Privacy Policy

Last updated: August 14, 2026

allAura operates this store and website, along with all related information, content, features, tools, products, and services, to provide you, as a customer, with a carefully curated shopping experience ("Services"). allAura uses the Shopify platform, which enables us to provide the Services. This Privacy Policy describes how we collect, use, and disclose your personal data when you visit the store, use the Services, make a purchase or other transaction through the Services, and when you contact us. In case of any conflict between our Terms and Conditions and this Privacy Policy, this Privacy Policy shall apply with respect to the collection, processing, and disclosure of personal data.

Please read this Privacy Policy carefully. By using and accessing the Services, you acknowledge that you have read this Privacy Policy and understand the principles of information collection, use, and disclosure described herein.

Personal Data We Collect or Process

When we use the term "personal data," we refer to information that identifies or can reasonably be linked to you or another person. Personal data does not include information collected anonymously or anonymized in such a way that it cannot identify or reasonably be linked to a specific person.

Depending on how you use the Services, your place of residence, and to the extent permitted or required by applicable law, we may collect or process the following categories of personal data:

  • Contact information, including name, address, billing address, shipping address, phone number, and email address.
  • Financial data, including credit and debit card numbers, financial account numbers, payment card information, invoices, transactions, payment methods, payment confirmations, and other payment-related data.
  • Account data, including username, password, security questions, preferences, and settings.
  • Transaction data, including products you view, add to cart or wishlist, purchase, return, exchange, or cancel, as well as your transaction history.
  • Communications with us, including information provided when you contact us, for example, for customer service inquiries.
  • Device data, including information about your device, browser, or network connection, IP address, and other unique identifiers.
  • Service usage data, including information about how and when you use the Services and navigate the site.

Sources of Personal Data

We may collect personal data from the following sources:

  • Directly from you, including when you create an account, visit or use the Services, contact us, or otherwise provide us with personal data;
  • Automatically through the Services, including from your device when you use our products, services, or websites, and through cookies and similar technologies;
  • From our service providers, especially when we use their technological services and when they collect or process personal data on our behalf;
  • From our partners or other third parties.

How We Use Your Personal Data

Depending on how you use our Services, we may use personal data for the following purposes:

  • Providing, personalizing, and improving the Services. We use your personal data to provide the Services, including performing the contract with you, processing payments, fulfilling orders, remembering preferences and products you are interested in, sending account-related notifications, handling purchases, returns, exchanges, and other transactions, creating and managing an account, organizing shipping, enabling returns and exchanges, publishing reviews, and creating a personalized shopping experience, e.g., by recommending products related to your purchases. This may also include using personal data to better tailor and improve the Services.
  • Marketing and advertising. We use your personal data for marketing and promotional purposes, such as sending marketing, advertising, and promotional messages via email, text messages, or traditional mail, and displaying advertisements for products or services within the Services or on other websites, including based on products you previously purchased, added to your cart, or other activities within the Services.
  • Security and fraud prevention. We use your personal data to authenticate your account, ensure a secure payment and purchase process, detect, investigate, and take action in response to potential fraud, illegal, unsafe, or harmful activities, protect public safety, and secure our Services. If you choose to register an account, you are responsible for the security of your login details. We strongly recommend that you do not share your username, password, or other access data with third parties.
  • Communication with you. We use personal data to provide customer support, answer your questions, ensure efficient service, and maintain a business relationship.
  • Legal requirements. We use personal data to comply with applicable laws or respond to valid legal requests, including requests from law enforcement or government authorities, to conduct or participate in civil proceedings, potential or ongoing lawsuits, or other contentious proceedings, and to enforce our terms and conditions or policies and investigate potential violations.

How We Disclose Personal Data

In certain circumstances, we may disclose your personal data to third parties for legitimate purposes consistent with this Privacy Policy. This may include:

  • Shopify, suppliers, and other third parties providing services on our behalf, e.g., IT management, payment processing, data analysis, customer service, cloud storage, order fulfillment, and shipping.
  • Business and marketing partners for the purpose of providing marketing and advertising services. For example, we use Shopify to deliver personalized ads through third-party services, based on your online activity across various stores and websites. Our business and marketing partners use your data in accordance with their own privacy policies. Depending on your place of residence, you may have the right to request that we do not share your information for targeted advertising or marketing based on your online activity.
  • Third parties if you instruct us, request us, or otherwise consent to share certain information, e.g., for product shipping or when using social media widgets or login integrations.
  • Our affiliates or other entities within our corporate group.
  • Entities involved in a business transaction, such as a merger or bankruptcy proceeding, and when necessary to comply with legal obligations, including responding to subpoenas, search warrants, and similar requests, enforcing applicable terms and conditions or policies, and protecting the Services, our rights, and the rights of users or others.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal data related to accessing and using the Services to provide and improve them.

Information provided through the Services will be transmitted and shared with Shopify and third parties, which may be located in countries other than your country of residence, for the purpose of providing and improving the Services.

Furthermore, to protect, develop, and improve our business, we utilize certain advanced Shopify features that use data and information obtained from your interaction with our store, other merchants, and Shopify. To provide these features, Shopify may use personal data about your activity in our store, with other merchants, and on Shopify.

In such cases, Shopify is responsible for processing your personal data, including handling requests regarding the exercise of your rights concerning the use of this data.

For more information on how Shopify uses personal data and your rights, please refer to Shopify's Privacy Policy for Consumers.

Depending on your place of residence, you may also exercise certain rights regarding your personal data through Shopify's Privacy Portal.

Third-Party Websites and Links

The Services may contain links to websites or other online platforms operated by third parties. If you use links leading to sites not affiliated with or controlled by us, you should review their privacy policies, security policies, and other terms of use.

We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of the information contained therein.

Information you provide in public or semi-public areas, including information posted on third-party social media platforms, may also be visible to other users of the Services or users of those platforms and may be used by them without restrictions imposed by this Privacy Policy.

The inclusion of a link to a specific site does not inherently imply that we endorse its content, owners, or operators, unless expressly stated otherwise.

Children's Data

The Services are not intended for use by children, and we do not knowingly collect personal data from children who have not reached the age of majority in accordance with the laws applicable in their place of residence.

If you are a parent or guardian of a child who has provided us with their personal data, you may contact us using the contact details provided below and request its deletion.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell," within the meaning of applicable law, personal data of individuals under 16 years of age.

Security and Data Retention Period

Please note that no security measures are perfect or entirely impervious to breaches, and we cannot guarantee "absolute security."

Furthermore, information transmitted to us may not be adequately secured during transmission. We recommend that you do not use unsecured communication channels to transmit confidential or sensitive information.

The period for which personal data is retained depends on various factors, such as whether we need the data to maintain your account, provide the Services, fulfill legal obligations, resolve disputes, or enforce applicable agreements and policies.

Your Rights and Choices

Depending on your place of residence, you may have some or all of the following rights regarding your personal data. However, these rights are not absolute, may apply only in certain circumstances, and in some cases, we may refuse to fulfill a request to the extent permitted by law.

  • Right of access / right to information. You may have the right to access the personal data we hold about you.
  • Right to erasure. You may have the right to request the deletion of personal data we hold.
  • Right to rectification. You may have the right to request the correction of inaccurate personal data we hold.
  • Right to data portability. In certain circumstances and with some exceptions, you may have the right to receive a copy of the personal data we hold and to request its transfer to a third party.
  • Managing communication preferences. We may send you promotional emails. You can unsubscribe from them at any time using the unsubscribe option available in the message. After unsubscribing, we may still send non-marketing messages, such as those related to your account or orders placed.

If you reside in the UK or the European Economic Area, subject to exceptions and limitations under local law, in addition to the rights described above, you may also have the following rights:

  • Right to object to processing and restrict processing: You may have the right to request that we stop or restrict the processing of personal data for certain purposes.
  • Withdrawal of consent: If the processing of personal data is based on your consent, you have the right to withdraw it. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

You can exercise the above rights through the tools available within the Services or by contacting us using the details provided below.

For more information on how Shopify uses personal data and your rights, including those related to data processed by Shopify, please visit:

https://privacy.shopify.com/en

We will not discriminate against you for exercising any of these rights.

Before fulfilling a request, we may be required to verify your identity, in accordance with applicable law.

In accordance with applicable regulations, you may authorize a proxy to submit requests on your behalf. Before accepting such a request, we may require the proxy to provide proof of authorization, and we may also require direct verification of your identity.

We will respond to your request within the timeframe required by applicable law.

Complaints

If you have any concerns about how we process personal data, please contact us using the contact details provided below.

Depending on your place of residence, you may have the right to appeal our decision by contacting us using the details provided below, or to lodge a complaint with the competent personal data protection authority.

For the EEA, a list of competent supervisory authorities for data protection can be found here.

International Data Transfers

We may transfer, store, and process your personal data outside your country of residence.

If we transfer personal data outside the European Economic Area or the United Kingdom, we use recognized legal mechanisms for data transfer, such as the European Commission's Standard Contractual Clauses or equivalent agreements issued by the competent UK authority, unless the data is transferred to a country deemed to provide an adequate level of data protection.

Changes to this Privacy Policy

We may update this Privacy Policy periodically, including to reflect changes in our practices or for other operational, legal, or regulatory reasons.

We will publish the updated Privacy Policy on this website, update the "Last Updated" date, and, if required by applicable law, provide appropriate notice.

Contact

If you have any questions about our privacy practices or this Privacy Policy, or wish to exercise your rights, please contact us by phone or email at:

shopadmin@allaura.eu

or by mail:

Estrady 9a, 05-080, Poland

For the purposes of applicable personal data protection laws, we are the controller of your personal data.