Politique de confidentialité
PRIVACY POLICY
Last updated: 19 July 2026
THE AURA CO. (“we”, “our”, “us”) operates this website and online store (the “Services”). We are committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, store, share and protect your personal data when you visit our website, place an order, create an account, or otherwise interact with us.
Depending on where you are located, your personal data is processed in accordance with applicable privacy legislation, including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), the Data Protection Act 2018, and other applicable privacy laws. THE AURA CO. is the data controller of your personal data where applicable.
PERSONAL DATA WE COLLECT
We may collect and process the following categories of personal data:
Contact Information
- Name
- Billing address
- Delivery address
- Email address
- Telephone number
Order & Transaction Information
- Products purchased
- Order history
- Payment method
- Transaction confirmations
Payment Information
Payments are processed securely through Shopify and its authorised payment providers.
We do not store your full payment card details.
Account Information
If you create an account, we collect:
- Username
- Password
- Account preferences
Communications
Information you provide when contacting us, including:
- Customer support enquiries
- Emails
- Messages
- Reviews submitted by you
Technical & Usage Information
We may automatically collect:
- IP address
- Browser type
- Device information
- Operating system
- Time zone
- Pages visited
- Website interactions
- Cookie identifiers
- Diagnostic information
HOW WE COLLECT YOUR DATA
We collect personal data:
- Directly from you when you place an order
- When you create an account
- When you contact us
- When you subscribe to marketing
- Automatically through cookies and similar technologies
- From Shopify and authorised payment processors
- From delivery providers where necessary to fulfil your order
- From fraud prevention and security services where appropriate
LAWFUL BASIS FOR PROCESSING
Where required under applicable law, we rely upon one or more of the following lawful bases:
Contractual Necessity
To process payments, fulfil your orders and provide customer support.
Legal Obligation
To comply with tax, accounting, consumer protection and regulatory requirements.
Legitimate Interests
To operate, improve, secure and develop our website and business, prevent fraud and respond to customer enquiries.
Consent
Where required, such as for marketing communications or certain cookies.
You may withdraw your consent at any time.
HOW WE USE YOUR PERSONAL DATA
We use your personal data to:
- Process and fulfil your orders
- Arrange delivery
- Process returns, exchanges and refunds
- Respond to customer enquiries
- Provide customer support
- Send order confirmations and updates
- Send marketing communications where you have opted in
- Improve our website, products and services
- Prevent fraud and maintain website security
- Comply with legal and regulatory obligations
MARKETING
If you choose to receive marketing communications, we may send you emails about new products, promotions, launches and updates from THE AURA CO.
You may unsubscribe at any time by:
- Clicking the unsubscribe link within our emails; or
- Contacting us at guidance@theauraco.uk
We do not sell your personal data.
We do not sell or share your personal information for cross-context behavioural advertising.
HOW WE SHARE YOUR DATA
We may share your information with trusted third parties where necessary, including:
- Shopify
- Payment providers
- Delivery and fulfilment partners
- Website hosting providers
- IT service providers
- Fraud prevention providers
- Professional advisers including accountants and legal advisers
- Government authorities where required by law
All third parties are required to process your personal data securely and lawfully.
SHOPIFY
Our website is hosted by Shopify Inc.
Shopify processes personal data to provide and improve the Services.
Your information may be transferred outside the United Kingdom, European Economic Area or your country of residence. Where required by law, Shopify uses appropriate safeguards including Standard Contractual Clauses and other approved transfer mechanisms.
For more information, please see Shopify’s Privacy Policy:
INTERNATIONAL DATA TRANSFERS
Where personal data is transferred outside your country of residence, we ensure appropriate safeguards are implemented where required under applicable law, including Standard Contractual Clauses or equivalent legal mechanisms designed to protect your information.
DATA RETENTION
We retain your personal data only for as long as reasonably necessary to:
- Fulfil the purposes for which it was collected
- Comply with legal obligations
- Meet tax and accounting requirements
- Resolve disputes
- Enforce our legal agreements
Order information is generally retained for a minimum of six (6) years for accounting and tax purposes.
YOUR RIGHTS
Depending on where you live, you may have rights including:
- Access to your personal data
- Correction of inaccurate information
- Deletion of personal data
- Restriction of processing
- Objection to processing
- Data portability
- Withdrawal of consent where processing relies upon consent
To exercise your rights, please contact:
We may request proof of identity before responding.
ADDITIONAL RIGHTS FOR CALIFORNIA RESIDENTS
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including the right to:
- Know what personal information we collect
- Access your personal information
- Request correction of inaccurate information
- Request deletion of your personal information
- Request information regarding how your information is used
THE AURA CO. does not sell or share personal information as those terms are defined under California law.
CANADIAN CUSTOMERS
If you are located in Canada, your personal information is collected, used and disclosed in accordance with applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA), where applicable.
AUSTRALIAN CUSTOMERS
If you are located in Australia, we handle your personal information in accordance with the Privacy Act 1988 (Cth), where applicable.
COMPLAINTS
If you are unhappy with how we process your personal data, please contact us first.
If you are located in the United Kingdom, you may also lodge a complaint with:
Information Commissioner’s Office (ICO)
If you are located elsewhere, you may have the right to contact your local privacy regulator.
COOKIES
We use cookies and similar technologies to:
- Operate our website
- Remember your preferences
- Improve website functionality
- Analyse website traffic
- Personalise your experience
- Maintain website security
Where required by law, we obtain your consent before placing non-essential cookies on your device.
You may manage your cookie preferences through our cookie banner (where available) or through your browser settings.
For more information, please see our Cookie Policy.
AUTOMATED DECISION MAKING
We do not use your personal data to make decisions based solely on automated processing that produce legal or similarly significant effects.
CHILDREN
Our Services are not intended for children.
We do not knowingly collect personal information directly from children.
Where applicable, this includes children under the age of 13 in the United States.
If we become aware that we have collected personal information from a child without appropriate consent where required by law, we will delete that information as soon as reasonably practicable.
SECURITY
We implement appropriate technical and organisational measures designed to safeguard your personal data against accidental loss, unauthorised access, alteration, disclosure or destruction.
However, no method of transmission over the internet or electronic storage can be guaranteed to be completely secure.
If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will comply with all applicable legal notification requirements.
CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time.
Any changes will be published on this page together with a revised “Last updated” date.
CONTACT
If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact:
THE AURA CO.
6 Nash Road
Willersey
WR12 7RG
United Kingdom
Email: guidance@theauraco.uk
THE AURA CO. is the data controller for the purposes of applicable data protection legislation.