Privacy policy

PRIVACY POLICY
Effective Date: September 7, 2026

Aurelie Shop ("we", "us", "our") respects your privacy. This Policy explains what personal data we collect through aurelieshop.com, how we use it, and the rights you have. For the purposes of the EU/UK General Data Protection Regulation (GDPR), Aurelie Shop is the data controller. Our contact details are at the end of this Policy.

1. WHAT WE COLLECT
- Information you provide: name, email, delivery and billing address, order details, and any messages you send us.
- Payment information: processed securely by our payment providers; we do not store full card numbers.
- Automatic data: IP address, device and browser type, pages viewed, and general location.
- Cookies and similar technologies (see our Cookie Policy).

2. HOW AND WHY WE USE YOUR DATA (LAWFUL BASES)
- To process and deliver your orders and provide customer support — to perform our contract with you.
- To prevent fraud and keep the store secure, and to improve our products and service — for our legitimate interests.
- To send marketing emails, and to set non-essential cookies — with your consent, which you can withdraw at any time.
- To meet tax, accounting, and other legal obligations — to comply with the law.

3. SHARING YOUR DATA
We share data only with service providers who act on our behalf — payment processors, shipping and fulfilment partners, email and analytics providers — and with authorities where required by law or to protect our rights. We do not sell your personal data.

4. INTERNATIONAL TRANSFERS
We are based in Malta and process your data within the EU/EEA wherever possible. Some of our service providers may process data outside the EEA; where they do, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses to protect your data.

5. HOW LONG WE KEEP IT
We keep your data only as long as necessary for the purposes above or as required by law (for example, order and tax records).

6. YOUR RIGHTS
Under the GDPR you have the right to access your data; to have it corrected or deleted; to restrict or object to processing; to data portability; and to withdraw consent at any time. To exercise any right, email aurelieshop@outlook.com. We will respond within the timeframes required by law. You also have the right to lodge a complaint with your local data protection authority (in Malta, the Information and Data Protection Commissioner).

7. MARKETING
You can unsubscribe from marketing emails at any time using the link in each message or by contacting us. We only send marketing where you have consented.

8. CHILDREN
Our store is not intended for anyone under 18, and we do not knowingly collect data from children.

9. SECURITY
We use appropriate technical and organisational measures to protect your data. No method of transmission or storage is completely secure, but we work to protect your information and to notify you and the authorities of any breach where required.

10. CHANGES
We may update this Policy from time to time. The "Effective Date" above shows the latest version.

CONTACT (DATA CONTROLLER)
Aurelie Shop, Triq is-Sajf ta' San Martin, Bahrija, Malta · Email: aurelieshop@outlook.com