Last updated: August 2026
Elora (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website or make a purchase, in accordance with the General Data Protection Regulation (GDPR) — EU Regulation 2016/679.
1. Who We Are
Elora is an online luxury retailer of handbags and jewellery, based in Spain. For any privacy-related enquiries, you can contact us at:
- Phone: +34 603 739 694
- Contact page: Visit our Contact page
2. What Data We Collect
We may collect and process the following personal data:
- Identity data: name, surname
- Contact data: email address, phone number, delivery and billing address
- Transaction data: details of purchases and payments
- Technical data: IP address, browser type, device information, cookies
- Usage data: how you interact with our website
- Marketing data: your preferences for receiving marketing communications
3. How We Collect Your Data
We collect data when you:
- Place an order or create an account
- Subscribe to our newsletter
- Contact us via phone, email, or contact form
- Browse our website (via cookies and analytics tools)
4. How We Use Your Data
We use your personal data for the following purposes:
- To process and fulfil your orders
- To communicate with you about your orders and enquiries
- To send marketing communications (only with your consent)
- To improve our website and customer experience
- To comply with legal obligations
5. Legal Basis for Processing
We process your data on the following legal bases under GDPR:
- Contract performance: to fulfil your orders
- Legitimate interests: to improve our services and prevent fraud
- Consent: for marketing communications and non-essential cookies
- Legal obligation: to comply with applicable laws
6. Data Sharing
We do not sell your personal data. We may share your data with trusted third parties only where necessary, including:
- Payment processors (e.g. Shopify Payments, Stripe)
- Shipping and logistics providers
- IT and website service providers
- Legal or regulatory authorities where required by law
All third parties are required to handle your data securely and in accordance with GDPR.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. Order data is typically retained for 7 years in accordance with Spanish and EU tax law.
8. Your Rights Under GDPR
As an EU resident, you have the following rights regarding your personal data:
- Right of access: request a copy of the data we hold about you
- Right to rectification: request correction of inaccurate data
- Right to erasure: request deletion of your data (“right to be forgotten”)
- Right to restriction: request that we limit how we use your data
- Right to data portability: receive your data in a structured, machine-readable format
- Right to object: object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent: withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us at +34 603 739 694 or via our Contact page. We will respond within 30 days.
9. Cookies
We use cookies and similar tracking technologies on our website. For full details, please refer to our Cookie Policy.
10. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website uses SSL encryption for all data transmissions.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.
12. Complaints
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Spanish data protection authority: Agencia Española de Protección de Datos (AEPD) at www.aepd.es.