Last Updated: October 21, 2025
1. Introduction
ELHORA ("we," "us," or "our") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website
https://www.elhoracare.com and purchase our products.
This policy complies with:
- Quebec's Law 25 (An Act to modernize legislative provisions as regards the protection of personal information)
- Canada's Personal Information Protection and Electronic Documents Act (PIPEDA)
- General Data Protection Regulation (GDPR) for EU visitors
By using our website, you consent to the practices described in this policy.
2. Information We Collect
2.1 Personal Information You Provide
When you make a purchase, create an account, or contact us, we may collect:
-
Contact Information: Name, email address, phone number, shipping address, billing address
-
Payment Information: Credit card details (processed securely through our payment processor)
-
Account Information: Username, password, order history, preferences
-
Communication Data: Messages, reviews, feedback you send us
2.2 Information Collected Automatically
When you visit our website, we automatically collect:
-
Technical Data: IP address, browser type, device information, operating system
-
Usage Data: Pages visited, time spent on pages, click patterns, referral sources
-
Location Data: General geographic location based on IP address
-
Cookies and Tracking Technologies: See Section 5 for details
2.3 Information from Third Parties
We may receive information from:
-
Social Media Platforms: If you interact with us on Facebook, Instagram, or TikTok
-
Marketing Partners: Analytics and advertising platforms
-
Payment Processors: Transaction confirmation data
3. How We Use Your Information
We use your personal information for the following purposes:
3.1 Order Fulfillment and Customer Service
- Process and ship your orders
- Send order confirmations and shipping updates
- Handle returns, exchanges, and refunds
- Respond to your inquiries and provide customer support
3.2 Marketing and Communications
- Send newsletters, promotional offers, and product updates (with your consent)
- Personalize your shopping experience
- Conduct surveys and gather feedback
3.3 Website Improvement and Analytics
- Analyze website traffic and user behavior
- Improve website functionality and user experience
- Test new features and optimize performance
3.4 Legal and Security
- Comply with legal obligations
- Prevent fraud and unauthorized transactions
- Protect our rights and property
- Enforce our terms and conditions
4. Legal Basis for Processing (GDPR)
For EU visitors, we process your personal information based on:
-
Contract Performance: To fulfill your orders and provide services
-
Consent: For marketing communications and non-essential cookies
-
Legitimate Interests: For fraud prevention, analytics, and business operations
-
Legal Obligations: To comply with tax, accounting, and legal requirements
5. Cookies and Tracking Technologies
5.1 What Are Cookies?
Cookies are small text files stored on your device when you visit our website. They help us provide a better user experience and analyze website performance.
5.2 Types of Cookies We Use
5.3 Managing Cookies
You can control cookies through:
-
Cookie Banner: Click "Cookie Settings" on our website to customize your preferences
-
Browser Settings: Most browsers allow you to block or delete cookies
-
Opt-Out Tools: Visit youronlinechoices.com or aboutads.info
Note: Disabling essential cookies may affect website functionality.
5.4 Third-Party Cookies
We use the following third-party services that may set cookies:
-
HubSpot: Marketing automation, analytics, and customer relationship management
-
Google Analytics: Website traffic analysis
-
Facebook Pixel: Ad targeting and conversion tracking
-
Shopify: E-commerce platform and payment processing
6. How We Share Your Information
We do not sell your personal information. We may share your data with:
6.1 Service Providers
-
Shipping Carriers: Purolator (for order delivery)
-
Payment Processors: Shopify Payments (for secure transactions)
-
Email Marketing: Hubspot or similar (for newsletters)
-
Analytics: HubSpot, Google Analytics
6.2 Legal Requirements
We may disclose information to:
- Comply with court orders, subpoenas, or legal processes
- Enforce our terms and conditions
- Protect our rights, safety, or property
6.3 Business Transfers
If ELHORA is acquired or merged, your information may be transferred to the new owner.
7. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy:
-
Order Information: 7 years (for tax and accounting purposes)
-
Account Information: Until you request deletion or close your account
-
Marketing Data: Until you unsubscribe or withdraw consent
-
Analytics Data: 2 years (anonymized after 26 months)
-
Cookie Data: See Section 5.2 for specific durations
8. Your Privacy Rights
Under Quebec's Law 25 and PIPEDA, you have the following rights:
8.1 Access
Request a copy of the personal information we hold about you.
8.2 Correction
Request correction of inaccurate or incomplete information.
8.3 Deletion
Request deletion of your personal information (subject to legal retention requirements).
8.4 Portability
Receive your data in a structured, commonly used format.
8.5 Withdrawal of Consent
Withdraw consent for marketing communications or non-essential data processing at any time.
8.6 Objection
Object to processing based on legitimate interests.
8.7 Restriction
Request restriction of processing in certain circumstances.
8.8 Complaint
File a complaint with:
8.9 How to Exercise Your Rights
To exercise any of these rights, contact us at:
We will respond to your request within 30 days as required by Law 25.
9. Data Security
We implement industry-standard security measures to protect your information:
-
Encryption: SSL/TLS encryption for data transmission
-
Secure Payment Processing: PCI-DSS compliant payment systems
-
Access Controls: Limited employee access to personal data
-
Regular Audits: Periodic security assessments and updates
However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
10. International Data Transfers
Your information may be transferred to and processed in countries outside Canada, including:
-
United States: HubSpot, Google, Facebook servers
-
European Union: Some cloud service providers
We ensure adequate protection through:
- Standard contractual clauses
- Privacy Shield frameworks (where applicable)
- Service provider agreements with strong data protection terms
11. Children's Privacy
Our website is not intended for children under 13. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
12. Third-Party Links
Our website may contain links to third-party websites (e.g., social media platforms). We are not responsible for their privacy practices. Please review their privacy policies before providing any information.
13. Marketing Communications
13.1 Email Marketing
With your consent, we may send:
- Promotional offers and discounts
- New product announcements
- Educational content about Moroccan beauty rituals
- Newsletters and updates
13.2 Unsubscribe
You can opt out at any time by:
- Clicking "Unsubscribe" in any marketing email
- Contacting us at allo@elhoracare.com
- Updating your account preferences
Note: You will still receive transactional emails (order confirmations, shipping updates) even after unsubscribing from marketing.
14. Changes to This Privacy Policy
We may update this policy periodically to reflect changes in our practices or legal requirements. We will:
- Post the updated policy on this page
- Update the "Last Updated" date at the top
- Notify you of significant changes via email or website banner
Your continued use of our website after changes constitutes acceptance of the updated policy.
15. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:
Privacy Officer: Lucile, Founder
Response Time: We will respond to all inquiries within 30 days.
16. Consent
By using our website and providing your personal information, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy.
For marketing communications, we will obtain your explicit consent through:
- Opt-in checkboxes at checkout
- Email subscription forms
- Cookie consent banner
You may withdraw consent at any time by contacting us or using the unsubscribe mechanisms provided.
Thank you for trusting ELHORA with your personal information. We are committed to protecting your privacy while delivering authentic Moroccan beauty products with transparency and care.
