Privacy Policy

Last updated: 29 June 2026

This privacy notice for Aurafect ("Company," "we," "us," or "our") describes how and why we collect, store, use, and share ("process") your information when you use our services ("Services"), such as when you:

  • Visit our website at aurafect.com, or any website of ours that links to this privacy notice;

  • Make a purchase or enquiry, or engage with us through sales, marketing, or events.

Questions or concerns? Reading this notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. For any questions, contact us at made@aurafect.com.

1. What Information Do We Collect?

Personal information you provide: We collect personal information that you voluntarily provide when interacting with our Services, including:

  • Names, email addresses, mailing addresses, billing addresses, and phone numbers;

  • Payment information (processed securely by our payment providers — see Section 4);

  • Any additional information you choose to share with us during interactions.

Automatically collected information: Some information is collected automatically to ensure the proper functioning and security of our Services, including:

  • Log and usage data (e.g., pages visited, time spent on pages);

  • Device data (e.g., hardware model, operating system, IP address);

  • Location data (if enabled on your device).

For more details, see our Cookie Policy.

2. How Do We Process Your Information?

We process your personal data to:

  • Provide, operate, and improve our Services;

  • Process and fulfil your orders securely;

  • Communicate with you, including for support and (with your consent) marketing;

  • Deliver and measure tailored advertising, based on your consent and preferences;

  • Comply with legal obligations;

  • Protect our Services and prevent fraud.

3. Legal Bases for Processing

Under the EU General Data Protection Regulation (GDPR) and Spain's Organic Law 3/2018 (LOPDGDD), we rely on the following legal bases:

  • Consent: where you have explicitly agreed (e.g., newsletter sign-ups, non-essential cookies, and advertising);

  • Contractual necessity: where processing is required to fulfil an order or contract with you;

  • Legitimate interests: for purposes such as fraud prevention and improving the user experience;

  • Legal compliance: to meet our legal and regulatory obligations.

4. Sharing Your Information

We may share your information with trusted third-party providers for specific purposes:

  • Payment processing: Squarespace Payments and PayPal (each processes your payment data under its own privacy policy);

  • Website hosting and infrastructure: Squarespace;

  • Analytics and performance: service providers that help us understand and improve site performance (see our Cookie Policy for specifics);

  • Advertising: Meta Platforms (Facebook and Instagram), where you have consented, to deliver and measure advertising.

Where data is transferred outside the EU/EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

5. Cookies and Tracking Technologies

We use cookies and similar technologies (including the Meta Pixel, with your consent) to operate the site, analyse traffic, and support advertising. You can manage your preferences through the Cookie Consent Manager on our website or your browser settings. Full details are in our Cookie Policy.

6. Retention of Information

We retain personal information only as long as necessary for the purposes set out in this policy or as required by law (for example, tax and accounting obligations). When no longer needed, data is securely deleted or anonymised.

7. Your Privacy Rights

Under the GDPR and LOPDGDD, you have the right to:

  • Access, correct, or delete your data;

  • Restrict or object to processing;

  • Data portability;

  • Withdraw consent at any time (this does not affect processing carried out before withdrawal);

  • Lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD — aepd.es), or your local data protection authority.

To exercise your rights, contact us at made@aurafect.com.

8. Protecting Minors

Our Services are not directed to individuals under 18. If we become aware that we have collected data from a minor, we will delete it promptly. Contact us at made@aurafect.com if you believe this has occurred.

9. Do-Not-Track

We currently do not respond to browser Do-Not-Track signals. If a future standard is adopted, we will update our practices accordingly.

10. Updates to This Policy

We may update this notice periodically to reflect changes in our practices or legal requirements. The "Last updated" date above indicates the latest revision.

11. Contact Us

For questions or requests regarding this notice:

Email: made@aurafect.com
Address: Carrer del Cobalt, 57, 08940 Cornellà de Llobregat, Barcelona, Spain
Phone: +34 683110650