Privacy Policy

1. Scope of This Policy

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit https://oriacoraor.com, place an order, contact our customer service team, or otherwise interact with our website and services.

Our website offers furniture products and related online shopping and delivery services to customers in the United States. This policy applies to information processed in connection with those activities, subject to applicable law. Certain additional rights and obligations may apply depending on your state or country of residence and the nature of our data processing activities.

This policy should be read together with any notices presented when you make a purchase, use a particular website feature, or provide information for a specific purpose. If a separate notice applies to a particular activity, that notice will explain the relevant processing details.

2. Personal Information We Collect

The personal information we collect depends on how you interact with our website and which features are enabled. Depending on the circumstances, the information may include the following categories.

Identity and Contact Information. This may include your name, email address, telephone number, billing address, shipping address, and other contact details you provide when placing an order or contacting us.

Account Information. If account registration is available and you choose to create an account, we may process information such as your login identifier, account preferences, and account-related settings.

Order and Transaction Information. When you place an order, we may process details such as the products purchased, order number, order status, delivery information, payment status, and relevant return, refund, or customer service records.

Payment Information. Payments may be processed by a payment provider. Depending on the payment method and provider, we may receive transaction references, payment status, billing details, and limited payment-related information. The information we directly collect or store depends on the payment system actually used. We do not represent that we store complete payment card details unless that practice has been confirmed.

Device, Network, and Usage Information. When you visit the website, certain technical information may be recorded through website infrastructure or technologies that are actually enabled. This may include IP address, browser type, operating system, device information, access times, pages viewed, referring pages, and website activity logs.

Customer Communications. If you contact us by email, telephone, or another available channel, we may process the information you provide, including your inquiry, order details, and communications needed to respond to you.

Cookie and Preference Information. If cookies or similar technologies are used, we may process information about cookie preferences, consent choices, website interactions, and related identifiers, depending on the technologies deployed and your settings.

We do not intend to collect sensitive personal information, precise geolocation data, biometric information, government identification numbers, or children's personal information unless the relevant collection is actually necessary, lawful, and properly disclosed. Any such processing must be reviewed separately before it is implemented.

3. How We Collect Information

We may collect personal information directly from you when you place an order, complete a checkout form, create an account if available, contact customer service, submit a return or refund request, or otherwise voluntarily provide information.

Certain information may be generated automatically when you access the website, such as technical logs and device or network information. Whether additional browsing or interaction data is collected depends on the website's actual configuration and the technologies enabled.

We may also receive information from service providers involved in completing transactions, processing payments, delivering orders, maintaining the website, or providing customer support. The categories received depend on the services actually used and the information necessary for those services.

We will not describe a particular collection method or third-party source as an actual practice unless it is confirmed to be part of our operations.

4. Cookies and Similar Technologies

Cookies and similar technologies may be used to support website functionality, remember preferences, maintain shopping sessions, improve performance, analyze usage, or support advertising, where those functions are actually enabled.

Depending on the technologies deployed, cookies and similar technologies may fall into the following categories.

Strictly Necessary Technologies. These technologies may support essential website functions, such as maintaining a shopping cart, processing checkout steps, protecting the website, or remembering a privacy choice. Where permitted by law, strictly necessary technologies may operate without consent when they are genuinely required for the requested service.

Functional Technologies. These technologies may remember selected preferences or support additional website features. Their use and consent requirements depend on their purpose and applicable law.

Analytics and Performance Technologies. If analytics tools are enabled, they may help us understand website traffic, page performance, and how visitors interact with the website.

Advertising and Cross-Site Tracking Technologies. If advertising pixels or similar technologies are enabled, they may be used to measure advertising effectiveness, support ad delivery, or track activity across services. These activities may be subject to additional disclosure, consent, or opt-out requirements.

We must confirm the actual cookies, tags, pixels, and similar technologies used on the website before publishing a definitive list of their names, providers, purposes, and lifetimes. This policy does not mean that every category described above is currently active.

Where applicable law requires consent before non-essential cookies or similar technologies are activated, those technologies must remain disabled until the required consent is obtained. Continuing to browse the website will not, by itself, be treated as valid consent where the law requires a separate affirmative choice.

You may be able to manage cookies through a website privacy or cookie settings tool, if one is provided, and through your browser settings. Blocking certain cookies may affect website functionality. Browser controls do not necessarily manage every form of tracking, and a separate website control may be required to exercise particular privacy choices.

Where legally required, we will provide an appropriate mechanism to withdraw or change consent and to communicate applicable opt-out preferences. The actual controls must be implemented on the website; a written statement alone does not create a functioning consent or opt-out mechanism.

5. How We Use Personal Information

Depending on the information collected and the features you use, we may process personal information for the following purposes:

To process and fulfill orders, arrange delivery, communicate order status, and manage returns, refunds, and exchanges.

To process payments and related transaction records through the payment arrangements actually used.

To respond to questions, provide customer support, investigate complaints, and communicate about purchases or service requests.

To operate and maintain the website, troubleshoot errors, protect accounts and transactions, detect suspicious activity, and help prevent fraud or misuse.

To understand website performance and improve products, services, and user experience, where relevant tools are enabled and the processing is lawful.

To send marketing communications where permitted by law and, where required, with your consent or other legally sufficient authorization.

To comply with applicable laws, respond to valid legal requests, maintain appropriate business records, establish or defend legal claims, and protect our rights and the rights of others.

We will not use personal information for materially different purposes without providing additional notice or obtaining consent where required by law.

6. How We Share Personal Information

We may disclose personal information to third parties when necessary for the purposes described in this policy, subject to applicable law.

Service Providers. Depending on the services actually used, recipients may include website hosting and technical providers, payment processors, shipping and delivery providers, customer service platforms, security providers, and other vendors that perform services on our behalf. They should receive only the information reasonably necessary for their assigned functions and be subject to appropriate contractual or legal protections where required.

Professional Advisers. We may disclose relevant information to legal, accounting, insurance, or other professional advisers when reasonably necessary for their services and subject to applicable confidentiality and legal requirements.

Legal and Regulatory Recipients. We may disclose information when required by law, valid legal process, or an authorized government request, or when disclosure is otherwise legally permitted and reasonably necessary to protect rights, safety, or property.

Business Transactions. If a merger, acquisition, financing, reorganization, or sale of assets is contemplated or completed, relevant information may be disclosed as part of that transaction, subject to applicable law and appropriate safeguards.

Advertising, Analytics, and Other Third Parties. If advertising, analytics, or cross-service tracking technologies are enabled, information may be disclosed to the relevant providers as described in the applicable notices and privacy settings. Depending on the facts and the law, some disclosures may qualify as a “sale,” “sharing,” targeted advertising, or another regulated form of processing, even when no money is exchanged directly for the information.

The actual third-party recipients and their roles must be verified before publication. We will not claim that we sell, share, or do not sell or share personal information until our business practices, contracts, website tags, and applicable legal definitions have been reviewed.

7. Data Retention and Security

We retain personal information for no longer than reasonably necessary to fulfill the purposes for which it was collected, unless a longer period is permitted or required by law. The appropriate period may depend on the type of information, the nature of the transaction, customer service needs, accounting and tax obligations, dispute resolution, fraud prevention, and legal claims.

Where a fixed retention period is required by applicable law, or where we establish a specific retention schedule, that period or the applicable criteria should be disclosed in the relevant notice. We must confirm our actual retention practices before publishing specific time periods for order records, customer communications, technical logs, analytics data, or other categories.

Cookie and similar technology lifetimes depend on the specific technology and configuration. Session technologies may expire when a browsing session ends, while persistent technologies may remain for a defined period or until deleted, subject to their actual settings. The precise lifetimes must be verified from the website's cookie and technology inventory.

We use, or will implement as appropriate to our operations and legal obligations, reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, or misuse. No method of internet transmission or electronic storage can be guaranteed to be completely secure.

If a data security incident occurs, we will assess and respond to it in accordance with applicable notification, investigation, and other legal requirements.

8. Legal Bases for Processing

Where the General Data Protection Regulation (GDPR) applies, we must have a valid legal basis for each relevant processing activity. Depending on the circumstances, that basis may include:

Contract. Processing necessary to take steps at your request before entering into a contract or to perform a contract, such as processing an order or arranging delivery.

Legal Obligation. Processing necessary to comply with applicable legal requirements, such as certain tax, accounting, recordkeeping, or lawful disclosure obligations.

Legitimate Interests. Processing necessary for a legitimate interest pursued by us or a third party, provided that the interest is not overridden by your rights and interests. Depending on the circumstances, this may include website security, fraud prevention, service improvement, or handling legal claims. Where required, we will assess and document the relevant balancing considerations.

Consent. Processing based on your consent, where consent is the appropriate legal basis, such as certain non-essential cookies or marketing activities where required. You may withdraw consent at any time, and withdrawal does not affect the lawfulness of processing carried out before withdrawal.

The applicable basis depends on the specific activity. We will not rely on consent as the legal basis for every processing activity, nor will we rely on legitimate interests where that basis is unavailable or inappropriate.

For United States activities, applicable state and federal privacy laws may impose notice, choice, access, deletion, security, or other obligations without requiring the same GDPR legal-basis analysis. The applicable requirements depend on the law and the circumstances.

9. International Data Transfers

Personal information may be processed in the United States or other countries if our actual service providers, systems, or business operations involve those locations. We must confirm the locations where information is stored or accessed before making a definitive statement about international transfers.

Where GDPR applies and personal data is transferred outside the European Economic Area to a country without an applicable adequacy decision, the transfer must satisfy the relevant GDPR requirements. Depending on the circumstances, safeguards may include approved standard contractual clauses, an applicable transfer mechanism, and any additional measures required by law.

Where required, we will provide information about relevant transfer safeguards and how to obtain a copy or further details. The existence of this section does not itself establish that a particular international transfer occurs or that a particular safeguard has been implemented.

10. Your Privacy Rights

The rights available to you depend on your location, the law that applies, the type of information involved, and any applicable legal exceptions. We will assess requests under the relevant law rather than treating every listed right as universally available.

Rights Where GDPR Applies. If GDPR applies to our processing of your personal data, you may have the right to request access to your personal data, request correction of inaccurate data, request deletion, request restriction of processing, object to certain processing, and receive certain personal data in a structured, commonly used, machine-readable format or request its transfer to another controller where the legal conditions are met.

Where processing is based on consent, you may withdraw that consent at any time. You may also have rights relating to decisions based solely on automated processing, including profiling, where the conditions in GDPR Article 22 are satisfied.

These rights are subject to legal conditions and exceptions. For example, deletion, objection, restriction, and portability rights do not apply identically to every type of information or every processing activity.

Rights Under Applicable U.S. State Laws. Depending on the state law that applies and whether the business meets its coverage requirements, you may be entitled to request access to personal information, obtain a copy, correct inaccurate information, request deletion, or receive certain information in a portable format. Some laws also provide rights to opt out of the sale of personal information, targeted advertising, or certain profiling, and may provide additional rights concerning sensitive personal information or appeals.

The availability and scope of these rights vary by state and may be subject to exceptions. We will not represent that every right applies to every customer in every state.

Marketing Choices. You may opt out of promotional emails using the unsubscribe method provided in the message, where available. We may continue to send non-promotional communications necessary to complete an order, respond to a request, or provide important service information. Marketing opt-outs do not necessarily stop every form of processing or advertising, so additional privacy choices may be available or required under applicable law.

11. How to Exercise Your Rights

To submit a privacy request, contact us using the details in the Contact Us section. Please identify the type of request you are making and provide enough information for us to understand and process it.

We may need to verify your identity or, where permitted by law, the authority of an authorized agent. We will request only information reasonably necessary for verification and will handle verification information in accordance with applicable law.

We will review each request under the law that applies to it. If we deny a request in whole or in part, we will provide an explanation where required by law and explain any available appeal procedure where applicable.

For requests governed by GDPR, we generally must respond without undue delay and within one month of receipt. Where permitted by GDPR, this period may be extended by up to two additional months because of the complexity or number of requests. If an extension is needed, we will inform you within the initial one-month period and explain the reasons.

For requests governed by U.S. state privacy laws, we will follow the applicable response deadline and any permitted extension or notice requirements. We will not apply a single response deadline to all requests regardless of the governing law.

If you withdraw consent, we will stop or adjust the processing for which consent was the legal basis, as required by law. Withdrawal does not invalidate processing that was lawful before the withdrawal, and we may continue processing where another valid legal basis applies.

12. Appeals and Regulatory Complaints

If a privacy law that applies to your request provides a right to appeal a decision, you may submit an appeal by replying to our decision or contacting us through the channels listed below. Please identify the original request and explain why you believe the decision should be reconsidered. We will provide the applicable appeal instructions and respond within the timeframe required by the relevant law.

Where GDPR applies, you have the right to lodge a complaint with a competent data protection supervisory authority, particularly in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement, as provided by GDPR Article 77. You may also have rights to seek judicial remedies under Article 79 and compensation under Article 82 when the relevant legal conditions are met.

You can find information about European data protection authorities through the European Data Protection Board at https://www.edpb.europa.eu/. The European Commission's website at https://commission.europa.eu/ also provides information about data protection and individual rights. The competent authority depends on your circumstances; these organizations should not be understood as a single universal complaint office for every individual case.

In the United States, you may be able to contact the privacy regulator, state attorney general, or other competent authority for your state and circumstances. Official information is available from the California Privacy Protection Agency at https://cppa.ca.gov/, the Florida Attorney General at https://www.myfloridalegal.com/, and the Federal Trade Commission at https://reportfraud.ftc.gov/. Their authority and complaint procedures differ, and not every agency handles every type of privacy complaint.

Nothing in this policy limits any complaint, appeal, or legal remedy available to you under applicable law.

13. Children's Privacy

Our website is intended for general shopping by consumers and is not intended to solicit personal information from children under 13. We do not knowingly collect personal information from children under 13 through a service directed to children.

If we learn that personal information has been collected from a child in circumstances where parental consent or another legal requirement applies, we will take appropriate steps in accordance with applicable law.

The Children's Online Privacy Protection Act (COPPA) applies to certain websites and online services directed to children under 13, as well as certain operators that have actual knowledge that they are collecting personal information online from children under 13. If our audience, features, or actual data practices bring us within COPPA's scope, additional notices, parental consent, and other measures may be required.

If you believe a child has provided personal information in circumstances that raise a privacy concern, please contact us.

14. Third-Party Links and Services

Our website may contain links to third-party websites or services. If you follow a third-party link or use an external service, that provider may collect and process information under its own privacy policy and practices.

We do not control the privacy practices of independent third parties. Before providing information directly to another provider, you should review its applicable privacy notice. This section does not remove any obligations we may have for third-party tools integrated into our own website.

15. Marketing Communications and Cookie Preferences

If we send promotional emails, we will provide an appropriate method to opt out of future marketing messages as required by applicable law. We will process opt-out requests within the legally required timeframe. For commercial email covered by the CAN-SPAM Act, applicable requirements include truthful message information, a valid physical postal address, a functioning opt-out method, and timely honoring of opt-out requests.

Transactional messages, such as order confirmations, delivery updates, or responses to customer inquiries, may still be sent when necessary even if you opt out of promotional emails.

Where non-essential cookies, targeted advertising, or other regulated tracking activities are enabled, we will provide the consent and opt-out choices required by applicable law. Depending on the applicable requirements and the technologies used, this may include a cookie preference tool, an opt-out mechanism for certain disclosures, or recognition of a legally valid browser-based opt-out preference signal such as Global Privacy Control.

The availability and operation of these controls must be confirmed on the live website. This policy should not be interpreted as confirmation that a particular advertising, analytics, cookie management, or preference-signal system is currently deployed.

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our business practices, website features, service providers, or legal requirements. When we make changes, we will update the Effective Date shown at the top of the policy.

If applicable law requires additional notice or consent for a material change, we will provide that notice or obtain consent as required. We encourage you to review this policy periodically to understand how personal information is handled.

17. Contact Us

If you have questions about this Privacy Policy or wish to submit a privacy request, please contact us using the details below.

Website: https://oriacoraor.com

Email: care@oriacoraor.com

Phone: +1 (904) 439-8271

Mailing Address: 6173 Townsend Rd, Jacksonville, FL 32244, United States

Customer Service Hours: Monday–Friday, 9:00 AM–12:00 PM and 1:30 PM–6:30 PM.

For requests involving access, correction, deletion, objection, restriction, portability, consent withdrawal, or an appeal, please identify the type of request in your message so we can route it appropriately. Additional information may be requested when reasonably necessary to verify your identity or process the request under applicable law.