Privacy
Policy.
How we collect, use and protect your personal data.
1. Who we are
AURUMLABS LTD is the data controller for personal data collected through aurum-labs.co. Registered in England and Wales, company number 17073174. Registered office: 3rd Floor, 86-90 Paul Street, London EC2A 4NE. We are registered with the Information Commissioner’s Office, registration number ZC195871. Contact: support@aurum-labs.co.
2. What we collect
- Order details: name, billing and delivery address, email, phone number, items bought and order history
- Payment details: confirmation of payment and the bank account a payment came from. We never see your card or bank login details
- Messages: emails you send us and our replies
- Restock alerts: your email address, if you ask to be told when a product is back
- Website use: pages visited, device and browser details and approximate location, through Google Analytics, only if you accept analytics cookies
We do not send marketing emails.
3. How we use it, and why we are allowed to
| Purpose | Legal basis |
|---|---|
| Process, deliver and support your order | Contract |
| Keep tax and accounting records | Legal obligation |
| Send customs information for EU deliveries | Legal obligation and contract |
| Prevent fraud and misuse of our products | Legitimate interests |
| Ask for a review through Trustpilot after delivery | Legitimate interests |
| Send a restock alert you asked for | Consent |
| Measure how the website is used | Consent (analytics cookies) |
4. Who we share it with
We do not sell your data. We share only what each provider needs to do its job:
- Payments: Wallid (Pay by Bank) and our bank, Tide
- Delivery: Royal Mail, Parcel2Go and the courier they use, and customs authorities for EU orders
- Website and email: GoDaddy (hosting), WooCommerce (shop software) and SendLayer (sending order emails)
- Reviews: Trustpilot receives your name, email and order number after your order is completed, so it can invite you to leave a review. You can ignore or opt out of the invitation
- Analytics: Google Analytics, only with your consent
- Advisers and authorities: our accountants, HMRC, and law enforcement or regulators where the law requires it
5. Cookies
We use cookies that are strictly necessary for the shop to work, such as keeping items in your basket and remembering your currency. These do not need consent.
We use Google Analytics cookies only if you click Accept on our cookie banner. You can change your choice at any time: Cookie settings.
6. Transfers outside the UK
Some providers, including Google and SendLayer, may process data outside the UK. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement, or equivalent safeguards.
7. How long we keep it
| Data | Kept for |
|---|---|
| Orders and invoices | 6 years after the end of the tax year, as HMRC requires |
| Emails with you | 2 years after the last message |
| Restock alert requests | Until the alert is sent, or 120 days at most |
| Google Analytics data | 14 months |
8. Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another organisation. Where we rely on consent, you can withdraw it at any time. Email support@aurum-labs.co and we will reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
9. Security
The website uses an encrypted (HTTPS) connection, and access to order data is limited to the people who need it to run the business.
10. Under-18s
Our website and products are not for anyone under 18, and we do not knowingly collect their data.
11. Changes
We will post any changes to this policy on this page and update the date at the top.
