Privacy Policy

OROS, Inc. (“OROS,” “we,” “us,” or “our”) operates https://orosresearch.com (the “Site”).

This Privacy Policy explains how we collect, use, disclose, and retain personal information when you visit the Site, create an account, purchase products, contact us, subscribe to communications, or otherwise interact with our business. It also explains the privacy choices and rights that may be available to you.

“Personal information” means information that identifies, relates to, or can reasonably be linked to an individual, as defined by applicable law.

This policy describes our information practices. Using the Site or accepting our Terms & Conditions does not, by itself, constitute consent to marketing text messages or other processing that requires separate consent.

The information we collect depends on how you interact with us.

Contact and Account Information

We collect information you provide when creating an account, placing an order, submitting an inquiry, or subscribing to communications. This may include your name, email address, telephone number, billing and shipping addresses, account identifiers, and preferences.

For wholesale or organizational inquiries, we may also collect your organization’s name, business contact information, professional role, and information provided to establish purchasing eligibility.

Order and Transaction Information

We collect information about purchases and related activities, including products ordered, quantities, order numbers, transaction amounts, payment status, shipping details, delivery information, and records relating to refunds, billing questions, or payment disputes.

Payment-Related Information

Our payment providers collect information needed to process payments. Depending on the payment method, we may receive billing information, transaction identifiers, payment status, card brand, limited card details such as the last four digits, and authorization or verification records.

Payments may be completed directly at checkout or through a separate payment authorization form.

Communications and Support Information

We collect information you submit through email, SMS, contact forms, customer support, wholesale inquiries, reviews, and other communications. This may include message content, attachments, photographs, and records of our responses.

Please do not send unnecessary sensitive information, including medical records, Social Security numbers, full payment-card numbers, or card security codes through ordinary support channels.

Device, Browsing, and Usage Information

We and our providers may automatically collect information such as:

• IP address and general location inferred from it;
• Browser, device, and operating-system characteristics;
• Cookie identifiers and advertising identifiers;
• Referring websites, campaign information, and advertising click identifiers;
• Pages and products viewed;
• Cart, checkout, purchase, and other website interactions; and
• Timestamps, technical errors, and diagnostic information.

Marketing and Privacy Preferences

We collect subscription preferences, consent records, opt-out requests, privacy requests, and related records needed to document and respect your choices.

Where supported by the tools used, communications technologies may record message delivery, opens, clicks, and other engagement information.

We obtain personal information:

• Directly from you when you submit information, place an order, or communicate with us;
• Automatically through your browser, device, and interactions with the Site;
• From providers supporting our storefront, payments, shipping, communications, analytics, advertising, and security; and
• From an authorized representative or organization acting on your behalf.

Analytics and advertising providers may also supply campaign, referral, conversion, and attribution information relating to interactions with our Site or advertisements.

We use personal information to:

• Operate, maintain, secure, and improve the Site;
• Create and administer accounts;
• Process orders, authorize payments, arrange shipping, and provide updates;
• Verify purchasing eligibility and payment authority where appropriate;
• Respond to inquiries and investigate product, delivery, or billing concerns;
• Maintain transaction, consent, and business records;
• Detect and prevent fraud, unauthorized access, and misuse;
• Understand website performance and customer interactions;
• Measure advertising performance and purchase attribution;
• Support advertising and marketing, subject to applicable choices and consent requirements;
• Manage communication preferences and privacy requests;
• Comply with legal, accounting, tax, and regulatory obligations; and
• Establish, exercise, or defend legal claims.

Where an additional use requires further notice or consent, we will provide it as required by applicable law.

We use third-party payment providers to process payments completed directly at checkout or through a separate payment authorization form.

These providers collect and process payment information through their designated systems. Their handling of information is also governed by their applicable privacy notices and terms.

We do not store full payment-card numbers or card security codes in our ordinary customer or order records. We may retain limited payment details, transaction records, authorization confirmations, and related communications for order administration, fraud prevention, accounting, and dispute resolution.

Please do not send full card numbers or security codes by email, SMS, or ordinary customer support messages. Use only the designated checkout or payment authorization process.

Completing a purchase or payment authorization does not, by itself, enroll you in marketing text messages.

We use cookies, pixels, tags, and similar technologies to operate our storefront, remember preferences, understand website activity, measure advertising performance, and support advertising.

The information collected and disclosed depends on the tools enabled, their configuration, your interactions, and your privacy choices. Not every provider receives every category of information described in this policy.

Information These Tools Process

Depending on the integration, these technologies may process device and cookie identifiers, IP addresses, browsing activity, referral information, advertising click identifiers, cart and purchase events, order values, and transaction identifiers.

Where enabled and permitted, contact identifiers may also be used for advertising attribution or matching. Some integrations transform identifiers, such as email addresses, into hashed values before transmission. Hashing does not necessarily make information anonymous.

Information may be transmitted through browser-based technologies or other integrations. Applicable consent and opt-out choices apply to the processing covered by those choices, regardless of the transmission method.

Purposes

We use these tools to understand how visitors find and use the Site, evaluate performance, measure conversions, attribute purchases, improve marketing, and support advertising audiences or personalized advertising where enabled and permitted.

Advertising providers may associate information received from our Site with information they hold under their own privacy policies, subject to applicable settings, contractual restrictions, your choices, and law.

Advertising Disclosures, “Sale,” and “Sharing”:

Disclosing personal information for advertising can qualify as a “sale,” “sharing,” or processing for “targeted advertising” under applicable privacy laws, even when no money is exchanged.

Where our advertising disclosures fall within those definitions, you may exercise applicable opt-out rights using our Your Privacy Choices control.

Advertising choices are separate from email and SMS preferences. Unsubscribing from messages does not automatically change advertising-data preferences, and an advertising opt-out does not automatically unsubscribe you from messages you requested.

Cookie Consent and Privacy Controls

We provide cookie-consent controls and a Your Privacy Choices control on the Site.

Use these controls to review and manage the available cookie, analytics, advertising, and data-sharing preferences. Where required by law, we obtain consent before using nonessential technologies and honor applicable opt-out requests.

Essential technologies may remain active to support shopping carts, checkout, security, and recording your privacy choices.

An advertising opt-out does not necessarily stop all advertisements. You may continue to see advertisements that are not personalized using the processing covered by your opt-out.

Browser Signals and Settings

Where applicable law requires recognition of an opt-out preference signal, such as Global Privacy Control (GPC), we treat that signal as an opt-out request for the covered sale, sharing, or targeted-advertising processing.

Browser-based choices may apply only to the browser or device used. Clearing cookies, changing browsers, or using another device may require you to renew your preferences.

Traditional Do Not Track settings are distinct from GPC and do not necessarily communicate the same legally recognized request.

You can also manage cookies through your browser settings. Blocking cookies may affect certain Site functions.

For assistance, contact support@orosresearch.com.

We disclose information for the purposes described in this policy to the following categories of recipients.

Service Providers

These include providers supporting ecommerce, hosting, payments, fraud prevention, shipping, fulfillment, communications, customer support, analytics, storage, security, accounting, and legal services.

The information disclosed depends on the service provided. Where required by law, service providers and contractors are subject to contractual restrictions concerning their handling of personal information.

Analytics and Advertising Partners

We disclose information to analytics and advertising partners for the purposes described in Section 6, subject to applicable choices and legal requirements.

Legal and Safety Recipients

We may disclose information when reasonably necessary to comply with legal obligations, respond to lawful requests, investigate suspected misconduct, protect rights and safety, or establish, exercise, or defend legal claims.

Business Transaction Participants

Information may be disclosed in connection with a proposed or completed merger, acquisition, financing, reorganization, or transfer of business assets, subject to applicable confidentiality requirements and law.

Recipients You Authorize

We may disclose information when you request or authorize us to do so.

Public Contributions

Reviews or other content submitted for public display may be visible to others. Do not include information you do not want made public.

Our storefront is hosted on Shopify, which processes information to provide ecommerce and related services.

Depending on the features used and applicable settings, Shopify may process information on our behalf and may also process certain information for its own purposes under its privacy policies.

Learn more through the Shopify Consumer Privacy Policy and Shopify Privacy Controls.

Choices exercised directly with Shopify may be separate from requests submitted to OROS.

We may send service emails relating to orders, payments, shipping, account security, support, and other interactions.

We send promotional emails as permitted by applicable law and obtain consent where required.

You can unsubscribe from marketing emails using the unsubscribe link in the message or by contacting support@orosresearch.com.

Unsubscribing from marketing does not necessarily stop nonmarketing communications needed to administer an order, respond to an inquiry, or meet a legal obligation.

We may retain a limited suppression record to help prevent future marketing messages after you unsubscribe.

Message Types and Consent

Where the required consent has been obtained, we may send text messages concerning orders, payment requests, shipping, account verification, and customer support.

With separate consent where required, we may send recurring automated promotional messages, including offers and product announcements.

Providing a phone number, placing an order, or accepting our Terms does not, by itself, constitute consent to marketing texts. Marketing-text consent is not a condition of purchase.

Information Used

Our messaging program may process your mobile number, consent status, subscription source, consent timestamp, message content, delivery information, engagement information, and opt-out history.

We use this information to deliver authorized messages, respond to requests, maintain program security, and document compliance.

Messaging Providers and Disclosure Restrictions

We disclose mobile information to providers supporting message delivery, customer support, consent management, and related operations.

We do not sell or share mobile numbers or SMS opt-in consent with unaffiliated third parties or affiliates for their own marketing or promotional purposes.

This restriction does not prevent disclosures to providers supporting our messaging program or disclosures required by law.

Opting Out and Getting Help

Reply STOP to opt out. You may also contact support@orosresearch.com or use another reasonable method recognized by applicable law.

We will honor revocation requests within the timeframe and scope required by law. A nonpromotional confirmation or clarification message may be sent where permitted.

Closing your account is not required to withdraw SMS consent. We may use email or another permitted channel for necessary service communications after an SMS opt-out.

For assistance, reply HELP where supported or email support@orosresearch.com.

Message frequency varies. Message and data rates may apply. Delivery depends on carrier and network availability.

SMS Record

We may retain consent, opt-out, suppression, and delivery records as reasonably necessary to respect your choices, demonstrate compliance, resolve disputes, and meet legal requirements.

A deletion request may not require deletion of a limited record necessary to prevent unwanted messages.

We retain personal information for as long as reasonably necessary for the purposes described in this policy, unless a longer period is required or permitted by law.

Retention depends on the information and its purpose. Relevant considerations include:

• Whether an account or order remains active;
• The time needed to provide support or resolve a dispute;
• Tax, accounting, legal, and recordkeeping requirements;
• Fraud prevention and security needs;
• Documenting consent and honoring opt-outs; and
• Applicable deletion requests and legal exceptions.

Order and payment records may remain after an account is closed. Limited marketing suppression records may remain to respect unsubscribe requests.

Information in backups may remain until those backups are routinely overwritten or deleted, subject to applicable law and restrictions on further use.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information.

No website, transmission method, or storage system can be guaranteed completely secure.

Protect your account credentials, use a strong password, and contact us promptly if you suspect unauthorized activity.

If a security incident triggers notification obligations, we will provide notice as required by applicable law.

Depending on your location, our activities, and applicable law, you may have rights to:

• Confirm whether we process personal information about you;
• Access information or obtain a copy;
• Correct inaccurate information;
• Request deletion;
• Obtain certain information in a portable format;
• Withdraw consent where processing relies on consent;
• Opt out of covered sales, sharing, or targeted advertising;
• Limit certain uses of sensitive personal information;
• Object to or restrict certain processing; and
• Appeal a decision concerning a privacy request.

These rights are subject to applicable legal requirements and exceptions.

Submitting a Request

Email support@orosresearch.com with the subject line “Privacy Request.” Describe your request and provide enough information for us to locate relevant records.

For advertising-related opt-outs, you may also use Your Privacy Choices on the Site or a legally recognized browser preference signal.

We may need to verify your identity or authority before fulfilling certain requests. We will not require identity verification for an opt-out request where prohibited by law.

Do not send full payment-card details, Social Security numbers, or other unnecessary sensitive information.

Authorized Agents

You may use an authorized agent where permitted by law. We may request evidence of authorization and any verification allowed by law.

Responses and Appeals

We will respond within applicable legal deadlines and explain any permitted denial or extension.

Where an appeal right applies, you may appeal by replying to our response or emailing support@orosresearch.com with the subject line “Privacy Appeal.”

We will not unlawfully discriminate against you for exercising privacy rights.

Some information is necessary to provide requested services. Deleting or withholding it may affect our ability to maintain an account or fulfill an order. We may retain information where an applicable legal exception permits or requires it.

Where applicable state privacy laws cover our processing, the categories of information, sources, purposes, and recipients are described in Sections 2 through 7.

California residents may have rights to request information about collection, use, disclosure, sale, or sharing; request access, correction, or deletion; opt out of sale or sharing; limit certain uses of sensitive personal information; and receive equal treatment when exercising protected rights.

Residents of other states may have similar rights, depending on the applicable law.

Use the methods in Section 13 to submit requests. Advertising and cookie choices are described in Section 6.

California residents may also contact support@orosresearch.com regarding disclosures for third parties’ direct marketing purposes under California’s “Shine the Light” law, where applicable.

OROS is based in the United States. Personal information may be processed in the United States and other locations where our providers operate. Privacy laws in those locations may differ from those in your jurisdiction.

Where applicable law requires safeguards for an international transfer, we will use an appropriate lawful transfer mechanism.

Accessing the Site does not, by itself, replace any consent or transfer safeguard required by applicable law.

The Site is intended for legally eligible adult purchasers and is not directed to children.

We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact support@orosresearch.com so we can investigate and take appropriate action.

Other restrictions concerning minors apply where required by law and under our Terms & Conditions.

The Site may link to independently operated websites, payment services, review platforms, social networks, or other third-party services.

Their independent collection and use of information are governed by their own privacy policies. We encourage you to review those policies before submitting information.

This policy does not govern information collected independently by those third parties.

We may update this policy to reflect changes in our practices, services, or legal obligations.

The revised policy will be posted with an updated date. We will provide additional notice or obtain consent where required by applicable law.