Privacy policy

Last updated: 16 October 2026

This policy explains what personal data AROVA collects, why, who receives it, how long we keep it and how you can exercise your rights. It applies to the Store, to orders placed on it and to our customer service.

1. Who is responsible for your data

AROVA (“we”) decides how and why your data is used. For any question about your data: contact@arova-store.com.

2. What we collect

Orders: first and last name, phone number, delivery address (region, area, address details), email address if you give one, the products ordered, amounts, delivery notes and the history of your order (confirmation, delivery, returns).
Unfinished orders: if you start filling in the order form and enter a valid phone number but do not complete the order, we save what you entered so that our team can contact you once to help you finish it.
Customer account (optional; you can always order without one): email address, name, phone number, saved addresses, wishlist and password, which we store only in an encrypted (hashed) form that we cannot read.
Reviews: your rating, text, photos and the name you choose to display.
Messages: what you send us through the contact form, by email, phone or messaging, and our replies.
Privacy requests: the details needed to handle a request to access or delete your data.
Marketing information: if you arrive on the Store from an advertisement, the campaign identifiers contained in the link may be recorded with your order. Advertising and audience-measurement tools are only activated with your consent (section 7).

We do not ask for sensitive data (health, religion, opinions, etc.) and we do not store payment card numbers. We do not store your IP address with your orders or your account.

3. Why we use it

To process and deliver your orders (confirming the order by phone or message, preparing it, delivering it, handling returns and refunds), because it is necessary to perform our contract with you.
To run your account and answer your messages and requests, at your request.
To send you service messages about your order or your account (confirmation, delivery updates, password reset).
To prevent fraud and abuse: we keep a list of phone numbers linked to repeated refused deliveries or fraudulent orders, to protect our business and other customers.
To keep our records as required by accounting and tax rules.
With your consent only: to measure the audience of the Store, show you relevant advertising and send you promotional messages. You can withdraw your consent at any time.

We do not sell your personal data.

4. Who receives it

Your data is accessed only by our team members who need it, and by the service providers we use, strictly for the service they provide to us:

Delivery partners: your name, phone number, delivery address and order contents, to deliver your parcel and collect the payment.
Hosting: the Store and its database are hosted by 3HCLOUD LLC on servers located in Poland (European Union).
Email: our emails are sent through OVHcloud (France).
Payment providers, if online payment is offered in your country in the future.
Advertising and analytics providers, only if you have given your consent and only once such tools are in use; the providers concerned will be listed in our Cookies page.

We may also disclose data when the law requires it, for example at the request of a competent authority.

5. International transfers

Because of the providers listed above, your data is stored or processed outside the country you order from: currently in Poland and France (European Union). We choose providers that commit to protecting the data they process for us, and we share with them only what they need.

Some countries require prior formalities or authorisations from their data-protection authority for transfers of personal data abroad. We are completing the formalities that apply to us and will add their references to this policy.

6. How long we keep it

Orders: 10 years, to meet accounting obligations; after that, your name and contact details are removed and only anonymous sales figures remain.
Unfinished orders: 90 days.
Shopping carts: 30 days for visitors without an account, 180 days for customer accounts.
Customer account: until you delete it or ask us to; your orders are then kept as above, without your account details.
Records of the messages we sent you (recipient details): 90 days.
Reviews: as long as they are published; you can ask us to remove yours at any time.
Privacy requests: contact details removed one year after the request is closed.
Phone numbers on the fraud-prevention list: as long as necessary to prevent repeated abuse.

Data subject to a legal dispute or a legal obligation may be kept longer, only for that purpose.

7. Cookies and similar technologies

The Store uses cookies that are necessary for it to work (cart, session, chosen language); they do not require your consent. Audience-measurement and advertising tools are only loaded if you accept them in the consent banner, and you can change your choice at any time. Details are in our Cookies page.

8. Your rights

Depending on the law of your country, you have the right to:

access your data and receive a copy of it;
correct data that is inaccurate or incomplete;
ask us to delete your data, unless we must keep it (for example for accounting);
object to the use of your data, and withdraw your consent at any time for uses based on consent;
object to any use of your data for advertising.

To exercise these rights, use the privacy section of your account, the data request form, or write to contact@arova-store.com. We may ask you to confirm your identity. We answer within one month. If you are not satisfied with our answer, you can contact the data-protection authority of your country.

9. Security

Connections to the Store are encrypted (HTTPS), passwords are stored in hashed form, sensitive settings are encrypted, and access to customer data is limited to the team members who need it. No system is completely secure; if an incident affects your data, we will inform you and the competent authorities as required by law.

10. Children

The Store is intended for adults. We do not knowingly collect data from people under the age of majority in their country. If you think a child has given us personal data, contact us and we will delete it.

11. Changes to this policy

We may update this policy, for example when we add a service, a provider or a country. The date of the last update is shown at the top of this page. If a change significantly affects how we use your data, we will inform you on the Store or by email.

12. Contact

AROVA — contact@arova-store.com.