This Privacy Policy explains how Auras Workshop (M&E Loizou Direct LTD) (“Auras Workshop”, “we”, “us”, or “our”) collects, uses, discloses, and protects your personal information when you visit or purchase from www.auracyprus.com (the “Site”) or otherwise communicate with us (the “Services”). By using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services.
1) WHO WE ARE (DATA CONTROLLER)
Auras Workshop (M&E Loizou Direct LTD)
Ayiou Dimitriou 105, Kat 3, Paralimni, Famagusta, 5281, Cyprus
Email: contact@auracyprus.com | Phone: +357 99041843
For GDPR purposes, we are the data controller for information collected via the Site and our customer interactions.
2) WHAT WE COLLECT
We collect personal information that identifies or relates to you. The categories depend on how you interact with us:
A. Information you provide directly
- Contact details: name, email, phone, billing/shipping address.
- Order & payment details: items purchased, payment confirmation (card data is handled by our payment processor and not stored in full by us).
- Account details: username, password (hashed), preferences.
- Communications: messages to customer support, reviews, survey responses.
B. Information collected automatically
- Usage/Device data via cookies and similar tech: IP address, device and browser type, pages viewed, referring/exit pages, actions on the Site, approximate location.
C. Information from third parties
- E-commerce platform and apps (e.g., Shopify) to operate the store.
- Payment processors (e.g., card providers, PayPal) to process payments and prevent fraud.
- Logistics partners (e.g., carriers/couriers) to deliver your order.
- Marketing and analytics partners (e.g., email platforms, advertising networks) to measure and improve our marketing.
3) WHY WE USE YOUR INFORMATION (LAWFUL BASES)
We use your information for:
- Providing the Services and fulfilling orders (contract).
- Account creation/management, order updates, deliveries, returns (contract).
- Customer support and service improvements (legitimate interests).
- Security, fraud prevention, and debugging (legitimate interests/legal obligations).
- Marketing communications and personalised ads (consent where required; otherwise legitimate interests).
- Compliance with law, tax, and regulatory requirements (legal obligation).
4) COOKIES & SIMILAR TECHNOLOGIES
We use cookies, pixels, and similar tools to: operate the Site, remember your preferences, analyse traffic, and personalise marketing. Most browsers allow you to block or delete cookies, but some features may not work correctly if you do. For cookies used by Shopify, see Shopify’s cookie information. You can manage consent preferences via your browser and (where available) our cookie banner.
5) HOW WE SHARE INFORMATION
We may share personal information with:
- Service providers/vendors: e-commerce platform, payment processors, hosting, security, analytics, email/SMS tools, fulfilment and shipping partners, customer support tools—only as needed to perform services for us.
- Business/marketing partners to help show you relevant offers (under their own privacy notices and with your consent where required).
- Affiliates within our corporate group.
- Authorities, regulators, or legal advisers when required by law or to protect rights.
- Parties to a business transaction (e.g., merger, acquisition), subject to appropriate safeguards.
We do not sell personal information. We do not use or disclose sensitive personal information to infer characteristics about you.
6) INTERNATIONAL TRANSFERS
Your information may be processed outside your country (including the EEA/UK). Where we transfer personal data internationally, we use recognised safeguards such as the European Commission’s Standard Contractual Clauses or adequacy decisions, as applicable.
7) RETENTION
We keep personal data only as long as necessary for the purposes described:
- Orders, invoices, and tax records: typically up to 7 years (legal obligation).
- Account data: while your account is active and for a reasonable period afterwards.
- Marketing data: until you opt out or we prune inactive lists.
- Support tickets: typically up to 24 months after closure.
We may retain data longer where required by law or to establish/defend legal claims.
8) YOUR RIGHTS (EEA/UK & SIMILAR JURISDICTIONS)
Subject to conditions and exceptions in law, you may have the right to:
- Access a copy of your personal data.
- Rectify inaccurate or incomplete data.
- Delete your data (“right to be forgotten”).
- Restrict or object to processing (including direct marketing).
- Data portability.
- Withdraw consent where processing is based on consent (withdrawal does not affect prior lawful processing).
To exercise rights, email contact@auracyprus.com. We may need to verify your identity. You can also lodge a complaint with your local data protection authority (in Cyprus: Office of the Commissioner for Personal Data Protection).
9) MARKETING CHOICES
You can unsubscribe from marketing emails at any time via the link in our emails or by contacting us. We may still send non-promotional messages (e.g., order updates).
10) SECURITY
We use administrative, technical, and physical safeguards to protect personal data. No method of transmission or storage is 100% secure; please use strong, unique passwords and keep your account details confidential. Contact us immediately if you suspect unauthorised use of your account.
11) CHILDREN
Our Services are not directed to children and we do not knowingly collect personal data from persons under 16. If you believe a child has provided us personal data, contact us to request deletion.
12) USER-GENERATED CONTENT & THIRD-PARTY LINKS
Content you post publicly (e.g., reviews) may be visible to others. Our Site may link to third-party sites we do not control; review their privacy policies as we are not responsible for their practices.
13) CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. We will post the updated version on the Site with a new “Last updated” date. Continued use of the Services means you accept the changes.
14) CONTACT US
Questions or requests about this Privacy Policy or your data:
Auras Workshop (M&E Loizou Direct LTD)
Ayiou Dimitriou 105, Kat 3, Paralimni, Famagusta, 5281, Cyprus
Email: contact@auracyprus.com | Phone: +357 99041843
