Privacy Policy - THEAURABELLE

THEAURABELLE (“we”, “us”, “our”) is a London-registered fashion ecommerce brand (Company No. 15750318) operating from:

71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
470 Collingwood St, San Francisco, California 94117, USA

We respect your privacy and comply fully with the UK GDPR, Australian Privacy Act, PIPEDA (Canada) and CCPA/CPRA (California). This policy explains what personal data we collect, why we collect it, and how you can control it.

1. Information we collect

Identity: name, username, date of birth (optional)
Contact: email, telephone, billing & shipping addresses
Payment: credit-card hash, PayPal/Apple Pay ID (we never store full card numbers)
Transaction: order history, wish-list, returns
Technical: IP, browser, device, time-zone, cookie IDs
Marketing: email open/click data, ad-campaign source

2. Legal bases we rely on

Contract – to process & ship your order
Legitimate interest – fraud prevention, advertising analytics
Consent – sending newsletters or SMS promos
Legal obligation – tax & accounting records

3. How we use your data

Fulfil orders, returns, refunds
Send service emails (order updates, delivery tracking)
Personalise ads on Google, Meta, Pinterest (only if you consent)
Improve website speed, UX and product range
Comply with Google Shopping, payment-gateway and shipping-provider requirements

4. Who we share with

Payment gateways (Stripe, PayPal), couriers (DHL, USPS, Royal Mail), email platform (Klaviyo), review engine (Judge.me), advertising networks. All processors are GDPR/CCPA compliant and bound by data-processing agreements.

5. International transfers

Your data may be stored in the UK, EU, US or Canada. We use Standard Contractual Clauses or UK IDTA to safeguard non-EEA transfers.

6. Data retention

Orders & invoices: 7 years (UK HMRC / IRS rules)
Marketing consent: until you unsubscribe
Analytics logs: 26 months

7. Your rights

Access – receive a copy of your data within 30 days
Rectify – correct inaccurate information
Erase – request deletion where no legal obligation to retain
Portability – download order history in CSV
Opt-out – marketing emails (unsubscribe link in every message) or targeted ads via youradchoices.com
Do-Not-Sell / Share (CCPA) – we do not sell personal data; to limit targeted ads contact us below

8. Cookies & tracking

Essential cookies (cart, checkout) are always on. Analytics & marketing cookies require your consent. Manage settings anytime via the floating “🍪” icon.

9. Security

TLS 1.3 encryption, PCI-DSS v4.0 certified payment flow, daily backups, Web Application Firewall, least-privilege staff access.

10. Children

Our Site is not directed to children under 13. We do not knowingly collect data from minors.

11. Changes to this policy

We will post any material changes here and update the “Effective date”. Continued use of the Site constitutes acceptance.

12. Contact us

Data Protection Officer (DPO) – THEAURABELLE

Email: contact@theaurabelle.com
Phone/WhatsApp: +44 7853 753207
Post: 71-75 Shelton Street, London WC2H 9JQ, United Kingdom

You also have the right to lodge a complaint with the UK ICO (ico.org.uk) or your local supervisory authority.