Privacy Policy

Last updated: April 2026

This Privacy Policy explains how Aura3AM ("we", "us", "our") collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR).

1. Data Controller

Aura3AM
Poland
Email: sunny@aura3am.eu

2. Data We Collect

  • Order data: name, address, email, phone number, payment information
  • Account data: email address and password (if you create an account)
  • Usage data: IP address, browser type, pages visited (via cookies)

3. Purpose & Legal Basis

  • To process and fulfill your orders (contract performance – Art. 6(1)(b) GDPR)
  • To comply with legal obligations such as tax and accounting (Art. 6(1)(c) GDPR)
  • To send marketing communications, only with your consent (Art. 6(1)(a) GDPR)
  • To improve our website and services (legitimate interest – Art. 6(1)(f) GDPR)

4. Data Sharing

We share your data only with trusted third parties necessary to operate our store, including:

  • Shopify Inc. (e-commerce platform)
  • InPost (delivery)
  • Payment processors
  • Google (analytics and advertising)

We do not sell your personal data.

5. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described above, or as required by law (e.g., 5 years for tax records).

6. Your Rights

Under GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Object to or restrict processing
  • Data portability
  • Withdraw consent at any time

To exercise your rights, contact us at: sunny@aura3am.eu

7. Cookies

We use cookies to improve your browsing experience and for analytics. You can manage cookie preferences in your browser settings.

8. Complaints

You have the right to lodge a complaint with the Polish data protection authority (UODO): uodo.gov.pl