Privacy policy

CANORA ("we", "us", "our") is the data controller for this website. We are a botanical hair care business based in Georgetown, Guyana, and we sell botanical hair elixirs through shopcanora.com with delivery by courier and payment via Mobile Money Guyana (MMG).

You can reach us about any privacy matter at info@shopcanora.com or WhatsApp +592 616 4466. We answer privacy requests with the same care as order enquiries.

Order and delivery details you give us. When you place an order — by filling the order form on this site or messaging us on WhatsApp — we collect your name, phone number, WhatsApp number (if different), delivery address, the items you ordered, and the MMG transaction ID or reference you share with us as proof of payment.

Messages you send us. If you contact us by WhatsApp, email or any other channel, we keep the content of that conversation so we can serve you and keep a record of what was agreed.

Our new-drops list. If you join "Be first to know" or ask to be told when a sold-out item is back, we keep your email address only to send you those notes. We never share or sell it, and you can leave any time by replying to any of our emails or messaging us on WhatsApp.

Chats with NORA, our virtual assistant. We don't keep a history of your chats with NORA. The one exception: if a message contains abusive, discriminatory or offensive language, or tries to get another customer's information, we save that message (and your account ID, if you're signed in) so we can review it and keep the chat safe and respectful for everyone. To answer you, your chat messages are processed by our AI service provider; they are not used for advertising. To prevent abuse, we limit how many messages can be sent in a short time, using a one-way scrambled code of your connection (not your IP address itself) that we keep only for a short time. We also keep an anonymous daily count of what people ask NORA about (for example "delivery" or "how to use"), never the words themselves and nothing that identifies you.

Checking order emails. To stop fake and spam orders, we check that the email you order with can receive mail: only the part after the @ is looked up, through Cloudflare's public address service. We also limit how many orders one email address can place in a day.

Delivery tracking. When your order is out for delivery, we turn your delivery address into a map location so we can show it on your tracking page and estimate the arrival time. Our driver's phone shares its location with us during the trip; we store and show only the driver's general area (not their exact position), and we clear it as soon as the delivery is completed or cancelled.

Cart contents. The items you add to your cart are stored only in your own browser (local storage on your device). We do not receive your cart unless you send us the order.

What we do NOT collect. We do not ask for or store your MMG PIN, password, bank card number or bank account details. We do not run advertising trackers, analytics scripts or third-party advertising cookies on this site. We do not require you to create an account.

We use the information above only to:

• confirm and process your order and payment;
• deliver your order to the address you gave us;
• contact you about your order, delivery times or a problem with it, including a reminder if an order is still unpaid after 24 hours, and a note if it is released after 48 hours;
• after your order, send at most two one-time notes: one a few days after delivery asking how you're finding it, and one about five weeks later in case you're running low. Reply to either and tell us, and we won't send them to you again;
• answer your questions about products, hair care or orders;
• keep legally required business and tax records;
• protect our business against fraud and unpaid orders; and
• keep our chat assistant respectful and protect other customers' privacy.

We will never sell, rent or trade your personal information. We do not use your details for behavioural advertising, and apart from the order notes above we do not add you to marketing lists without your explicit consent. If you ever consent to hearing about new products from us, every message will include a way to opt out, and we will stop when you say stop.

All payments are handled by you directly through MMG, a service of your mobile provider. You send the payment from your own MMG account; we never see your PIN, password or account balance. The only payment information we receive is the transaction ID or reference you choose to share with us to confirm your payment, which we keep only to match it to your order and to resolve any payment dispute.

We share only the minimum needed, only for the purposes in section 3:

• Delivery couriers. Your name, delivery address and phone number, so your order reaches you.
• MMG / your mobile provider. Payment references you share, solely to verify payment.
• Service providers. The companies that operate our email, WhatsApp Business, website hosting, messaging, AI chat and map services process data on our behalf under their own terms (WhatsApp/Meta, our email provider, our hosting provider, our AI service provider, Google Maps for delivery times and map locations, OpenStreetMap for the map images on the tracking page, and Cloudflare for checking that an order email's domain can receive mail).
• Law and safety. We may disclose information where Guyanese law compels us, or where strictly necessary to prevent fraud or protect someone's safety — and only the minimum the situation requires.

Order details and conversations are kept in our business email, WhatsApp Business and order records (and any saved chat messages described in section 2), which are protected by passwords, two-factor authentication where available, and device-level encryption. Access is limited to the people at CANORA who need it to fulfil orders.

No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security. But we commit to this: we collect as little as possible, keep it only as long as necessary, and if we ever discover a breach affecting your personal information, we will tell you promptly and tell you what happened and what to do.

We keep order and payment records for up to five (5) years after your last order, so we can meet Guyanese tax and accounting obligations and handle any later dispute. Conversations are kept for the same period. Your cart is stored only in your browser and expires whenever you clear it. When information is no longer needed, we delete it.

You have the right, at any time and free of charge, to:

• ask whether we hold your personal information and get a copy of it;
• ask us to correct anything that is wrong or incomplete;
• ask us to delete your personal information ("right to be forgotten");
• withdraw consent you previously gave (for example, to marketing); and
• complain if you believe we have mishandled your information.

To use any of these rights, message us on WhatsApp at +592 616 4466 or email info@shopcanora.com from the phone number or email you ordered with, so we can confirm it is really you. We will respond within fourteen (14) days.

These commitments are grounded in the principles of Guyana's Data Protection Act No. 18 of 2023. Where that Act's enforcement mechanisms are not yet in operation, we apply the same standards voluntarily — your rights under this policy are enforceable against us directly, regardless.

Some of the services we rely on (email, WhatsApp Business, website hosting) may store or process data on servers located outside Guyana. When that happens, the data is still covered by this policy, and we choose providers with reasonable security standards so your information is protected to the same level as if it stayed here.

This site is intended for adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us their details, contact us and we will delete them promptly.

If we change this policy, we will post the new version on this page with a new effective date. If a change is significant — for example, if we ever start collecting a new kind of information — we will say so clearly on the site before it takes effect. Your information remains protected under the version of the policy in force when you gave it to us, unless you agree otherwise.

Questions, requests or complaints about privacy: email info@shopcanora.com or WhatsApp +592 616 4466. Ask for the owner, and mark your message "Privacy".