This page is maintained by Aurélia to explain how we handle personal data on aurelia.com. It is not a legal certification. If you need a localised legal opinion for your jurisdiction, please consult an attorney.
1. Who we are
Aurélia ("we", "us", "our") operates this online store. For any privacy enquiry you can contact us at privacy@aurelia.com or through the contact page.
2. Data we collect
We only collect what is necessary to run the store and fulfil your orders:
- Identity & contact: name, email, phone, billing and shipping address.
- Order data: products purchased, price, payment method, order history.
- Payment data: processed directly by our payment providers (Shopify Payments, Stripe, PayPal, Apple Pay, Google Pay). We never store full card numbers.
- Technical data: IP address, browser, device, pages visited, referrer.
- Marketing data: newsletter subscription status and preferences, if you opt in.
3. Why we use your data (legal bases)
- Performance of a contract — to process, ship and support your orders.
- Legal obligation — to keep tax, invoicing and consumer-protection records.
- Legitimate interest — to prevent fraud, secure the store and improve our products.
- Consent — for marketing emails and non-essential cookies. You can withdraw consent at any time.
4. Who we share data with
We share data only with processors that help us run the store, under appropriate data-processing agreements:
- Shopify Inc. — store and checkout infrastructure.
- Payment providers — Shopify Payments, Stripe, PayPal, Apple Pay, Google Pay.
- Shipping carriers — DHL, UPS, FedEx, national postal services and equivalent.
- Email service providers — for order confirmations and newsletters (if opted in).
- Analytics — privacy-friendly analytics to understand site performance.
We never sell your personal data.
5. International transfers
Some of our processors are located outside the European Economic Area, the United Kingdom, Brazil or your country of residence. When this happens we rely on Standard Contractual Clauses approved by the European Commission or equivalent safeguards required by your local privacy law.
6. How long we keep your data
- Order & invoicing data: up to 10 years (statutory accounting retention).
- Account data: until you ask us to delete it.
- Marketing data: until you unsubscribe.
- Technical logs: up to 12 months.
7. Your rights
Depending on where you live, you may have the following rights:
- GDPR (EU) / UK GDPR: access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with your supervisory authority.
- CCPA / CPRA (California): right to know, delete, correct, opt out of sale or sharing of personal information, and non-discrimination. We do not sell personal information.
- LGPD (Brazil): confirmation of processing, access, correction, anonymisation, portability, deletion and information about sharing.
- PIPEDA (Canada), APPI (Japan), POPIA (South Africa), Privacy Act (Australia) and equivalent laws — comparable rights of access, correction and deletion.
To exercise any right, email privacy@aurelia.com. We respond within 30 days.
8. Children
Our store is not directed to children under 16. We do not knowingly collect data from minors.
9. Security
All traffic is encrypted via TLS. Payments are processed by PCI-DSS Level 1 certified providers. We restrict internal access on a need-to-know basis. No method of transmission over the Internet is 100% secure, so we cannot guarantee absolute security.
10. Changes
We may update this policy. The latest version is always available on this page with a revised "Last updated" date.