Privacy Policy

Aureva Health (“Aureva”, “we”, “us”) operates this website and sells oral-care products for delivery within Lebanon. This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and the choices you have.

Last updated: 5 September 2026

1. Who is responsible for your data

Aureva Health, Beirut, Lebanon, is the party that decides how and why your personal data is used. For any question about this policy, or to exercise any right described below, contact us at support@aureva-health.com or on WhatsApp at +961 70 870050.

2. What we collect

  • Order details — your name, phone number, email address, delivery address (city, area, street, building or floor, any landmark you add), delivery notes, and the items, quantities and total of your order.
  • Account details — if you create an account: your email address, your name, a password stored only as a salted one-way hash (we cannot read it), your saved addresses, wishlist and order history.
  • Messages you send us — contact-form submissions, emails, WhatsApp messages and product reviews you write.
  • Technical data — IP address, browser type and pages viewed, collected in ordinary server logs and used to keep the site secure and working.

3. Payment data: we do not collect any

Cash on Delivery is our only payment method. You pay the delivery driver in cash when your order arrives. We do not operate a card gateway, we do not accept bank transfers or mobile wallets, and no card number, CVV, expiry date, bank account or wallet identifier ever passes through this website or is stored on our servers.

Because of this, Aureva will never ask you for card or banking details — not on the website, not by email, not by phone and not on WhatsApp. If anyone asks you for them in our name, it is not us. Please report it to us immediately.

4. Why we use your data

  • To take, prepare and deliver your order, and to collect payment on delivery.
  • To contact you about that order — confirmation, delivery updates, and the confirmation link that finalises an order placed on the site.
  • To answer your questions and provide support, including over WhatsApp.
  • To publish a review you have chosen to submit (under the name you give us).
  • To keep the site secure, prevent fraudulent or abusive orders, and meet our legal and accounting obligations.
  • To send marketing email only if you subscribed to our list. Every marketing email has an unsubscribe link, and unsubscribing never affects your orders.

5. Who we share it with

We do not sell, rent or trade your personal data. We share it only where it is necessary, and only the minimum needed:

  • Our delivery company. To bring your order to you, the courier receives your name, phone number and delivery address (plus any delivery note you added) and the cash amount to collect. They do not receive your email address, your account details or your order history, and they may use what they receive only to complete your delivery.
  • Our email provider, to send order and account emails to the address you gave us.
  • Our hosting provider, which stores the site and database on our behalf under a confidentiality obligation.
  • Analytics, where enabled, in aggregate form to understand how the site is used.
  • Authorities, only where we are legally required to disclose.

6. Cookies

We use a small number of cookies. Strictly necessary cookies keep you signed in, remember your cart and protect forms against cross-site request forgery; the site cannot function without them. Where analytics cookies are enabled they measure page traffic only. You can clear or block cookies in your browser settings, but blocking the necessary ones will break sign-in and checkout.

7. How long we keep it

  • Order records — kept for up to 7 years to meet accounting and tax obligations.
  • Account data — kept while your account is open, and deleted on request.
  • Marketing list — kept until you unsubscribe.
  • Server logs — kept for a short period for security purposes, then discarded.

8. How we protect it

The site is served over encrypted HTTPS. Passwords are stored only as salted one-way hashes. Access to the order database is restricted to the people who need it to run the business. No system is perfect, but we hold no card data at all, which removes the most sensitive category of risk entirely.

9. Your rights

You may ask us at any time to:

  • tell you what personal data we hold about you, and give you a copy;
  • correct anything that is wrong or out of date;
  • delete your account and personal data, except records we must keep for tax purposes;
  • stop sending you marketing;
  • remove a review you submitted.

Write to support@aureva-health.com. We respond within 30 days and we do not charge for this.

10. Children

This site is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

11. Changes to this policy

If we change this policy we will update the date at the top of the page. Material changes will be announced on the site. Continuing to use the site after a change means you accept the updated policy.