Privacy Policy

This Privacy Policy explains how AURIC Beauty Studio ApS (Strandgade 27, 1401 Copenhagen K, Denmark) processes personal data collected through the AURIC website. We are the data controller for your personal data.

Where European data protection law (including the GDPR) applies, we process personal data in accordance with its requirements.

We collect the following categories of personal data:

• Account data — name, email address, and password (for created accounts, including sign-in via Google).
• Order data — shipping address, billing details, order history, and payment status.
• Communication data — messages you send through our contact form or support channels.
• Usage data — pages visited, device and browser information, IP address, and analytics events.
• Newsletter data — your email address if you subscribe.

We do not collect more data than is necessary for the purposes described in this policy.

We use your data for the following purposes:

• To create and manage your account and keep you signed in.
• To process and deliver your orders.
• To respond to your inquiries and provide customer support.
• To send order updates, and (with your consent) newsletters and promotional content.
• To improve the Website and analyze how it is used.
• To detect, prevent, and address fraud or abuse.
• To comply with our legal obligations.

We process personal data on the following legal bases under the GDPR / applicable law:

• Performance of a contract — to provide the services and fulfil orders you request.
• Legitimate interests — to operate, secure, and improve the Website, subject to your rights.
• Consent — for marketing communications and non-essential cookies/tracking, which you may withdraw at any time.
• Legal obligation — where we must keep records required by law (e.g. accounting and tax).

For cookies, tooling, and cross-site tracking, AURIC [👉 DESCRIBE YOUR SETUP: which cookie/tracking tools do you use, e.g. Vercel Analytics, Plausible, Google Analytics; and your cookie banner], it is documented in our cookie notice shown on first visit. Essential cookies and local storage are used to keep you signed in, remember your cart, and preserve preferences.

Non-essential cookies (e.g. analytics or marketing) are only set after you accept, and you can change or withdraw your choices at any time in the cookie settings.

We only share personal data with trusted service providers who process it on our behalf under contract, including:

• Payment providers — to process payments.
• Hosting & infrastructure — e.g. Vercel, which hosts the Website.
• Database providers — e.g. Neon, which stores account data.
• Analytics providers — to understand usage.
• Google (via sign-in) — as described below.

We never sell your personal data to third parties. We only disclose data if required by law, regulatory bodies, or with your consent.

We offer “Sign in with Google” through Google OAuth. When you sign in with Google, we receive the identifiers Google shares with us (typically your Google name, email address, and profile picture). You control this right in your Google account settings — to the extent Google provides such controls.

Google processes your data as a separate controller under its own Google Privacy Policy and Google Terms of Service. You can revoke access at any time from your Google account settings.

To the extent we use providers located outside the EEA (such as Google and Vercel in the United States), we ensure that suitable safeguards (such as the European Commission’s Standard Contractual Clauses) and strategies are in place before data is transferred, in accordance with applicable law.

We keep personal data only as long as needed for the purposes it was collected for, and to comply with statutory retention periods (typically [👉 SET YOUR RETENTION PERIOD, e.g. 2 years after last order]for order records). Account data is retained until the account is deleted.

We use appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), access controls, and credentialed authentication through better-auth. No method of transmission is 100% secure, but we work to protect your data.

Depending on where you live (and in the EU/EEA under the GDPR), you may have the right to:

• Access and obtain a copy of your personal data.
• Rectify inaccurate or incomplete data.
• Request erasure of your data (“right to be forgotten”), subject to legal retention requirements.
• Restrict or object to processing.
• Receive your data in a structured, portable format.
• Withdraw any consent you have given at any time.
• Lodge a complaint with your supervisory authority.

To exercise any of these rights, contact us at hello@auricbeauty.com. We respond within one month as required by the GDPR.

Our Website is not directed to children under [👉 e.g. 16 years], and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. If we make significant changes, we will take reasonable steps to inform you.

For any privacy questions or requests, contact us at:

AURIC Beauty Studio ApS
Strandgade 27, 1401 Copenhagen K, Denmark
Email: hello@auricbeauty.com