Privacy Policy

Last updated: 1 April 2025

1. Who We Are

Aura & Co Ltd is registered in England and Wales. Our registered address is 14 Marylebone Lane, London, W1U 2ND. We are the data controller for your personal data. Questions? Email: theauraofficial10@auracofficial.com

2. Data We Collect

Data you provide directly

• Account data: name, email address, encrypted password
• Order data: billing/delivery address, order history, payment method type
• Communications: messages sent via email, live chat, or contact forms
• Marketing preferences: whether you have opted in to our newsletter

Data collected automatically

• IP address, browser type, device type, operating system
• Pages visited, time spent, clicks, referral source
• Cookie identifiers — see our Cookie Policy

3. How We Use Your Data

Purpose	Data Used
Processing and fulfilling orders	Name, address, order details, payment info
Creating and managing your account	Name, email, password
Sending order and shipping updates	Email, order details
Responding to customer enquiries	Name, email, message content
Sending marketing emails with consent	Email, purchase history, browsing data
Improving our website and services	Anonymised analytics data
Fraud prevention and security	IP address, order data

4. Legal Basis for Processing

• Contract performance: to process your orders and manage your account
• Legitimate interests: fraud prevention and service improvement
• Consent: to send marketing communications — withdraw any time
• Legal obligation: tax, accounting and regulatory compliance

5. Sharing Your Data

We do not sell your data. We share it only with trusted providers who help us operate:

• Stripe, PayPal, Klarna: secure payment processing
• Royal Mail, DPD: order fulfilment and delivery
• Klaviyo: transactional and marketing emails
• Google Analytics: anonymised website analytics

6. Cookies

We use cookies and similar tracking technologies. Manage your preferences via our cookie banner or browser settings. See our Cookie Policy for full details.

7. Your Rights (UK GDPR)

• Access: request a copy of your data
• Rectification: correct inaccurate or incomplete data
• Erasure: request deletion, subject to legal obligations
• Restriction: limit how we use your data
• Portability: receive your data in a machine-readable format
• Object: object to processing for legitimate interests or direct marketing
• Withdraw consent: at any time for consent-based processing

To exercise these rights, contact theauraofficial10@auracofficial.com. We respond within 30 days. You may also complain to the ICO at ico.org.uk.

8. Data Retention

We retain data only as long as necessary. Order data is kept for 7 years (legal/tax requirement). Account data is deleted upon request, subject to any outstanding obligations.

9. Contact Us

Data Privacy Team — Aura & Co
14 Marylebone Lane, London, W1U 2ND
Email: theauraofficial10@auracofficial.com
We aim to respond within 2 business days.