privacy policy

Orders. Checkout is handled entirely by Stripe, our payment processor. When you place an order, your name, shipping address, and payment details go directly to Stripe — we never see or store your full card number. We keep the order itself (items, shipping address, email) so we can fulfill it and follow up if there's an issue.

Contact, wholesale, and custom-order forms. Whatever you enter — name, email, and your message — is sent to us by email. It isn't stored in a database on our end.

Analytics. We use Google Analytics to understand how people use the site and to improve oria's website, products, and services — pages visited, general location, device type, and the steps of an order, such as products viewed, added to the cart, and purchased. Google Analytics may use first-party cookies or similar technology where permitted. It receives the address of each page you visit, including any campaign or ad details in the link. When you arrive from one of our Google ads, the first page address it receives includes the ad-click code Google adds to the link; our site then removes that code from the page address, so Google Analytics doesn't receive it again as you browse. How it works depends on your location and your consent choices; the cookies section below explains how.

Ad measurement. If you're in the US and arrive from one of our Google ads, we also keep that ad-click code in your browser's storage for 30 days from that visit. If you go to checkout in that time, we keep the code with that checkout on our own systems, to learn which ads lead to orders. After those 30 days a code is no longer used: the copy in your browser is deleted the next time you visit our site, and the copy on our systems by our regular scheduled cleanup. The codes we keep are for oria's own use — our hosting and database providers store them for us — and we don't upload them to Google Ads or any other advertising platform. You can turn this off at any time in "privacy choices" at the bottom of every page.

We only use the service providers necessary to run the site, and each only sees what it needs to:

• Stripe — processes payments and collects your shipping address at checkout.
• Shippo — buys shipping labels; receives the shipping name and address for your order.
• Google Analytics — site usage and order measurement, as described above. Google processes this data under its own privacy and data-protection terms.
• Google Workspace (Gmail) — delivers order confirmations and contact and wholesale form submissions.
• Vercel — hosts the site and stores its files, including our order records; its servers handle each page request, including the page address and your IP address.
• Neon — hosts our database.

We don't sell your information, and we don't hand it to anyone outside of running the site, fulfilling your order, answering your inquiry, or the analytics described above.

Google Analytics sets cookies, and how it behaves depends on where you are and the choices you make. Where analytics consent is requested — in the European Economic Area, the UK, and Switzerland — analytics storage stays off until you click "accept" on the banner or turn analytics on in "privacy choices". Elsewhere, analytics may be on by default, subject to the privacy controls available to you: turning analytics off in "privacy choices" turns analytics storage off from then on, and a cookie already set stays in your browser until you clear it. Google's analytics script loads either way, and it sets no analytics cookies while analytics storage is off. We also keep your cart and your privacy choices in your browser's storage so the site works as expected, and, in the US while ad measurement is on, the ad-click code described above. During checkout, you'll briefly be on Stripe's own site, which sets its own cookies under Stripe's privacy policy, not ours.

Use "privacy choices" at the bottom of every page to change your analytics choice at any time — and, in the US, your ad-measurement choice. If you're in the European Economic Area, the UK, or Switzerland, the banner also asks for your analytics choice when you first visit. Turning ad measurement off deletes the code held in your browser and stops new ones from being kept; to remove a code already kept with an order, email us your order number. To ask about, correct, or remove information we hold about you, email us below.

Browser "Do Not Track" signals have no common standard, so our site doesn't change how it works when it receives one. If your browser sends a Global Privacy Control signal, we treat it as a request not to sell your information or use it for targeted advertising — we don't do either. Google Analytics collects information about your visits to our site over time, as described above; we don't use advertising trackers that follow your activity across other websites.

We don't sell personal information. To send a request not to sell it — for example, as a Nevada resident — email us at the address below.

This site isn't directed at children under 13, and we don't knowingly collect their data.

If this policy changes, we'll update the date at the top of this page.

Questions about this policy or your information: contact@oriabazaar.com.