Privacy Policy - Aureafides

Aureafides ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect your information when you use our website and services. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The data controller responsible for your personal data is Aureafides, a UK-based business. You can contact us at support@aureafides.co.uk or via our Contact page.

2. Information We Collect

We may collect and process the following data about you:

Identity data: name, title.
Contact data: email address, telephone number, billing and delivery address.
Transaction data: details of orders, payments and purchases.
Technical data: IP address, browser type, device information, time zone, pages visited.
Usage data: how you use our website and services.
Marketing and communications data: your preferences in receiving marketing (e.g. newsletter sign-up).

3. How We Use Your Information

We use your data to:

Process and fulfil your orders and manage your account.
Communicate with you about your orders and our services.
Send you marketing communications (only where you have opted in; you can unsubscribe at any time).
Improve our website, products and customer service.
Comply with legal obligations and protect our rights.
Prevent fraud and ensure security.

Our legal bases for processing under UK GDPR include: performance of a contract with you, consent, and our legitimate interests (e.g. improving our services and fraud prevention).

4. Sharing Your Information

We may share your data with:

Payment processors (e.g. Stripe) to process payments.
Delivery and courier companies to fulfil orders.
Service providers who assist our business (e.g. hosting, email) under strict data processing agreements.
Regulators or law enforcement when required by law.

We do not sell your personal data to third parties.

5. Data Retention

We keep your data only for as long as necessary: for example, order and account data for the duration of our relationship and for a period thereafter to comply with legal and tax obligations (typically up to 7 years for financial records in the UK). Marketing data is retained until you unsubscribe or ask us to delete it.

6. Your Rights (UK)

Under UK GDPR you have the right to:

Access your personal data (subject access request).
Rectification of inaccurate data.
Erasure ("right to be forgotten") in certain circumstances.
Restrict or object to processing in certain circumstances.
Data portability where applicable.
Withdraw consent at any time where we rely on consent.
Lodge a complaint with the Information Commissioner's Office (ICO).

To exercise any of these rights, contact us at support@aureafides.co.uk.

7. Cookies

Our website uses cookies and similar technologies to improve functionality, analyse usage and support marketing. You can manage your cookie preferences via your browser settings. Essential cookies are necessary for the site to function.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. No transmission over the internet is completely secure; we encourage you to use strong passwords and keep your account details safe.

9. International Transfers

Your data is primarily processed in the UK/EEA. If we transfer data outside the UK, we ensure appropriate safeguards (e.g. adequacy decisions or standard contractual clauses) are in place as required by UK law.

10. Changes

We may update this Privacy Policy from time to time. The "Last updated" date at the top will be revised, and we encourage you to review this page periodically.

11. Contact

For any questions about this Privacy Policy or your personal data, please contact us at support@aureafides.co.uk or via our Contact page.