We may need to verify your identity before completing certain requests in order to protect your information.

14. Children's Privacy

Our services are not intended to be used by children where doing so would be prohibited by applicable law.

We do not knowingly collect personal information from children in circumstances where parental consent or another legal basis is required and has not been obtained.

If you believe a child has provided personal information to us inappropriately, please contact us so that we can review and take appropriate action.

15. Third-Party Links

Our website or application may contain links to third-party websites, applications, payment services, social-media platforms, or other services.

We are not responsible for the privacy practices, content, security, or policies of third parties.

We recommend reviewing the privacy policy of each third-party service before providing personal information.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or business practices.

When we make material changes, we may update the “Last updated” date and, where appropriate, provide additional notice.

We encourage you to review this page periodically.

17. Contact Us

If you have questions about this Privacy Policy, want to exercise your privacy rights, or have concerns about how your information is handled, contact us:

Evora / herEVORA
Email: [YOUR PRIVACY EMAIL]
Address: [YOUR BUSINESS ADDRESS]
Website: [YOUR WEBSITE URL]

18. Complaints

We encourage you to contact us first if you have concerns about how we handle your personal information so that we can try to resolve the issue.

Where applicable, you may also have the right to lodge a complaint with the relevant data-protection supervisory authority in your country.

For individuals in the United Kingdom, this may include the Information Commissioner's Office (ICO).

Note: This Privacy Policy is a general template and should be reviewed and customised to match the exact Evora business structure, app functionality, analytics/advertising tools, subscription provider, payment processors, fulfilment arrangements, and countries in which you operate. Shopify also provides privacy-policy tools within Shopify admin that can be used alongside your own customised policy.