1. Who we are

Folora is a brand of ECPRO BRAND LTD, a company registered in England and Wales under company number 13017691, with its registered office at International House, 12 Constance Street, London E16 2DQ, United Kingdom.

For the purposes of the UK GDPR and the Data Protection Act 2018, ECPRO BRAND LTD is the data controller for the personal information described in this policy.

2. The information we collect

Information you give us

• Your name, delivery address, billing address, email address and telephone number when you place an order.
• The content of any message you send us through our contact form or by email.
• Your email address, if you ask us to send you marketing messages.

Information we collect automatically

• Your IP address, browser type, device type, operating system and approximate location.
• The pages you view, the links you click, the items you add to your basket and how long you spend on each page.
• Information stored in or read from cookies and similar technologies — see our Cookie Policy.

3. How we use your information

• To take, process, dispatch and deliver your order, and to send you order and delivery updates.
• To answer your questions and provide customer support.
• To handle returns, refunds and claims under our 60-day money-back guarantee.
• To detect and prevent fraud, and to keep our website secure.
• To measure how our website and our advertising perform, and to improve both.
• To show you advertising for Folora on Meta platforms (Facebook and Instagram), where you have consented to marketing cookies.
• To send you marketing emails, where you have asked us to. You can stop these at any time using the unsubscribe link in any message, or by emailing us.
• To keep the records we are required by law to keep, including accounting and tax records.

We do not sell your personal information.

4. Our legal bases

Where we rely on your consent, you can withdraw it at any time. Withdrawing consent does not affect anything we did lawfully before you withdrew it.

5. Who we share your information with

We share personal information only with organisations that need it to provide a service to us, and only for that purpose.

We may also disclose your information where we are required to do so by law, by a court or by a regulator, or where it is necessary to establish, exercise or defend legal claims.

6. International transfers

Some of the organisations above are based outside the United Kingdom. Where your personal information is transferred outside the UK, we rely on one of the safeguards recognised by UK law — either an adequacy decision made by the UK government, or the International Data Transfer Agreement or the UK Addendum to the European Commission's Standard Contractual Clauses.

7. How long we keep your information

• Order and transaction records: six years from the end of the financial year in which the order was placed, as required for tax and accounting purposes.
• Customer support messages: two years from our last exchange with you.
• Marketing contact details: until you unsubscribe, and then a minimal record so that we do not contact you again.
• Website analytics and advertising data: no more than 24 months.

8. Your rights

Under UK data protection law you have the right to:

• Access the personal information we hold about you and receive a copy of it.
• Correct information that is inaccurate or incomplete.
• Erase your information, where there is no lawful reason for us to keep it.
• Restrict how we use your information while a concern is being resolved.
• Object to processing we carry out on the basis of our legitimate interests, and to direct marketing at any time.
• Receive your information in a portable format and have it transmitted to another organisation, where this is technically feasible.
• Withdraw consent at any time, where our processing is based on consent.

To exercise any of these rights, email info@tryfolora.com or use our contact form. We will respond within one month. We may ask you for information to confirm your identity before we act on a request.

You will never be treated less favourably for exercising these rights, and exercising them is free of charge.

9. Cookies and similar technologies

We use cookies and similar technologies. Only the cookies that are strictly necessary for our website to work are set without your permission. Everything else — analytics and advertising — is set only after you have accepted it in our cookie banner. Our Cookie Policy explains each category and how to change your choice.

10. Children

Our website and our products are intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us their personal information, please contact us and we will delete it.

11. Security

We use Shopify's infrastructure, which encrypts traffic in transit using TLS and is certified to PCI DSS Level 1 for payment processing. Access to customer data within our own team is limited to the people who need it to do their job.

No system can be guaranteed completely secure, so please do not send us payment card details or other sensitive information by email.

12. Changes to this policy

We may update this policy to reflect changes in what we do or in the law. The date at the top always shows when it was last changed. If a change materially affects your rights, we will make that clear on this page.