Ora Cacao Privacy Policy

Effective August 16, 2026

  1. Scope of This Policy
  2. Agreement to Terms
  3. Information We Collect
  4. Cookies
  5. Children’s Privacy
  6. Our Use of Personal Information
  7. Our Disclosure of Personal Information
  8. Your Privacy Choices
  9. Security
  10. Additional Disclosures for Residents of Canada
  11. Additional Disclosures for Residents of the European Union (EU) and the United Kingdom (UK)
  12. Links to Other Websites
  13. Effective Date and Changes to This Privacy Policy
  14. How to Contact Us


1. Scope of This Policy

Firefly Chocolate dba Ora Cacao (“Ora,” “we,” “us,” “our”) respects your privacy and values your trust. The purpose of this Privacy Policy is to inform you of the treatment and handling of personal information that we may learn about you from using our website at ceremonial-cacao.com (the “Site”), from purchasing products and services from us or engaging with our content, or by use of any of our services (collectively, the “Service”). If you have any questions regarding this information or our privacy practices, please contact us via the methods set out in the How to Contact Us section at the end of this Privacy Policy.

2. Agreement to Terms

By using or accessing the Service in any manner, you acknowledge that you accept the practices and policies outlined below and the policies outlined in our Terms of Use, and you hereby consent that we may collect, use, and disclose your personal information as described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy and our Terms of Use, then you should immediately discontinue use of the Service without providing us with any personal information.

3. Information We Collect

We may collect the following categories of personal information (a) directly from you (such as when you create account, make a purchase, or contact us), (b) from third-parties such as our service providers, (c) from the device and browser that you use to access the Service, and (d) from cookies and similar technologies.

Identifiers

We may collect your first name, last name, email address, account username and password, address, phone number, and IP address].

Financial and Transactional Information

We may collect payment details (such as credit or debit card information), billing address, and order history. We use authorized third-party payment processors and order fulfillment providers for part of this process.

User-generated Content

We collect the information and content of communications that you share through the Service. This may include the information you choose to share with us when you contact us, use our support chat feature, leave a review, or respond to our surveys.

Demographics and Characteristics

We may collect your age and gender. This information is used to improve the Service and verify age requirements for senior discounts.

Audio-Visual Information

We may collect phone recordings for quality assurance and training purposes. We also collect profile pictures if uploaded to your account.

Device Information

We may collect device information when you visit our Site. Device information may include your device type, browser type, online and/or unique identifiers, IP address, and geolocation information.

Internet Activity

We may collect information concerning your interaction with the Site, including when you access the Site and your browsing activity on the Site (such as which pages you visit, in what order, and for how long). This may also include “traffic data” or tracking information provided by the Site’s host or similar providers (e.g., Google Analytics) that may be helpful for marketing purposes or for improving the Service.

You are not required to provide all personal information identified in this Privacy Policy to use the Service or to interact with us, but certain functionality will not be available if you do not provide certain personal information. For example, if you do not provide certain personal information, we may not be able to register your account, fulfill your order, or respond to your requests.

4. Cookies

We store certain information that gets collected automatically at our end through cookies and other similar technologies. A cookie is a small string of information that a website that you visit transfers to your browser for identification purposes. Cookies can be used to follow your activity while using a website or across websites, and that information helps companies understand your preferences and tendencies, as well as improve and personalize your website experience. Some cookies are necessary to operate a website, while others can be functional, analytical, or used for marketing purposes, including targeted advertising (as discussed in more detail below). Cookies on the Site are generally divided into the following categories:

  • Strictly Necessary Cookies. These are required for the operation of the Site. They include, for example, cookies that enable you to log into password-protected portions of the Site. These cookies are session cookies that are erased when you close your browser.
  • Analytical/Performance Cookies. These allow us to recognize and count the number of visitors to the Site and understand how such users navigate through the Site (e.g., when and which pages are visited, in what order the pages are visited, and where a user is located). 

We also use Google Analytics for part of this process. For more information about Google Analytics, please visit www.google.com/policies/privacy/partners/. Google provides users with the ability to prevent their data from being used by Google Analytics—learn more by going to https://tools.google.com/dlpage/gaoptout.

  • Functional Cookies. These improve the functional performance of the Site and make it easier for you to use. For example, cookies are used to remember that you have previously visited the Site and asked to remain logged into it (e.g., this saves your username). These cookies qualify as persistent cookies because they remain on your device for use during your next visit to the Site. You can delete these cookies as detailed below.
  • Marketing Cookies. These record your visit to the Site and the pages you have visited and the links you have followed, to recognize you as a previous visitor, and to track your activity on the Site and other websites you visit. These cookies are used to display ads on other websites based on your visits to our Site and other online activity. These cookies qualify as persistent cookies because they remain on your device.

Third Party Cookies

In addition, we use Shopify to power our online stores. Shopify uses certain strictly necessary cookies to enable the online stores to function properly as well as analytical/performance and advertising cookies. For more information regarding Shopify’s cookies, visit https://www.shopify.com/legal/cookies.

Information about Interest-Based Advertisements

We may serve advertisements, and also allow third-party ad networks, including third-party ad servers, ad agencies, ad technology vendors and research firms, to serve advertisements through the Service. These advertisements may be targeted to users who fit certain general profile categories or display certain preferences or behaviors (“Interest-Based Ads”). Information for Interest-Based Ads (including personal information) may be provided to us by you or derived from the usage patterns of particular users on the Service and/or services of third parties. Such information may be gathered through tracking users’ activities across time and unaffiliated properties, including when you leave the Service. To accomplish this, we or our service providers and advertising partners may deliver cookies, including a file (known as a “web beacon” or “pixel”) from an ad network to you through the Service. Web beacons and pixels allow ad networks to provide anonymized, aggregated auditing, research and reporting for us and for advertisers. They also enable ad networks to serve targeted advertisements to you when you visit other websites. Web beacons and pixels allow ad networks to view, edit or set their own cookies on your browser, just as if you had requested a web page from their site.

We also use advertising networks to advertise on third-party websites and you may opt-out or change your preferences for each of these services as detailed below:

You can also prevent the use of certain cookies by modifying your Internet browser settings, typically under the sections “Help,” “Internet Options,” or “Settings.” If you disable or delete certain cookies in your Internet browser settings, you may still access our Sites, however, you might not be able to access or use important functions or features of our Sites, and you may, for example, be required to re-enter your log-in details.

Do-Not-Track Signals

At this time, we do not recognize automated “do-not-track” browser signals.

5. Children’s Privacy

The Service is not intended for users under the age of 16 and Ora does not knowingly collect personal information from individuals under the age of 16. If you are aware of, or suspect that, someone under the age of 16 is using the Service without permission, please notify us immediately by contacting us as detailed in the How to Contact Us section below. If you have questions or concerns about the Internet and privacy for your child, we encourage you to check out the FTC Guidelines for protecting your child’s privacy online.

6. Our Use of Personal Information

We collect and use your personal information for the following purposes:

  • Providing the Service to you and providing products or services requested by, or reasonably anticipated within the context of our relationship with, you;
  • Managing our relationship with you, and responding to your inquires or requests, and requesting feedback;
  • Managing your account, including tracking your username and password;
  • Keeping track of your shopping cart;
  • Administering promotions, events, or surveys;
  • Providing relevant promotional materials or other marketing;
  • Personalizing the Site, and the marketing messages you receive from us;
  • Tailoring advertisements to what we believe will be of interest to you (including working with our advertising partners to display advertisements on third-party websites that you may visit);
  • Assessing the success of our marketing and advertising campaigns;
  • Analyzing use of the Site;
  • Detecting security incidents and protecting against malicious, deceptive, fraudulent, or illegal activity, or prosecuting those responsible; and
  • Complying with legal and regulatory obligations.

Use of Testimonials

Ora collects user testimonials and product reviews (“Submitted Content”) from our customers that may contain personal information. Ora may use, publicly display, exploit, and otherwise make available such Submitted Content including by posting them publicly on the Service as further described in our Terms of Use. Submitted Content is reproduced verbatim, except for correction of grammatical or typing errors. Some Submitted Content may further contain only an excerpt from the original. You are responsible for the personal information that you choose to provide when you submit a testimonial or review, and you acknowledge and understand that Ora may use your Submitted Content, and any personal information it may contain publicly on the Service.

7. Our Disclosure of Personal Information

We may share your personal information with the following third parties:

  • Service providers, including Shopify, order fulfillment providers, payment processors, customer relationship managers and web host providers. In some instances, service providers will be directly responsible to you for their use of your personal information. They may be obliged by law to provide you with additional information regarding the personal information that they hold about you and how and why they process that information. Further information may be provided to you in a separate notice or may be obtained from such service providers directly, for example, via their websites.
  • Other users, including when you leave a public review of our products.
  • Advertising networks to provide you with relevant marketing.
  • Advisors and financial institutions, including auditors, notaries, business continuity support service providers, and legal, tax, and risk and compliance advisors.
  • With third parties in connection with a change to the control or financial status of the company, including a corporate restructuring, sale, acquisition, financing, reorganization, bankruptcy, receivership, transfer, assignment of assets, or business merger or divestiture. Personal information and other information may be shared in the diligence process with counterparties and others assisting with the transaction and transferred to a successor or affiliate as part of that transaction.
  • Government bodies, dispute resolution organizations, law enforcement agencies, or third parties in connection with (a) responding to a subpoena, search warrant, or other lawful request for information that we receive; (b) cooperating in a law enforcement or similar investigation; or (c) otherwise protecting our rights, as applicable.


8. Your Privacy Choices

If you no longer want to receive our newsletters, emails, or other marketing communications, you may unsubscribe at any time by following the unsubscribe options in the communication itself, through your password protected user account, or by contacting us at Ora Cacao Customer Support Center.

To opt-out of text messages, you may text “STOP” in reply to any Ora marketing text message.

Please note that you cannot unsubscribe from certain correspondence from us, including messages relating directly to your account or purchases placed through the Site. 

Upon request we will provide you with access to the personal information that we hold about you. You may also correct, amend, or delete certain personal information we hold about you through your password protected user account. You may also request we delete your user account.

9. Security

We maintain reasonable technical and organizational measures to protect personal information from loss, misuse, alteration, or unintentional destruction. We have implemented various security measures to protect both the personal information and the general information that we receive from you through the Service. Whenever you give out personal information online there is a risk that third parties may intercept and use that information. Although we seek to protect your personal information and privacy, we cannot guarantee the security of any information you disclose online. To the extent permitted under applicable law, we assume no liability or responsibility for disclosure of your information due to errors in transmission, unauthorized access by third parties, or other causes beyond our control.

You play an important role in keeping your information secure. You should not share your username or password with anyone. If you have reason to believe that your account is no longer secure, please contact us immediately at Ora Cacao Customer Support Center or at the contact information in the How to Contact Us section below.

10. Additional Disclosures for Residents of Canada

This section contains additional disclosures for residents of Canada. As noted above, you may view and/or update certain information associated with your account (e.g., name, email address, password, gender, and birthdate) by logging into your account. If you wish to request access to or correction of other personal information, or to opt-out of the processing of your personal information or request that we delete your personal information, you may contact us at support@oracacao.com with the subject line “Canada Privacy” so that we can get your email to the right team. You may also contact us for information about how foreign-based service providers process your personal information or if you have any questions or complaints about the manner in which we treat your personal information.

We retain personal information for as long as necessary to fulfill the purposes for which the information was collected; as needed to address tax, corporate compliance, employment, litigation, and other legal rights and obligations; and as otherwise permitted by law.

11. Additional Disclosures for Residents of the European Union (EU) and the United Kingdom (UK)

This section provides additional information for residents of the EU and UK.

Data Transfers

As a US company, most of our operations are conducted in the United States and in order to provide the Service, personal information will be processed in the United States, where laws regarding processing of personal information may be less stringent than the laws in your country. We provide appropriate protections for cross-border transfers as required by applicable law for international data transfers. With respect to transfers originating from the European Economic Area, we implement the standard contractual clauses approved by the European Commission.

Retention of Your Personal Information

We retain personal information for as long as necessary to fulfill the purposes for which the information was collected; as needed to address tax, corporate compliance, employment, litigation, and other legal rights and obligations; and as otherwise permitted by law.

Legal Basis for Processing Your Personal Information

Where required, we have several different legal grounds on which we collect and process your personal information for the purposes set out in the Our Use of Personal Information section above, including: (i) as may be necessary to perform a contract with you; (ii) as necessary to comply with a legal obligation; (iii) consent (where consent has been provided as appropriate under applicable law); and (iv) as necessary for our legitimate interests (such as when we act to maintain our business generally, including maintaining the safety and security of the Service).

Automated Decision-Making

We do not use automated decision-making without human intervention, including profiling, in a way that produces legal effects concerning you or that otherwise significantly affects you.

Your Rights

As available and except as limited under applicable law, if you reside in the EU or the UK, you have the rights described below:

  • Access. You have the right to request a copy of the personal information we are processing about you, which we will provide to you in electronic form.
  • Rectification. You have the right to require that any incomplete or inaccurate personal information that we process about you be amended.
  • Deletion. You have the right to request that we delete personal information that we process about you, unless, for example, we are required to retain such information to comply with a legal obligation or to establish, exercise, or defend a legal claim. 
  • Restriction. You have the right to request that we restrict our processing of your personal information where: (i) you believe such data to be inaccurate; (ii) our processing is unlawful; or (iii) we no longer need to process such data for a particular purpose, but where we are not able to delete the data due to a legal or other obligation or because you do not want us to delete it.
  • Portability. You have the right to request that we transmit your personal information that we hold to another data controller.
  • Objection. Where the legal justification for our processing of your personal information is in our legitimate interest, you have the right to object to such processing on grounds relating to your circumstances. We will abide by your request unless we have compelling legitimate grounds for the processing which override your interests and rights, or if we need to continue to process the data to establish, exercise, or defend a legal claim.
  • Withdrawing Consent.  If you have consented to our processing of your personal information, you have the right to withdraw your consent at any time, free of charge. Please note that if you withdraw your consent, this will not affect the lawfulness of our use and processing of your information based on your consent prior to when you withdraw your consent or processing of your information based on other legal bases.

Some rights may be limited, and we may need to retain certain personal information, as required or permitted by applicable law. To inquire about or exercise the rights listed above, at any time, contact us at support@oracacao.com with the subject line “EU Privacy” so that we may direct your email to the right team. We will respond to your request consistent with applicable law.

If you feel that your request or concern was not satisfactorily resolved by us, you have the right to lodge a complaint with your local data protection authority.

12. Links to Other Websites

For your convenience, we may link to third-party sites and services, or otherwise display third-party content through our Site to provide increased value to our visitors. We have no control over these linked sites, each of which has separate privacy and data collection policies and practices independent from us. As such we have no responsibility or liability for these independent policies or actions and are not responsible for the privacy practices or the content of any such websites. Please note that these other sites may send their own cookies to users, collect data, or solicit personal information, and we encourage you to review their policies before engaging with these third-party sites.

13. Effective Date and Changes to This Privacy Policy

This Privacy Policy is effective as of the date at the top of this policy. Ora has the discretion to update this Privacy Policy at any time. When we do, we will revise the effective date at the top of this page. We encourage users to frequently check this page for any changes and to stay informed about how we are helping to protect the personal information we collect, especially before you provide information, and particularly personal information, directly to us through the Service. In the event of a material change to this Privacy Policy, we will provide a message through our website or via email informing you of the change.

14. How to Contact Us

If you have any questions about this Privacy Policy or the Service, please contact us at Ora Cacao Customer Support Center or:

E-Mail: support@oracacao.com

Phone: 707-861-8504

Address: 9101 Graton Rd, Suite 102

Graton, CA 95444

Looking for more?

  • Refunds & Shipping
  • Terms of Service
  • Help Center