Who is responsible for your information
The individual seller identified below is the data controller trading as Aura Cards. Questions or requests about personal information should be sent to the customer-service email below.
Information we collect
- Account and contact information, including email address and sign-in session details.
- Order and delivery information, including name, address, phone number, purchased items, totals, delivery service and tracking number.
- Payment references and status supplied by Stripe. Full payment-card details are handled by Stripe and are not stored by Aura Cards.
- Technical and security information needed to operate the site, prevent abuse and investigate errors. Rate-limit identifiers are one-way hashed before storage.
- Messages and evidence you send when asking for support, a return or a refund.
Why we use it
- To provide checkout, fulfil orders, send sign-in codes and manage returns under our contract with you.
- To prevent fraud, secure the service, reconcile payments and improve reliability where this is in our legitimate interests.
- To keep accounting, tax, consumer-rights and dispute records where required by law.
- To respond to enquiries and establish, exercise or defend legal claims.
Who receives it
We share only what is needed with service providers that help operate the store: Cloudflare for hosting and storage, Stripe for payments, Mailgun for transactional sign-in codes, order confirmations and dispatch messages, and Royal Mail or another disclosed carrier for delivery and tracking. Information may also be disclosed where legally required or necessary to protect legal rights.
How long we keep it
Order and financial records may be retained for up to six years where needed for tax, accounting, consumer and legal purposes. Security rate-limit records are automatically removed after no more than two days. Other account, support and operational information is kept only for as long as needed for the purpose described or an applicable legal obligation.
International processing
Some service providers may process information outside the UK. Where that happens, we rely on the provider's applicable lawful transfer mechanism and contractual safeguards.
Website fonts
Your browser requests fonts from Google Fonts to display this website. Google receives your IP address and technical request information when these fonts load. You can read more in Google Fonts' privacy information.
Your rights
Depending on the circumstances, you can ask for access, correction, deletion or restriction of your personal information, object to certain uses, or request a portable copy. You can also complain to the UK Information Commissioner's Office. Contact us first if you would like us to investigate a concern.
Cookies
The site uses essential storage needed for the shopping bag and signed-in session. These features are necessary to provide the service. Aura Cards does not currently use advertising or marketing cookies.