1. Who We Are

Aura Furnitures is the data controller responsible for your personal data.

Business Name: Aura Furnitures
Country: United Kingdom
Website: www.aurafurn.com
Email: info@aurafurn.com
Phone: 0044 7414 618 744
WhatsApp: +44 7414 618 744

2. What Personal Data We Collect

We collect the following categories of personal data when you interact with our Website or place an order:

2.1 Information You Provide Directly

• Identity data: First name, last name
• Contact data: Email address, phone number, billing and delivery address
• Payment data: Payment card details (processed securely — we do not store full card numbers)
• Order data: Products purchased, order history, preferences
• Communications data: Messages sent to us via email, WhatsApp, or contact forms
• Account data: Username and password if you create an account

2.2 Information Collected Automatically

• Technical data: IP address, browser type and version, device type, operating system
• Usage data: Pages visited, time spent on pages, links clicked, referring URLs
• Cookie data: Data collected via cookies and similar tracking technologies (see Section 7)
• Location data: General geographic location based on IP address

2.3 Information from Third Parties

• Payment processors (e.g. Shopify Payments, PayPal) for transaction verification
• Analytics providers (e.g. Google Analytics) for website performance data
• Advertising platforms for marketing campaign performance

3. How We Use Your Personal Data

We use your personal data for the following purposes, each supported by a lawful basis under UK/EU GDPR:

• ✅ Processing and fulfilling your orders — Lawful basis: Contract performance
• ✅ Processing payments securely — Lawful basis: Contract performance
• ✅ Sending order confirmations, dispatch notifications, and tracking information — Lawful basis: Contract performance
• ✅ Providing customer support — Lawful basis: Contract performance / Legitimate interests
• ✅ Sending marketing emails and promotions (where you have opted in) — Lawful basis: Consent
• ✅ Improving our Website and services — Lawful basis: Legitimate interests
• ✅ Analysing website traffic and user behaviour — Lawful basis: Legitimate interests
• ✅ Complying with legal obligations — Lawful basis: Legal obligation
• ✅ Preventing fraud and ensuring website security — Lawful basis: Legitimate interests / Legal obligation
• ✅ Personalising your shopping experience — Lawful basis: Consent / Legitimate interests

4. How We Share Your Personal Data

We do not sell your personal data. We may share your data with the following trusted third parties, strictly for the purposes described above:

• Shopify Inc. — our e-commerce platform provider (data processed in accordance with Shopify’s privacy policy)
• Payment processors (e.g. Shopify Payments, PayPal, Stripe) — for secure payment processing
• Courier and logistics partners — for order fulfilment and delivery (name and address shared only)
• Google Analytics / Google Ads — for website analytics and advertising performance
• Email marketing platforms — for sending marketing communications (where consented)
• Legal and regulatory authorities — where required by law

All third parties are required to handle your data securely and in accordance with applicable data protection law. We do not allow third parties to use your data for their own marketing purposes.

5. International Data Transfers

As a UK-based business with warehouses and logistics partners in Europe, the USA, and Australia, your personal data may be transferred to and processed in countries outside the UK and EEA. Where such transfers occur, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the UK ICO or European Commission
• Transfers to countries with an adequacy decision from the UK or EU
• Binding Corporate Rules where applicable

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements:

• Order and transaction data: Retained for 7 years for tax and accounting compliance
• Customer account data: Retained for the duration of your account plus 2 years after closure
• Marketing data: Retained until you withdraw consent or unsubscribe
• Website analytics data: Retained for up to 26 months
• Customer support communications: Retained for 3 years

After the applicable retention period, your data is securely deleted or anonymised.

7. Cookies & Tracking Technologies

We use cookies and similar tracking technologies on our Website. Cookies are small text files stored on your device that help us provide a better experience. We use the following types of cookies:

• Essential cookies: Required for the Website to function (e.g. shopping cart, login sessions). Cannot be disabled.
• Analytics cookies: Help us understand how visitors use our Website (e.g. Google Analytics). Used with your consent.
• Marketing cookies: Used to show you relevant advertisements on other websites. Used with your consent.
• Preference cookies: Remember your settings and preferences for a better experience.

You can manage your cookie preferences through your browser settings or our cookie consent tool. Withdrawing consent for non-essential cookies will not affect your ability to use our Website or place orders.

8. Your Privacy Rights

Depending on where you are based, you have the following rights over your personal data:

8.1 UK & EU Residents (UK GDPR / EU GDPR)

To exercise any of these rights, contact us at info@aurafurn.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk (UK) or your local Data Protection Authority (EU).

8.2 US Residents (CCPA / State Privacy Laws)

If you are a California resident or resident of another US state with applicable privacy laws, you have the right to:

• ✅ Know what personal data we collect, use, and share
• ✅ Delete your personal data (subject to certain exceptions)
• ✅ Opt out of the sale or sharing of your personal data for targeted advertising
• ✅ Non-discrimination — we will not discriminate against you for exercising your privacy rights
• ✅ Correct inaccurate personal data we hold about you
• ✅ Limit the use of sensitive personal information

To exercise your US privacy rights or opt out of data sharing, please visit our Your Privacy Choices page or contact us at info@aurafurn.com.

9. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and our Website
• Secure payment processing via PCI DSS-compliant payment providers
• Access controls limiting who within our organisation can access personal data
• Regular security reviews of our systems and processes

While we take all reasonable steps to protect your data, no method of transmission over the internet is 100% secure. If you believe your data has been compromised, please contact us immediately.

10. Children’s Privacy

Our Website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it promptly.

11. Marketing Communications

We will only send you marketing emails or promotional communications if you have opted in to receive them. You can unsubscribe at any time by:

• Clicking the “Unsubscribe” link in any marketing email
• Contacting us at info@aurafurn.com
• Updating your preferences in your account settings

Unsubscribing from marketing communications will not affect transactional emails related to your orders.

12. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for the privacy practices or content of external websites. We encourage you to review the privacy policies of any third-party websites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The “Last Updated” date at the top of this page will reflect the most recent revision. We encourage you to review this policy periodically. Continued use of our Website following any changes constitutes your acceptance of the updated policy.