Privacy policy

Privacy Policy

Last updated: July 2026

AUURAH (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you visit our website or purchase our products. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

AUURAH is the trading name for our home fragrance brand, manufactured by our Perfume Factory in Kuwait and fulfilled in the United Kingdom. For any privacy enquiries, contact us at hello@auurah.com.

2. Information We Collect

We may collect and process the following categories of personal data:

• Identity & Contact Data: Name, email address, billing/delivery address, phone number
• Order Data: Purchase history, product preferences, order details
• Payment Data: Payment card details (processed securely by our payment provider - we do not store full card details)
• Technical Data: IP address, browser type, device information, browsing behaviour on our site
• Marketing Data: Preferences for receiving promotional communications
• Communication Data: Records of correspondence with us (emails, contact form submissions)

3. How We Use Your Information

We process your personal data for the following purposes:

• Order fulfilment: Processing and delivering your purchases
• Customer service: Responding to enquiries and resolving issues
• Payment processing: Verifying and processing payments securely
• Marketing communications: Sending newsletters and offers (only with your consent)
• Website improvement: Analysing site usage to enhance user experience
• Legal compliance: Meeting our legal and tax obligations

4. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases:

• Consent: For marketing communications and non-essential cookies
• Contract: To fulfil your orders and provide the products you've requested
• Legal obligation: To comply with tax, accounting, and regulatory requirements
• Legitimate interests: For fraud prevention, site security, and business analytics

5. Data Sharing

We do not sell your personal data. We may share your information with:

• Payment processors (e.g., Shopify Payments, PayPal) for secure payment handling
• Shipping carriers for delivery of your orders
• Service providers (e.g., Klaviyo for email, Shopify for e-commerce platform)
• Our manufacturing (Our Perfume Factory, Kuwait) for order fulfilment
• Legal authorities where required by law

6. International Data Transfers

As our products are manufactured in Kuwait and we ship internationally, your data may be transferred outside the UK. We ensure appropriate safeguards are in place, including standard contractual clauses and data transfer agreements, to protect your information in accordance with UK GDPR.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Order data is typically retained for 6 years for tax and accounting purposes.

8. Your Rights

Under UK GDPR, you have the following rights: