Privacy Policy

1. Who we are and what this covers

Biora is operated by Biora, Cairo, Egypt. For the purposes of Egypt's Personal Data Protection Law (Law No. 151 of 2020), we are the controller of the personal data described here.

This policy applies to our online store and to any order, account or message you send us through it. It does not cover third-party websites we link to, which have their own policies.

If you would like to reach us about anything in this policy, write to biora.support@gmail.com.

2. Information we collect

We collect only what we need to run the store and fulfil what you ask us to do.

• Account details — your name, email address, phone number and the gender preference that selects which collection the store shows you.
• Order details — the items you buy, your delivery address, and your order history.
• Payment information — we receive confirmation that a payment succeeded or failed, along with a transaction reference. We never see or store your full card number, expiry date or security code.
• Communications — the contents of any message you send us through the contact form, together with your name, email and, if you provide it, your phone number.
• Technical and usage data — your IP address, device and browser type, and the pages you view. This is used to keep the store secure and to understand which pages are useful.
• Saved preferences — your basket, wishlist and the collection you last browsed.

3. How we use your information

We use your personal data to take and deliver your orders, to process payments and refunds, to maintain your account, and to answer you when you contact us.

We also use it to prevent fraud and abuse — for example, limiting how often the contact form can be submitted from one address — and to understand in aggregate how the store is used so we can improve it.

We do not use your data to make automated decisions that produce legal effects for you, and we do not sell it to anyone.

4. Why we are allowed to use it

We rely on your consent, which you give by creating an account, placing an order or writing to us, and which you may withdraw at any time.

We also rely on the necessity of processing your data to perform the contract between us — we cannot deliver an order without an address — and on our legitimate interest in keeping the store secure and improving it.

Some data we keep because the law requires it, particularly records connected to transactions and tax.

5. Cookies and similar technologies

We use a small number of cookies and browser storage entries. Some are strictly necessary: the secure, httpOnly cookies that keep you signed in cannot be turned off without breaking your account.

Others remember preferences, such as your language and the collection you last browsed, so the store looks the same when you return.

We also use Google Analytics to understand, in aggregate, which pages visitors find useful. You can block analytics cookies through your browser settings without losing access to any part of the store.

6. Who we share it with

We share your data only with the service providers that make the store work, and only with what each one needs to do its job. Each is bound to protect it and may not use it for their own purposes.

• Paymob — our payment processor. It handles your card details directly; we receive only the result of the transaction.
• Our delivery partners — they receive your name, address and phone number so they can deliver your order and call you beforehand.
• Cloudinary — hosts the product imagery served by the store.
• Google Analytics — receives pseudonymous usage data about page views.
• Our email provider — delivers order notifications and replies to your messages.
• Authorities or legal advisers, where we are required to disclose data by law or need to establish or defend a legal claim.

7. How long we keep it

We keep your account data for as long as your account is open. If you ask us to delete your account, we remove it, except where we must keep certain records.

Order and transaction records are kept for the period required by Egyptian tax and commercial law.

Messages sent through the contact form are kept while we handle your query and for a reasonable period afterwards in case you write again about the same matter.

Analytics data is retained in aggregated form, which does not identify you individually.

8. Your rights

Under Egypt's Personal Data Protection Law you have rights over the data we hold about you.

• Access — ask us for a copy of the personal data we hold about you.
• Correction — ask us to fix anything inaccurate or incomplete.
• Deletion — ask us to erase your data, subject to records we are legally required to keep.
• Objection and restriction — object to a particular use of your data, or ask us to pause it while a question is resolved.
• Withdrawal of consent — withdraw consent at any time, without affecting anything done before you withdrew it.
• Complaint — raise a concern with the competent Egyptian data protection authority.

9. How we protect it

Traffic between your browser and our store is encrypted. Passwords are stored only as irreversible hashes, never in a readable form, and sign-in tokens are held in secure, httpOnly cookies that scripts on the page cannot read.

Access to personal data inside our systems is limited to the people who need it to do their work.

No system is perfectly secure, so we cannot promise absolute safety. If a breach ever affects your personal data, we will notify you and the competent authority as the law requires.

10. Children

Our store is intended for adults. We do not knowingly collect personal data from anyone under 18.

If you believe a child has provided us with personal data, contact us at biora.support@gmail.com and we will delete it.

11. Transfers outside Egypt

Some of the providers listed above operate servers outside Egypt, which means your data may be processed abroad.

Where that happens, we work only with providers that offer an adequate level of protection and that are contractually bound to safeguard your data to the standard described in this policy.

12. Changes to this policy

We may update this policy as our store or the law changes. The date at the top of this page always shows when it was last revised.

If a change materially affects how we use your data, we will make that clear rather than relying on the updated date alone.