Privacy policy
Last updated: October 2026
1. Introduction & Our Commitment
Aurielle ("Aurielle", "we", "us" or "our") operates auriellelondon.store, an online shop serving customers in the United Kingdom. This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you visit our website, place an order or contact us. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Aurielle acts as the data controller of personal information collected for its own business purposes. We do not sell, rent or trade customers' personal information to data brokers. We share information with service providers and advertising partners only as described in this Policy and subject to applicable law.
2. Information We Collect
When you shop with us or contact our team, we may collect your name, email address, telephone number, billing and delivery addresses, order details, product preferences and correspondence. Payment providers process card and payment credentials; we receive payment confirmations, transaction identifiers and limited payment-related information, but do not store full payment card details on our own systems. When you browse our website, we and authorised technology providers may collect IP addresses, browser and device information, cookie identifiers, approximate location, referral information, pages visited, website interactions and technical error logs. We may also receive relevant information from payment, delivery and fraud-prevention partners.
3. How We Use Your Information and Our Legal Bases
We use personal information to process payments, confirm purchases, fulfil orders, arrange deliveries, handle returns and provide customer support where necessary to perform our contract with you or take steps you request before entering into it. We use information to maintain website security, prevent fraud, improve operations, investigate service issues and analyse business performance where our legitimate interests apply and are not overridden by your rights. We retain information and respond to legally required requests to comply with legal obligations. We send optional promotional messages and use non-essential marketing technologies only where consent or another lawful basis permitted by UK law applies. Where we rely on consent, you may withdraw it at any time without affecting processing already carried out lawfully. We may use aggregated or anonymised information to understand website performance and improve our services.
4. Cookies & Tracking Technologies
Our Shopify-powered website uses cookies and similar technologies to support essential functions such as shopping baskets, checkout, authentication, security and site preferences. We may also use analytics and advertising technologies associated with Meta, Google Ads and TikTok to measure website performance and advertising effectiveness and, where permitted, personalise advertising. We provide information about non-essential cookies and request consent where required by the Privacy and Electronic Communications Regulations (PECR) before activating those technologies. You can manage or withdraw your cookie preferences using the website's consent controls, where available, or your browser settings. Blocking essential cookies may affect site functionality. Cookie categories, providers and durations should be reflected accurately in the consent interface used on our website.
5. Order Fulfilment & Third-Party Services
We use Shopify to host our online shop and support website, ordering and checkout functions. Payments may be handled by Shop Pay and payment networks or wallet providers including Visa, Mastercard, American Express, Diners Club, Discover, Apple Pay and Google Pay, subject to the methods offered at checkout. Such providers may process payment-related information under their own privacy notices. We work with inventory, packing and delivery partners to prepare and deliver orders. Our fulfilment network may operate through centres in the United States, China and Germany, allowing orders to be routed according to stock availability and logistics efficiency. The same quality-control standards apply to products handled through each location. Fulfilment and delivery partners receive the information reasonably necessary to complete their work, such as a recipient's name, address, contact details and order information. We may also use Meta, Google Ads and TikTok for advertising measurement and campaigns, subject to the applicable privacy and cookie requirements. Partners may act as processors or independent controllers depending on the service and processing activity.
6. Who We Share Information With
We may disclose relevant personal information to our e-commerce platform, payment processors, fraud-prevention services, customer-support systems, shipping and fulfilment providers, IT and security suppliers, professional advisers and advertising or analytics partners as necessary for the purposes described above. We may also disclose information if required by law, to protect legal rights, or in connection with a lawful business transfer. We do not disclose more information than reasonably necessary for the relevant purpose, and we take appropriate steps to assess the privacy and security arrangements of providers acting on our behalf. Some advertising partners may use information for their own purposes as explained in their privacy notices; such disclosures must be reflected in our consent settings and actual business practices.
7. Data Retention
We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including order administration, customer support, record keeping, dispute resolution, fraud prevention and applicable tax or accounting obligations. Retention periods vary according to the type of record and legal requirements; certain financial and transaction records may need to be retained for several years. When information is no longer needed, we delete it or anonymise it where practicable. If you ask us to erase information, we will assess the request under applicable law and explain any records we must retain.
8. Your Rights Under UK Data Protection Law
Subject to legal conditions and exemptions, you may have the right to be informed about how your information is used, access your personal information, correct inaccurate information, request erasure, restrict processing, object to certain processing (including direct marketing), receive portable information in applicable circumstances and withdraw consent at any time. You also have rights relating to decisions made solely by automated means where the relevant legal rules apply. To exercise your rights, email support@auriellelondon.store with the subject line "Data Privacy Request". We aim to acknowledge requests within 48 hours and normally respond without undue delay and within one month, subject to any legally permitted extension. We may ask for reasonable information to verify your identity before acting on a request.
9. International Data Transfers
Some technology, payment and operational partners may process or access personal information outside the United Kingdom. Where a transfer is subject to UK GDPR international transfer restrictions, we will rely on a valid UK adequacy regulation, appropriate contractual safeguards such as the UK International Data Transfer Agreement or UK Addendum, or another lawful transfer mechanism where applicable. We will assess relevant transfer risks as required. The Information Commissioner's Office (ICO) is the UK's independent data protection regulator; it does not individually approve every international data transfer.
10. Data Security
We take reasonable technical and organisational measures intended to protect personal information against unauthorised access, alteration, loss or disclosure. These include secure connections using SSL/TLS where appropriate, access controls and security features made available through Shopify and relevant service providers. No online transmission or storage system is completely risk-free. We investigate suspected personal data breaches and notify affected individuals and the ICO when required by applicable law.
11. Children's Privacy
Our shop is not directed at children under the age of 16, and we do not knowingly seek to collect their personal information for independent purchases or promotional profiling. This is our audience policy and is not a statement of the UK statutory age of digital consent. If you believe a child has supplied personal information to us inappropriately, please contact support@auriellelondon.store so that we can review the situation and take appropriate action.
12. Changes to This Policy
We may update this Privacy Policy to reflect changes in our services, technology, business operations or legal requirements. When we do, we will amend the "Last updated" date shown above and publish the revised version on this page. If changes materially affect how we use personal information, we will provide any additional notice or obtain any consent required by law. Your use of the website does not remove your statutory data protection rights.
13. Contact Us & Supervisory Authority
For questions about this Privacy Policy, our handling of personal information or a data protection request, contact Aurielle at support@auriellelondon.store. Our website is auriellelondon.store. Our customer service team aims to respond to general enquiries within 24 hours on business days, Monday to Friday. If you are dissatisfied with how we handle your personal information, you may complain to the Information Commissioner's Office (ICO) at https://ico.org.uk. We would welcome the opportunity to address your concern directly first, but you do not need to contact us before making a complaint to the ICO.