1. INTRODUCTION

AUREN values your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the General Data Protection Regulation (GDPR — Regulation EU 2016/679) and applicable national data protection laws.

2. DATA CONTROLLER

AUREN — [Legal company name]

Address: [Full address]

VAT / EORI: [Tax ID]

Email: privacy@auren.com

3. DATA WE COLLECT

We collect the following categories of personal data:

• Identity data: full name, tax ID (when required for invoicing)

• Contact data: email, phone number, delivery and billing address

• Browsing data: IP address, cookies, pages visited, device and browser type

• Purchase data: order history, product preferences, transaction values

4. PURPOSE AND LEGAL BASIS FOR PROCESSING

Order processing and delivery — Performance of a contract (Art. 6(1)(b) GDPR)

Invoicing and tax compliance — Legal obligation (Art. 6(1)(c) GDPR)

Newsletters and promotional offers — Consent (Art. 6(1)(a) GDPR)

Website improvement and fraud prevention — Legitimate interest (Art. 6(1)(f) GDPR)

5. RECIPIENTS OF YOUR DATA

Your personal data may be shared with shipping and logistics providers, payment processors (Stripe, PayPal, etc.), Shopify (our hosting platform), and tax authorities when required by law. We do not sell your data to third parties for marketing purposes.

6. INTERNATIONAL TRANSFERS

Shopify may process your data outside the European Economic Area (EEA). In such cases, appropriate safeguards under the GDPR apply, including EU Commission-approved Standard Contractual Clauses.

7. RETENTION PERIOD

• Purchase data: 10 years (tax obligation)

• Account data: as long as the account is active or until deletion is requested

• Marketing data: until consent is withdrawn

• Cookies: as defined in our cookie policy

After the retention period, data is anonymised or securely deleted.

8. YOUR RIGHTS (GDPR)

Under the GDPR, you have the following rights:

• Right of access — obtain confirmation that your data is being processed

• Right to rectification — correct inaccurate or incomplete data

• Right to erasure ("right to be forgotten") — request deletion of your data

• Right to restriction of processing — request suspension of processing

• Right to data portability — receive your data in a structured format

• Right to object — object to processing based on legitimate interest or marketing

• Right not to be subject to automated decisions

To exercise your rights, contact us at privacy@auren.com. We will respond within 30 days, extendable by a further 30 days for complex requests. You also have the right to lodge a complaint with the Data Protection Authority in your country of residence.

9. COOKIES AND SIMILAR TECHNOLOGIES

We use cookies to enhance your browsing experience. The consent banner on our site allows you to manage your preferences in compliance with the ePrivacy Directive and the GDPR.

10. DATA SECURITY

We implement appropriate technical and organisational measures including SSL/TLS encryption, firewalls, and restricted access controls.

11. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. The date of the last update is always indicated below. We recommend reviewing it regularly.

12. CONTACT

Email: privacy@auren.com

Address: Leonardo Rodrigues da Silva,  Mauá - SP - Brasil 

Last updated: 1 August 2026