ORA
Privacy Policy
Last updated: October 2026
This policy explains how ORA collects and uses data submitted through this website: orders, waitlist, contact form, quote requests, ORA contact profiles and the merchant loyalty program.
Data collected
Waitlist: email address and, optionally, first name and product of interest. Contact and quotes: name (optional), email, subject, message, and for quotes business type, intended use, support and quantity. Loyalty program: first name, phone, email, date of birth (optional, used only for the birthday reward), points/stamps history and, where applicable, review screenshots sent. Merchant and admin areas: login credentials (passwords are stored encrypted).
Purposes and legal bases
Orders: process, collect payment for and deliver your order, issue the invoice (performance of the contract; accounting records kept 10 years). Waitlist: notify you when pre-orders open (consent, given by signing up). Contact and quotes: answer your request (pre-contractual measures / legitimate interest). Loyalty: manage your card, credit points/stamps/cashback (with the name of the employee who served you, for the merchant’s internal follow-up), referrals, birthday reward if enabled by the merchant, optional email reminders, Bronze/Silver/Gold statuses, one-off campaigns and aggregated statistics for the merchant (age brackets, never the exact age of an individual) (performance of the service). No resale to third parties.
Recipients and processors
Your data is accessible to ORA and, for the loyalty program, to the relevant merchant. It is hosted by Hostinger International Limited (server located in France) and stored in its database (backups in Lithuania); transactional emails are sent via Hostinger (Hostinger Email). Data is hosted in the European Union; ORA does not transfer any data outside the European Union.
Retention periods
Orders: 3 years after the order for customer relations, 10 years for accounting records (invoices). Waitlist: until pre-orders open, then at most 3 years after sign-up. Contact messages and quotes: 3 years after the last exchange. Loyalty: as long as your account is active with the merchant, then deletion 3 years after last activity; deletion possible at any time via the merchant or contact@oraidentity.com.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, and to withdraw your consent at any time. Write to contact@oraidentity.com; no justification is required to unsubscribe. You may also lodge a complaint with the CNIL (www.cnil.fr).
Data controller
Sabri HADDADI, sole trader (ORA Identity), 20 rue Maria Blanchard, 34070 Montpellier, France — contact@oraidentity.com. For loyalty program data, each merchant is the controller of its customers’ data and ORA acts as a processor, under a contract compliant with Article 28 of the GDPR.