Updated May 30, 2026 Reviewed by Opora Editorial Team Editorial standards →

Privacy Policy

Last reviewed: June 2026

This Privacy Policy explains how Opora Supply ("Opora," "we," "us," or "our"), collects, uses, shares, and protects personal information in connection with www.oporasupply.com and our related services, including the Opora Field Guide and our online store (collectively, the "Services").

By using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Information we collect

We collect personal information in three ways: information you provide directly, information collected automatically, and information from third parties.

1.1 Information you provide

  • Account information — name, business name, email address, phone number, billing and shipping addresses, password
  • Order information — products purchased, payment method (processed and stored by our payment processor, not by Opora directly), order history
  • Communications — emails, support requests, feedback, survey responses
  • Marketing preferences — email subscription status, content preferences
  • Downloads — name and email if provided in exchange for a gated PDF or guide

1.2 Information collected automatically

When you visit the Services, we (and our service providers) automatically collect:

  • Device and browser information — IP address, browser type and version, operating system, device identifiers, screen resolution
  • Usage information — pages viewed, time on site, referring URL, search terms used on the site, clicks, scroll depth
  • Cookies and similar technologies — see Section 6 below

1.3 Information from third parties

  • Payment processors (e.g., Shopify Payments, Stripe) — confirmation of payment, last four digits of card, billing country; we do not receive or store full payment card numbers
  • Shipping carriers — delivery confirmation, tracking events
  • Analytics and marketing platforms — aggregated usage data, advertising-effectiveness measurements
  • Public sources — business directory listings (for B2B verification, where applicable)

2. How we use your information

We use personal information to:

  • Process and fulfill your orders, including payment, shipping, and customer service
  • Create and manage your account
  • Communicate with you about orders, support requests, and account matters
  • Send marketing communications (newsletters, product updates, the Opora Field Guide newsletter) — only with your consent where required by law, and with an unsubscribe option in every marketing message
  • Provide and improve the Services, including measuring and analyzing usage
  • Personalize content and product recommendations
  • Detect, prevent, and respond to fraud, security threats, and illegal activity
  • Comply with legal obligations, including tax, accounting, and regulatory requirements
  • Enforce our Terms of Service and other policies
  • Conduct business transactions (e.g., a merger, acquisition, or sale of assets)

3. Legal bases for processing

Where applicable law (such as the GDPR for EU/UK residents) requires us to identify a legal basis for processing, we rely on:

  • Performance of a contract — to fulfill your order and provide the Services you request
  • Legitimate interests — to operate, secure, and improve our business; to communicate with you about your account and orders; to prevent fraud
  • Consent — for marketing communications, certain cookies, and other purposes where consent is required
  • Legal obligation — to comply with tax, accounting, and regulatory requirements

4. How we share your information

We do not sell personal information for monetary consideration. We share personal information only as described below:

  • Service providers — payment processors, shipping carriers, hosting and infrastructure providers, email-marketing platforms, analytics providers, customer-support tools. These providers process information on our behalf under contractual confidentiality and security obligations.
  • Business transfers — in connection with a merger, acquisition, financing, or sale of assets, where personal information may be transferred as part of the transaction.
  • Legal compliance and protection — to comply with law, respond to lawful requests from public authorities, enforce our Terms, protect our rights and property, and protect the safety of our users or others.
  • With your consent — for any other purpose disclosed to you and to which you consent.

Some U.S. state privacy laws define "sharing" broadly to include certain cross-context behavioral advertising. To the extent we use advertising cookies or pixels that constitute "sharing" under those laws, you may opt out as described in Section 7 below.

5. Data retention

We retain personal information for as long as needed to provide the Services, comply with legal obligations (including tax recordkeeping under applicable IRS and Georgia Department of Revenue rules — generally at least seven years for transaction records), resolve disputes, and enforce our agreements. When personal information is no longer needed, we delete, anonymize, or de-identify it.

6. Cookies and tracking technologies

We and our service providers use cookies, pixels, local storage, and similar technologies to:

  • Make the site function (essential cookies — required, not optional)
  • Remember your preferences (functional cookies)
  • Measure site performance and usage (analytics cookies)
  • Deliver and measure advertising (advertising cookies)

You can manage non-essential cookies through:

  • Our cookie banner (where displayed)
  • Your browser settings (most browsers allow you to block or delete cookies)
  • Industry opt-out tools such as the Network Advertising Initiative (optout.networkadvertising.org) and the Digital Advertising Alliance (optout.aboutads.info)

Disabling essential cookies may prevent the Services from functioning properly.

7. Your privacy rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access — request a copy of the personal information we hold about you
  • Correction — request that we correct inaccurate or incomplete information
  • Deletion — request that we delete your personal information, subject to legal exceptions
  • Opt-out of marketing — unsubscribe from marketing emails at any time using the link in any email
  • Opt-out of "sale" or "sharing" — where applicable under your state's privacy law (see also our Your Privacy Choices page)
  • Data portability — request your personal information in a portable format (where applicable)
  • Withdraw consent — where we rely on consent, withdraw it at any time
  • Non-discrimination — exercise your privacy rights without discriminatory treatment

To exercise your rights, contact us through our contact page with the subject line "Privacy Request." We will verify your identity (typically by confirming information already in your account) and respond within the time required by applicable law (generally 30–45 days). You may also designate an authorized agent to submit requests on your behalf.

California residents — under the California Consumer Privacy Act / California Privacy Rights Act, you have the rights listed above and additional rights to limit use of sensitive personal information.

Other U.S. state residents — Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws provide similar rights, exercisable through the same contact method.

EU/UK/EEA residents — under the GDPR and UK GDPR, you have the rights listed above plus the right to lodge a complaint with your local supervisory authority.

8. Children's privacy

The Services are intended for business and professional use. We do not knowingly collect personal information from children under 13 (or under 16 in the EU/UK). If you believe a child has provided personal information to us, contact us and we will delete it.

9. Security

Opora uses reasonable administrative, technical, and physical safeguards to protect personal information, including HTTPS encryption in transit, access controls, and reputable service providers (such as Shopify) for hosting and payment processing. However, no system is perfectly secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

10. International transfers

Opora is based in the United States. If you access the Services from outside the U.S., your information may be transferred to, stored in, and processed in the United States or other countries where our service providers operate. These countries may have data-protection laws different from your own. By using the Services, you consent to the transfer of your information to the United States.

For transfers from the EU/UK/EEA, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.

11. Third-party links

The Services may link to third-party websites, applications, or content. Opora does not control these third parties and is not responsible for their privacy practices. We encourage you to review the privacy policy of any third-party site you visit.

12. Do Not Track

Some browsers offer a "Do Not Track" (DNT) signal. There is no industry consensus on how to respond to DNT signals, and the Services currently do not respond to DNT signals. You can still control cookies and tracking using the methods described in Section 6.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The "Last reviewed" date at the top reflects the most recent revision. For material changes, we will provide notice through the Services (e.g., a banner or email). Your continued use of the Services after updates constitutes acceptance.

14. Contact us

For questions, concerns, or to exercise your privacy rights:

Opora Supply

State of Georgia, United States

Contact: oporasupply.com/pages/contact

Website: www.oporasupply.com

This Privacy Policy is effective as of June 2026 and supersedes any prior version.