Privacy Policy

This Privacy Policy explains how Aura CC("we", "us") collects, uses and protects your personal data when you visit our website, contact us, or place an order. We are the data controller for the purposes of the UK GDPR and the Data Protection Act 2018.

What we collect

• Newsletter: your email address when you subscribe.
• Orders: your name, email, shipping address and order details (payment is processed by Stripe — we never see or store your full card number).
• Customer service chat: the messages you send to our assistant "Aura", stored to help us support you and improve our service.
• Technical data: basic usage data and cookies necessary for the site and cart to work.

How we use it & lawful basis

• To fulfil and deliver your orders and provide customer support (performance of a contract).
• To send you marketing emails where you have subscribed (consent — you can withdraw it anytime).
• To operate, secure and improve our website (legitimate interests).
• To comply with legal and accounting obligations (legal obligation).

Who we share it with

We only share data with trusted providers who help us run the store: Stripe (payments), Supabase (secure database hosting), Vercel (website hosting) and Anthropic (powering our chat assistant). We never sell your personal data.

Retention

We keep order records for as long as required by law (typically up to 6 years for tax purposes). Newsletter data is kept until you unsubscribe. Chat transcripts are kept only as long as needed for support and quality, and then deleted.

Your rights

You have the right to access, correct, delete or port your data, to object to or restrict processing, and to withdraw consent at any time. You may also complain to the UK Information Commissioner's Office (ICO). To exercise any right, email us at auraccunderwear@gmail.com.

Contact

Questions about this policy or your data? Email auraccunderwear@gmail.com.