Privacy Policy 

Introduction  

This privacy policy (“Policy”) describes how Aurveluxe C.H. Ltd (Company, or We/Our/Ours/Us) collects, uses, shares and stores personal data. This Policy applies when you visit and make purchases through our online store. 

This Policy applies to our website aurveluxe.com and any related online services, tools, or features provided by us, including the online shop (collectively, Services). 

This Policy explains how we handle personal data relating to you as a customer or visitor of our online shop (You/Your), including information provided when you: 

• browse the Site; 
• create an account; 
• place an order; 
• subscribe to our newsletter; 
• contact us for customer support; or 
• otherwise interact with our Services. 

By accessing or using the Site, by placing an order, or by clicking a box marked “accept” or “agree”, you acknowledge that you have read, understood, and agree that Aurveluxe C.H. Ltd will collect, process, and use your personal data in accordance with this Privacy Policy (Policy). 

It is important that you read this Policy together with any other privacy or fair processing notice we may provide on specific occasions when we collect or process personal data about you. This will help you fully understand how and why we use your data. This Policy supplements other notices and privacy policies and is not intended to override them. 

This Site includes both informational and e-commerce functionalities, and this Policy applies to your interactions with us whether you are browsing our content, creating an account, subscribing to our newsletter, or purchasing products through our online shop. 

Our Services are not intended for children, and we do not knowingly collect personal data relating to minors. 

Please read the following carefully to understand our practices regarding your personal data and how we will handle it. 

In a nutshell, this Privacy Policy sets out: 

1. Important information and who we are 
2. What personal information we collect about you 
3. How we use your personal information and basis for such use 
4. How we obtain your personal information 
5. Who we share your personal information with  
6. Cookies 
7. How long we keep your personal information  
8. How we protect your personal information 
9. Which countries we transfer your personal information to 
10. Your rights regarding your personal information 
11. Our marketing policy 
12. Links to third party websites or apps 
13. Children 
14. Changes to this Policy 
15. Contact us  
16. Important information and who we are 

Aurveluxe C.H. Ltd, with registration number HE 480591, VAT number CY60207513T and registered office at Onisilou 14, Floor 2, Flat/Office 202, Aglantzia, 2121 Nicosia Cyprus, is the controller and responsible for your personal data.  

In some cases, we may process your personal data based on an agreement with a third party. In those cases, that third party is a data controller and we are a data processor. In those cases, the terms of that agreement may govern how we process your personal data.  

If you have any questions about this Policy or how we process your personal data or our privacy practices, please contact us: 

Email:  

You have the right to make a complaint at any time to the Office of the Commissioner for Personal Data Protection, the Cyprus regulator for data protection issues. We would appreciate you coming to us with your complaint in the first instance to give us a chance to resolve it.  

1. What personal information we collect about you 

We only collect the most relevant, proportionate for each purpose and strictly necessary personal information from you in the course of our business when you use the Services.  

We may collect, use, store and transfer different kinds of personal data about you as follows: 

• Identity Data that includes first name, last name, username or similar identifier, date of birth and gender  
• Contact Data that includes billing address, delivery address, email address, telephone numbers 
• Financial Data that includes bank account and payment card details 
• Transaction Data that includes details about payments to and from you and other details of products services you have purchased from us 
• Technical Data that includes internet protocol address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website 
• Profile Data that includes username and password, purchases or orders, interests, preferences, feedback and survey responses 
• Usage Data that includes information about how you use our Services 
• Marketing and Communications Data that includes preferences in receiving marketing from us and our third parties and communication preferences 
• If you choose to create an account or sign in using a social media or third-party identity provider, we may receive certain personal data from that provider, such as your name, email address, and profile picture (if available), depending on the permissions you grant that service. The use of such features is voluntary. The personal data we receive will be used to create or link your Aurveluxe account and managed in accordance with this Privacy Policy.
  

Please note that your relationship with the third-party provider is governed by their own privacy policy and terms of use.

We also collect, use and share aggregated data such as statistical or demographic data for any purpose. Aggregated data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific feature of our Services. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy. 

We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences. 

In case we need to collect any Special Categories of Personal Data we will ensure to take all measures to comply with all applicable data protection laws.  

If you fail to provide information  

Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us, but we will notify you if this is the case at the time. 

2. How we use your personal information and basis for such use 

Purposes for which we will use your personal data 

We will use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances: 

• When we have your consent,  
• Where we need to perform the contract we are about to enter into or have entered into with you. 
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. 
• Where we need to comply with a legal obligation. 

The firm shall not carry out any automated decision-making activities, including profiling, using your personal information.  

Change of Purpose  

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.  

If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. 

Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law. 

3. How we obtain your personal information 

We use different methods to collect data from and about you including through: 

• Information you give us. This is information you consent to giving us about you by filling in forms on Services or by corresponding with us (for example, by email or chat). It includes information you provide when you register to use the Services, sign up or make an account with us, place an order with us, subscribe to, and purchase subscriptions for, any of our Services, subscribe to our publications, apply for our products and services, share data via social media functions of the Services, request marketing to be sent to you, enter a competition, promotion or survey, give us feedback, and when you report a problem with our Services. If you contact us, we will keep a record of that correspondence.  
• Information we collect about you via automated technologies or interaction. Each time you visit or use our website and Services, we will automatically collect personal data including Technical Data about your equipment, browsing actions and patterns, and Usage Data. We collect this data using cookies and other similar technologies. Please see our cookie policy https://aurveluxe.com/pages/cookie-policy for further details. We may also receive technical information about you, such as your IP address, login data, browser type and version, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website, if you visit other websites employing our cookies. Please see our cookie policy https://aurveluxe.com/pages/cookie-policy for further details. 
• Information we receive from other sources including third parties and publicly available sources. We will receive personal data about you from various third parties as set out below: 
• Technical Data from analytics providers, such as Google Analytics, and from our e-commerce platform provider and integrated Shopify apps / third-party service providers used to operate the store (for example, to support catalogue management, stock synchronisation, on-site search, communications, website performance and security).
• Contact, Financial and Transaction Data from providers of payment services and our banking partners. 
• Identity and Contact Data from publicly available sources (such as public registers, business directories or publicly available social media profiles). 

4. Who we share your personal information with  

We may share personal information the following categories of third parties as necessary: 

• Service providers who provide IT, system administration services and customer screening services. 
• We share certain personal information with our payment processors to enable them to process your payments for the purchase of our products, services, or content. This may include your name, billing address, email address, payment details, and transaction information.

When you choose to make a payment, your payment will be processed by an authorised third-party payment processor and/or payment gateway provider. The processing of your payment data by such providers is governed by their respective privacy policies.

Please note that your payment data (such as name, billing address, amount, and transaction ID) is securely transmitted to our payment processor. We do not store or have access to your full card details.

By making a purchase, you agree to be bound by the applicable payment processor’s terms and privacy policy.
 

• Delivery and logistics partners, who help us fulfil and deliver your orders. 
• Warehousing and order fulfilment partners, who store, pack, and dispatch your purchases. 
• IT and system support providers, including but not limited to website hosting, maintenance, data storage, cybersecurity, and email delivery services that help us operate our platform. 
• Customer support and communication service providers, who assist us in responding to your queries or sending you service-related messages. 
• Professional advisers including lawyers, bankers, auditors, insurers and other professionals who provide consultancy, banking, legal, insurance, corporate, administration and accounting services. 
• Government or governmental agencies, regulatory authorities, courts and law enforcement agencies, registries.  We may be required to disclose your information to comply with legal or regulatory requirements. We will use reasonable endeavours to notify you before we do this, unless we are legally restricted. 
• Appropriate parties in the event of emergencies. 
• Advertising networks: to support and display ads on our Services, and other social media tools. 
• Third party service providers to assist us with client insight analytics, such as Google Analytics. 
• Third party postal or courier providers who assist us in delivering our postal marketing campaigns to you, or delivering documents related to a matter. 
• Account and Authentication Partners: If you use a third-party login to access your account, we will share limited information necessary for authentication, such as your email address or unique user ID. These providers may act as independent controllers in their processing. 
• Automated Fraud Checks: We may use automated systems to detect potentially fraudulent transactions (for example, mismatched billing and shipping data). These processes are designed to protect you and us against payment fraud and do not produce legal or similarly significant effects for you.  

Please note the following: 

• This list is non-exhaustive and there may be other examples where we need to share with other parties in order to provide our services as effectively as we can. 
• We do not sell, rent or otherwise make personal information commercially available to any third party, except with your prior permission. 
• We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions. 
• If you would like to know more about the third parties we share personal data with, please contact us using the details provided below.  

5. Cookies  

We use cookies and/or other tracking technologies to distinguish you from other users of the Services, or any other relevant services sites and to remember your preferences. This helps us to provide you with a good experience when you use the Services and also allows us to improve the Services. For detailed information on the cookies we use, the purposes for which we use them and how you can exercise your choices regarding our use of your cookies, see our cookie policy. 

6. How long we keep your personal information  

We’ll keep your information for as long as you continue to be our customer and for as long as we are required to keep it to ensure we meet our legal requirements.    

If you no longer wish to be a customer, you can contact us at info@aurveluxe.com and request that we close your account. However, we have a legal requirement to keep some of your personal data even after you have asked us to delete it. We will only keep what we absolutely need to, and only to make sure we can meet our legal or regulatory requirements, resolve disputes, prevent fraud and abuse, or enforce our Terms & Conditions. Please see Your legal rights below for further information on how you can ask us to delete your data. 

In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you. 

7. How we protect your personal information 

We use a variety of technical and organisational measures to help protect your personal information from unauthorised access, use, disclosure, alteration or destruction consistent with the applicable data protection laws including the EU General Data Protection Regulation.  We have also implemented appropriate information security policies, rules and technical measures to secure your personal information collected by us. Your personal information is saved in an encrypted form.  

All of our partners, employees, consultants, workers and data processors (i.e., those who process your personal information on our behalf), who have access to, and are associated with the processing of personal information, are obliged to respect the confidentiality of such personal information, keep it secure and protect it.  

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator when we are legally required to do so. 

8. Which countries we transfer your personal information to 

In order to provide our services, we may need to transfer your personal information to locations outside Cyprus.  This may entail a transfer of your information from a location within the European Economic Area (the “EEA”) to outside the EEA.  For any transfer of data outside the EEA, we will implement appropriate measures to ensure that your personal information remains protected and secure in accordance with applicable data protection laws and the EU General Data Protection Regulation. 

9. Your rights regarding your personal information 

You have the following rights in relation to the personal information we hold about you. Please note that some of these rights will only apply in certain circumstances and some of them may be limited where we have an overriding interest or legal obligation to continue to process the data or where data may be exempt from disclosure due to reasons of confidentiality obligations. 

• Access: you are entitled to ask us if we are processing your data and, if we are, you can request access to your personal data.  This enables you to receive a copy of the personal data we hold about you and certain other information about it; 
• Correction: you are entitled to request that any incomplete or inaccurate personal data we hold about you is corrected; 
• Erasure: you are entitled to ask us to delete or remove personal data in certain circumstances. There are also certain exceptions where we may refuse a request for erasure, for example, where the personal data is required for compliance with law or in connection with claims; 
• Restriction: you are entitled to ask us to suspend the processing of certain of your personal data about you, for example if you want us to establish its accuracy or the reason for processing it; 
• Transfer: you may us to help you request the transfer certain of your personal data to another party; 
• Objection: where we are processing your personal data based on legitimate interests (or those of a third party) and you may challenge this.  However, we may be entitled to continue processing your information. You also have the right to object where we are processing your personal information for direct marketing purposes; 
• Automated decisions: you may contest any automated decision made about you where this has a legal or similar significant effect and ask for it to be reconsidered. 
• Consent: where we are processing personal data with consent, you can withdraw your consent. 

If you want to exercise any of these rights, please contact us at info@aurveluxe.com. 

Again, please note that you also have a right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus, where you are habitually resident, or where an alleged infringement of Data Protection law has taken place.  

10. Our Marketing Policy  

We will only process your personal data for marketing purposes once we have your consent. You have the right to object where we are processing your personal information for direct marketing purposes. This means you can opt-out from receiving direct marketing from us at any time. 

You can opt-out of receiving direct marketing from us at any time.  You can do this by clicking on the "unsubscribe" link included at the end of any marketing email we send to you, or by contacting us at info@aurveluxe.com. 

You have the right to ask us not to continue to process your personal data for marketing purposes.  

11. Links to third party websites or apps 

Our Services, email updates and other communications may, from time to time, contain links to and from the websites or apps of others. The personal data that you provide through these websites or apps is not in any case subject to this Privacy Policy and the treatment of your personal data by such websites is not our responsibility.  

You should consult the third parties’ Privacy Policy notices which will set out how your information is collected and processed when visiting those websites or apps, as we have no control over information that is submitted to, or collected by, these third parties. 

12. Children 

We do not knowingly collect information from children or other persons who are under 16 years old without the consent and acceptance by any of their parent and/or guardian. If you are under 16 years old, you may not submit any personal data to us without the consent and acceptance by any of your parent and/or guardian.   

13. Changes to this Policy 

We may make changes to this Privacy Policy from time to time. To ensure that you are always aware of how we use your personal information we will update this Privacy Policy from time to time to reflect any changes to our use of your personal information. We may also make changes as required to comply with changes in applicable law or regulatory requirements. Where it is practicable, we will notify you by email of any significant changes. However, we encourage you to review this Privacy Policy periodically to be informed of how we use your personal information. 

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us. 

14. Contact us  

Notwithstanding any other specific provision in this Privacy Policy, you can contact us at info@aurveluxe.com to:  

• See what data we have about you,  
• Change or correct any data we have about you,  
• Request us to delete any data we have about you,  
• Opt-out of receiving promotional communication and content from us,  

Ask questions, make inquiries, complaints, or claims, or provide feedback