Privacy Policy

This Privacy Policy explains how AURAE Wellness ("we", "us", "our") collects and processes your personal data when you visit our website or contact us. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

AURAE Wellness is the data controller for the personal data described in this policy.

• Business address: 41 Chapel Green, Kings Heath, Northampton, NN5 7NF, United Kingdom
• Email: privacy@auraewellness.co.uk
• General enquiries: hello@auraewellness.co.uk

2. What personal data we collect

We collect personal data in the following ways:

Information you provide directly

• Contact form: your name, email address, optional phone number, subject, and message content.
• Newsletter signup: your email address.
• WhatsApp and email enquiries: whatever information you choose to share with us in those communications.
• Telephone enquiries: your phone number and the details of your enquiry.

Information collected automatically

• Analytics data: if you consent, we use Google Analytics 4 to collect anonymised information about how visitors use our site — pages viewed, approximate location, device type, and referral source.
• Cookies and similar technologies: see our Cookie Policy for details.

3. How we use your personal data

• To respond to your enquiries
• To provide customer support
• To send you newsletter emails (if subscribed)
• To improve our website and services
• To comply with legal obligations
• To prevent fraud and abuse

We do not sell or rent your personal data to third parties. We do not use your data for automated decision-making.

4. Our legal basis for processing

• Consent — for newsletter subscriptions and analytics cookies. You may withdraw consent at any time.
• Legitimate interest — to respond to enquiries and improve our services.
• Legal obligation — to retain records required by tax or consumer law.

5. Who we share your data with

We use a small number of carefully selected third-party services to run our website and communicate with you. Each is GDPR-compliant and used only for the specific purpose stated:

• Web3Forms — receives contact form submissions and forwards them to our email inbox.
• Brevo — newsletter email service provider (EU-based).
• Google Analytics 4 — anonymised website analytics (only with your consent).
• Google Workspace — business email hosting.
• Netlify or Cloudflare — website hosting and content delivery.
• WhatsApp (Meta) — when you choose to contact us via WhatsApp.

We may also share your data if required by law, or to protect our legal rights.

6. Cookies

We use essential cookies to make our website function. With your consent, we also use analytics cookies. Full details are in our Cookie Policy.

7. How long we keep your data

• Contact enquiries: up to 3 years after the last communication.
• Newsletter subscriptions: until you unsubscribe, plus 6 months.
• Order records (when applicable): 6 years to comply with tax requirements.
• Analytics data: 14 months (Google Analytics default).

8. Your rights

Under the UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (in certain circumstances)
• Request restriction of processing
• Object to processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, email privacy@auraewellness.co.uk. We will respond within one month.

9. Security

We take reasonable technical and organisational measures to protect your personal data, including HTTPS encryption across our website, secure hosting, and access controls. No transmission over the internet is completely secure; we cannot guarantee absolute security.

10. Children

Our website and products are not directed at children under 16. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top will reflect any changes. Material changes will be communicated where reasonably possible.

12. Complaints

If you have concerns about how we handle your data, please contact us first at privacy@auraewellness.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.