Who to contact
Elora Ethnic is the store name used on this website, based in Al Ain, United Arab Emirates. For privacy questions, email eloraethnic@gmail.com or use our contact page.
Information you provide
- Orders: your name, email, phone number, delivery address, city, emirate, delivery notes, selected products, sizes, colours, quantities and payment method.
- Customer support: messages, order references and any photographs or other evidence you choose to send about an order.
- Account sign-in, where enabled: your email and authentication details, processed by the account service. An account is not required for guest checkout.
Please do not include sensitive personal information in delivery notes or send passwords, full card numbers or security codes by email or WhatsApp. The current checkout is cash on delivery only; online card payments and bank transfers are not enabled.
Why we use information
Order details let us check availability, respond to your request, arrange payment and delivery, and handle cancellations, refunds and customer support. Technical information helps operate and protect the website. Relevant records may also be needed for accounting, legal obligations and resolving disputes.
Processing must have an applicable lawful basis, such as steps needed for an order, fulfilling a contract, a legal obligation or consent where required. Placing an order is not permission to send promotional messages. We do not use checkout details to automatically subscribe you to marketing.
Browser storage and technical information
The store uses local storage on your device to remember your bag (elora-cart) and favourite product IDs (elora-favourites). These remain until you remove them or clear site data. A checkout reference (elora-checkout-token) helps prevent duplicate submissions and is removed after a successful order.
Account features use authentication cookies or storage to maintain your session. Hosting services may process IP addresses, browser information, requested URLs and security or error logs when serving the website. The application does not include advertising pixels.
If you allow optional analytics, we record public page and product views, approximate country and city provided by our host, device category and estimated visible-page time. We also record a source label such as Instagram, Google or direct/unknown, inferred from campaign tags, the referring website or Instagram’s in-app browser. Only the label is saved, not the referring URL or campaign query values. It is kept in your tab for up to 30 minutes of inactivity to connect subsequent page views with that source. A random browser identifier stored on your device expires after 30 days. These reports do not store raw visitor IP addresses, account identities, query strings or checkout details. Reports cover the last 30 days; older analytics records are removed when the next analytics event is received. You can stop future analytics at any time through Analytics preferences at the bottom of this privacy page. Analytics remain off unless you explicitly opt in; we do not display an automatic consent pop-up. Declining does not affect shopping.
For account security, our authentication provider records session identifiers, sign-in and refresh times, browser information and sign-in IP addresses. Your Security & devices screen shows valid sessions for your own account only and lets you sign out other sessions. Browser and IP information may be incomplete or affected by shared networks and VPNs; it does not identify a person with certainty.
You can clear or restrict cookies and site storage in your browser. This may empty your bag and favourites, sign you out or interrupt checkout. Clearing local storage does not delete an order already submitted; contact us for requests about those records.
Who receives information
New-order alerts are sent through a private Telegram bot to authorised store staff. These alerts include the ordered products, sizes, colours, quantities, order total, customer contact details and delivery address so staff can fulfil the order. Telegram processes these messages under its own privacy terms; opening full order details still requires staff sign-in.
Information needed for a purchase may be shared with authorised store staff, hosting and account/order service providers, delivery partners and banks handling a payment or refund. Information may also be disclosed when required by law or necessary to establish or defend a legal claim. We do not sell your personal information.
The site is hosted on Vercel. WhatsApp and Instagram are separate services: opening their links or messaging us there is also subject to their own privacy terms. Service providers may process information outside the UAE; we do not represent that information stays within the UAE.
Retention and security
Information is retained only for as long as needed for its stated purpose, including any applicable record-keeping obligations or unresolved claims, then deleted or anonymised. Website connections use HTTPS, but no online service can promise absolute security.
Your privacy requests
Contact us to request information about processing, access to your personal data, correction, deletion, restriction or stopping of processing, or a portable copy where applicable under UAE law. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. These rights have legal conditions and exceptions, including records that must be retained.
We may need proportionate information to verify that a request is yours. Do not send identity documents unless we explain why they are necessary and provide a suitable way to send them. You may also raise a concern with the competent UAE data-protection authority.
Changes to this notice
We will update this notice when the store’s data practices change and show the revision date above. A revised notice does not itself provide consent for a new use of your information. See also our terms and conditions.