Privacy policy
Privacy Policy
Last updated: 24 July 2026
This Privacy Policy explains how AuraLume collects, uses, stores, shares and otherwise processes personal information when you visit auralume.us, place an order, communicate with us, interact with our advertising, or otherwise use our online store and related services.
Please read this Privacy Policy carefully.
1. Who We Are
AuraLume is the trading/store name used for the online retail store available at auralume.us.
AuraLume is operated by Filip Ambroziak as a sole trader.
Our contact details are:
Store name: AuraLume
Website: auralume.us
Email: contact@auralume.us
Telephone: +44 7940 173466
Business correspondence address:
26 North Street
Walsall
WS2 8AT
United Kingdom
Market currently served: United States
For questions about how your personal information is handled or to exercise a privacy right, contact us using the details above.
For purposes of applicable data-protection law, the business operating under the AuraLume trading name determines how and why personal information relating to the operation of auralume.us is processed, except where a third-party service provider acts as an independent controller for its own purposes.
2. Scope of This Privacy Policy
This Privacy Policy applies to personal information processed in connection with:
- visiting or browsing auralume.us;
- creating or using a customer account where available;
- adding products to a cart;
- placing or paying for an order;
- shipping and fulfilment;
- returns and refunds;
- contacting customer support;
- subscribing to marketing communications;
- interacting with cookies, analytics or advertising technologies;
- reviews, forms or other website features where enabled.
Third-party websites or services may have their own privacy policies.
3. Personal Information We May Collect
The personal information we process depends on how you interact with AuraLume.
Contact and Identity Information
This may include:
- name;
- email address;
- telephone number;
- billing address;
- shipping address;
- other information you provide when communicating with us.
Order and Transaction Information
This may include:
- products viewed or purchased;
- product variants;
- quantities;
- order numbers;
- transaction history;
- shipping method;
- delivery and tracking information;
- returns;
- refunds;
- cancellations;
- discount or promotion information.
Payment-Related Information
Payments are processed using third-party payment providers.
Depending on the payment method used, those providers may collect payment-card or other financial information necessary to process your transaction.
AuraLume may receive limited payment-related information such as:
- payment status;
- transaction identifiers;
- payment method type;
- billing details;
- fraud or risk indicators;
- limited card information, such as the last digits of a card, where provided by the payment processor.
We do not intentionally require customers to send full payment-card details to us by email or other unsecured customer-support channels.
Account Information
Where customer accounts are available, we may process:
- account identifiers;
- login information managed through our ecommerce platform;
- saved addresses;
- order history;
- account preferences.
Customers are responsible for keeping their account credentials secure.
Communications and Customer-Support Information
When you contact us, we may process:
- emails and messages;
- order numbers;
- descriptions of problems;
- photographs or videos submitted in connection with damaged, defective or incorrect products;
- return and refund communications;
- other information you voluntarily provide.
Device and Technical Information
When you use our website, certain information may be collected automatically, including:
- IP address;
- browser type;
- device type;
- operating system;
- device or cookie identifiers;
- approximate location derived from technical information;
- website interaction and navigation information;
- referring pages or websites.
Usage and Shopping Activity
Depending on the technologies enabled on our website, we may process information about:
- pages viewed;
- products viewed;
- search activity;
- products added to or removed from a cart;
- checkout activity;
- interactions with advertisements;
- interactions with website features;
- dates and times of visits.
4. Information We Generally Do Not Request
We do not normally require customers to provide sensitive personal information such as:
- Social Security numbers;
- government identification documents;
- medical information;
- biometric information;
- precise information concerning race, religion, political beliefs or sexual orientation.
Please do not send sensitive personal information unless it is genuinely necessary for a legitimate request and we have asked you to provide it.
5. How We Collect Personal Information
We may collect information:
Directly From You
For example, when you:
- place an order;
- create an account;
- complete a form;
- subscribe to communications;
- contact customer support;
- request a return or refund;
- submit a review or other content.
Automatically
Information may be collected through:
- cookies;
- pixels;
- tags;
- local-storage technologies;
- server logs;
- similar tracking technologies.
From Service Providers
We may receive information from companies that help us operate AuraLume, including:
- Shopify;
- payment processors;
- shipping carriers;
- suppliers and fulfilment partners;
- fraud-prevention providers;
- analytics providers;
- advertising platforms;
- customer-support or communication providers.
From Other Third Parties
We may receive information from third parties where permitted by law, including advertising and analytics partners where those services are enabled.
6. How We Use Personal Information
We process personal information only for legitimate business and legal purposes.
To Process and Fulfil Orders
We use information to:
- accept and manage orders;
- process payments;
- confirm transactions;
- arrange fulfilment;
- arrange shipping;
- provide tracking;
- communicate about orders;
- process cancellations, returns and refunds.
Customer Support
We use information to:
- respond to enquiries;
- investigate delivery issues;
- resolve product problems;
- process return requests;
- respond to complaints;
- maintain customer-service records.
Security and Fraud Prevention
We may process information to:
- protect customer accounts;
- detect suspicious transactions;
- prevent fraud;
- protect our website;
- investigate abuse;
- enforce our Terms of Service;
- protect customers, AuraLume and third parties.
Website Operation and Improvement
We may use information to:
- operate auralume.us;
- diagnose technical problems;
- understand website performance;
- improve navigation and usability;
- understand general shopping behaviour;
- improve products and customer experience.
Marketing and Advertising
Where permitted, we may use information to:
- send marketing communications you have requested or are legally permitted to receive;
- measure advertising effectiveness;
- understand how customers interact with advertisements;
- provide or measure personalised or targeted advertising where enabled.
You may unsubscribe from promotional email communications using the unsubscribe link included in those messages.
Unsubscribing from marketing does not prevent us from sending necessary transactional communications relating to an order, return, refund, account or customer-service request.
Legal and Regulatory Purposes
We may process information where necessary to:
- comply with legal obligations;
- maintain required business and transaction records;
- respond to lawful requests from authorities;
- establish, exercise or defend legal claims;
- protect our legal rights.
7. Legal Bases for Processing
Where the UK GDPR or another law requiring a lawful basis applies, we may rely on one or more of the following bases.
Performance of a Contract
We process information where necessary to:
- process an order;
- receive payment;
- arrange fulfilment and delivery;
- provide customer support connected with a purchase;
- process returns or refunds.
Legitimate Interests
Where permitted by law, we may process information where necessary for legitimate business interests such as:
- operating and securing our website;
- fraud prevention;
- improving our services;
- maintaining business records;
- responding to customer enquiries;
- understanding business performance.
We consider these interests against the privacy rights and interests of affected individuals.
Legal Obligations
We may process and retain information where required to comply with:
- tax and accounting obligations;
- consumer-protection requirements;
- legal claims;
- lawful government or regulatory requests;
- other applicable legal duties.
Consent
Where consent is required, we may rely on your consent for activities including certain:
- marketing communications;
- non-essential cookies;
- analytics;
- personalised advertising technologies.
Where processing relies on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.
8. Shopify
AuraLume uses Shopify to host and operate our online store.
Shopify may process personal information relating to:
- browsing activity;
- customer accounts;
- checkout;
- orders;
- payments where applicable;
- fraud prevention;
- ecommerce functionality.
Shopify may act as a service provider or processor for AuraLume for some activities and may act independently for certain services it provides directly to consumers.
Shopify publishes its own privacy information explaining how it processes personal data.
Shopify confirms that its platform processes consumer information relating to interactions with Shopify-powered merchants and its consumer services.
9. Suppliers and Fulfilment Partners
Some products sold through AuraLume may be fulfilled by third-party suppliers, warehouses or fulfilment partners.
To fulfil an order, we may need to provide relevant information such as:
- customer name;
- shipping address;
- telephone number where required for delivery;
- product ordered;
- quantity;
- delivery information.
We provide only information reasonably necessary for fulfilment and delivery.
Fulfilment partners may operate in countries other than the customer’s country or the United Kingdom.
Customers purchasing from AuraLume should continue to contact AuraLume regarding their AuraLume order rather than relying solely on a fulfilment partner.
10. Shipping and Delivery Providers
We may share information necessary for delivery with:
- postal operators;
- courier companies;
- logistics providers;
- tracking providers;
- fulfilment partners.
This may include:
- recipient name;
- delivery address;
- telephone number;
- email address where necessary for tracking or delivery;
- relevant shipment details.
11. Payment Processors
Payment information may be processed by Shopify and/or other payment providers made available at checkout.
Payment providers may use information for:
- transaction authorisation;
- payment processing;
- fraud prevention;
- security;
- regulatory compliance.
Their processing may also be governed by their own privacy notices.
12. Other Service Providers
We may disclose information where reasonably necessary to service providers that assist with functions such as:
- website hosting and ecommerce;
- payment processing;
- fraud prevention;
- IT and cybersecurity;
- email and communications;
- customer support;
- cloud storage;
- analytics;
- advertising;
- order fulfilment;
- shipping and tracking;
- professional accounting or legal services.
Service providers receive information only as necessary for the relevant service, subject to applicable contractual and legal requirements.
13. Advertising and Analytics
AuraLume may use advertising and analytics services to understand website activity, measure advertising effectiveness and promote products.
Depending on the services enabled, these technologies may collect or receive information such as:
- IP address;
- cookie or advertising identifiers;
- device information;
- pages viewed;
- products viewed;
- cart activity;
- purchase or conversion events.
Some advertising practices may be treated as “selling,” “sharing,” targeted advertising or cross-context behavioural advertising under certain U.S. state privacy laws even where no money is exchanged for personal information.
Where applicable law gives you an opt-out right, you may exercise that right using privacy controls made available on our website or by contacting us.
14. Cookies and Similar Technologies
AuraLume and our service providers may use cookies and similar technologies.
These may include:
Essential Cookies
Necessary for functions such as:
- checkout;
- security;
- shopping-cart operation;
- account functionality;
- fraud prevention.
These cookies may be necessary for the website to function.
Functional Cookies
Used to remember preferences and provide enhanced website functionality.
Analytics Cookies
Used, where enabled and legally permitted, to understand:
- website traffic;
- visitor interaction;
- website performance;
- how customers navigate the store.
Advertising Cookies
Where enabled and permitted, these may be used to:
- measure advertising;
- understand conversions;
- personalise advertising;
- limit or optimise advertisements.
Where consent is legally required for non-essential cookies, we will seek that consent through the privacy or cookie controls made available on the website.
You may also be able to manage cookies through your browser settings.
Disabling certain cookies may affect website functionality.
15. Global Privacy Control and Other Opt-Out Signals
Where required by applicable law and technically supported, recognised browser-based privacy preference signals such as Global Privacy Control (GPC) may be treated as an opt-out request for the relevant browser or device.
The effect of such a signal may depend on:
- your location;
- applicable law;
- browser;
- device;
- whether we can associate the signal with an account.
16. Sale or Sharing of Personal Information
AuraLume does not sell customer personal information in exchange for money as a standalone business activity.
However, certain disclosures to advertising or analytics partners may legally be classified as a “sale” or “sharing” of personal information under some U.S. state privacy laws, particularly where information is used for targeted or cross-context behavioural advertising.
Where applicable, eligible individuals may opt out through available website privacy controls or by contacting us.
17. Marketing Communications
Where permitted by applicable law, we may send promotional communications.
You may unsubscribe from marketing emails at any time using the unsubscribe link included in the message.
We may continue to send non-promotional communications that are necessary for:
- order confirmations;
- shipping notifications;
- customer-service matters;
- returns;
- refunds;
- security notices;
- important account information.
18. How Long We Keep Personal Information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legitimate business or legal requirements.
Retention periods may depend on:
- whether you have an active customer account;
- whether information relates to a completed order;
- tax and accounting requirements;
- fraud-prevention requirements;
- customer-service needs;
- warranty or dispute periods;
- legal claims;
- regulatory obligations.
For example, transaction and order records may need to be retained for longer than routine customer-support correspondence because of accounting, tax, fraud-prevention or legal requirements.
When information is no longer reasonably required, it may be deleted, anonymised or otherwise handled in accordance with applicable law and our technical capabilities.
The ICO permits organisations to explain either specific retention periods or the criteria used to determine them where a fixed period is not appropriate.
19. Security
We use reasonable administrative, organisational and technical measures designed to protect personal information against:
- unauthorised access;
- misuse;
- loss;
- alteration;
- inappropriate disclosure.
However, no internet transmission, electronic storage system or security measure can be guaranteed to be completely secure.
Customers should not send sensitive information such as full payment-card details through ordinary email.
Customers with accounts should also protect their login credentials and notify us if they believe their account has been compromised.
20. International Processing and Transfers
AuraLume operates from the United Kingdom and serves customers in the United States.
Our ecommerce platform, payment providers, suppliers, fulfilment partners, shipping providers and other service providers may process personal information in multiple countries.
As a result, personal information may be transferred to or processed in countries different from:
- the United Kingdom;
- the customer’s country or state;
- the country where the information was originally collected.
Where UK data-protection law treats a transfer as a restricted international transfer, appropriate legal mechanisms will be used where required.
Depending on the circumstances, these may include:
- UK adequacy regulations;
- recognised contractual safeguards;
- the UK International Data Transfer Agreement;
- the UK Addendum to approved Standard Contractual Clauses;
- another legally permitted transfer mechanism.
The ICO explains that restricted UK transfers may rely on adequacy or appropriate safeguards and that contractual safeguards may require a transfer risk assessment and additional protections where necessary.
21. Your Privacy Rights
Depending on where you live and the law that applies, you may have rights concerning your personal information.
These may include the right to:
- request access to personal information;
- request correction of inaccurate information;
- request deletion in qualifying circumstances;
- request restriction of certain processing;
- object to certain processing;
- request portability of certain information;
- withdraw consent where processing is based on consent;
- opt out of certain targeted advertising or legally defined sale/sharing;
- appeal certain decisions regarding a privacy request where applicable.
These rights are not absolute and may be subject to legal exceptions.
For example, we may need to retain certain transaction information despite a deletion request where retention is necessary to comply with tax, accounting, fraud-prevention or legal obligations.
22. Right to Object
Where applicable law gives you a right to object to processing based on legitimate interests, you may contact us at:
You may also object to or opt out of direct marketing at any time.
Where you object to direct electronic marketing, we will stop using your information for that marketing subject to any limited information necessary to maintain your opt-out preference.
23. U.S. State Privacy Rights
Residents of certain U.S. states may have additional rights under applicable state privacy laws.
Depending on the applicable law and whether its requirements apply to AuraLume, these may include rights to:
- know or access personal information;
- correct inaccurate information;
- delete qualifying information;
- obtain a portable copy;
- opt out of targeted advertising;
- opt out of legally defined sale or sharing;
- appeal a decision concerning a privacy request.
We will not unlawfully discriminate against a customer for exercising a privacy right.
24. How to Make a Privacy Request
To make a privacy request, contact:
Please clearly describe the request and provide enough information for us to identify the relevant records.
We may need to verify your identity before completing certain requests.
Verification is intended to protect personal information from unauthorised access or deletion.
Where applicable law permits an authorised agent to submit a request, we may require reasonable evidence that the agent is authorised to act on your behalf.
25. Children’s Privacy
Our online store is intended for general consumer shopping and is not directed toward children under 13.
Purchases must be made by someone legally capable of entering into the transaction as described in our Terms of Service.
We do not knowingly collect personal information directly from children under 13 in circumstances prohibited by applicable law.
If you believe a child has provided personal information to us improperly, contact:
We will review the matter and take appropriate action where required.
We do not knowingly sell or share for targeted advertising the personal information of individuals where doing so is prohibited because of their age.
26. Third-Party Websites and Links
auralume.us may contain links to third-party websites or services.
AuraLume does not control the privacy or security practices of independent third-party websites.
When leaving our website, you should review the privacy information of the third party before providing personal information.
A link does not automatically mean that AuraLume owns, controls, sponsors or endorses that third party.
27. Business Changes
If the business undergoes a legitimate restructuring, sale, transfer, merger or similar transaction in the future, relevant personal information may be transferred as part of that transaction where permitted by law.
Any recipient would be required to handle the information in accordance with applicable legal requirements.
This provision does not mean that such a transaction is currently planned.
28. Legal Requests and Protection of Rights
We may disclose personal information where reasonably necessary to:
- comply with applicable law;
- respond to a valid court order or lawful government request;
- investigate fraud or unlawful activity;
- protect customers or other individuals;
- establish, exercise or defend legal claims;
- enforce our Terms of Service.
We will not voluntarily disclose customer information to authorities without a legitimate basis where one is legally required.
29. Complaints
For concerns about how AuraLume processes personal information, please contact us first at:
We will review the concern and attempt to respond appropriately.
Depending on where you live and which data-protection law applies, you may also have the right to complain to an appropriate privacy or data-protection regulator.
Where UK data-protection law applies, this may include the UK Information Commissioner’s Office (ICO).
30. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in:
- our business practices;
- website functionality;
- service providers;
- privacy technologies;
- legal or regulatory requirements.
When we make changes, we will update the “Last updated” date on this page.
Where required by law, additional notice will be provided for material changes.
31. Contact Us
For privacy questions, requests or complaints, contact:
AuraLume
Email: contact@auralume.us
Phone: +44 7940 173466
Business correspondence address:
26 North Street
Walsall
WS2 8AT
United Kingdom
Website: auralume.us
Market served: United States
Please use contact@auralume.us for privacy requests so that your request can be documented and handled appropriately
