Privacy Policy

AUREOUS LTD PRIVACY POLICY

Last updated: 10 August 2026

Aureous Ltd (“Aureous”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose and protect your personal information when you visit www.aureous.co (the “Site”), make a purchase, contact us, sign up to receive marketing communications, interact with our advertising, or otherwise use our services.

Aureous Ltd is the controller of your personal information for the purposes of applicable data protection law.

Contact details

Aureous Ltd
Withington Works
30 Burton Road
Manchester
M20 3EB
United Kingdom

Email: hello@aureous.co

This policy is intended to provide information relevant to customers and visitors in the United Kingdom, European Union and European Economic Area, Switzerland and the United States. Your specific rights may vary depending on where you live.

1. PERSONAL INFORMATION WE COLLECT

Depending on how you interact with us, we may collect the following categories of personal information.

Information you provide to us

When you make or attempt to make a purchase, create an account, contact us, enter information on our Site, sign up for marketing or otherwise interact with us, we may collect information including:

  • your name;

  • email address;

  • telephone number;

  • billing address;

  • delivery address;

  • order and transaction information;

  • payment-related information;

  • account information;

  • communications you send to us;

  • marketing preferences; and

  • any other information you choose to provide.

Payments are processed through our payment providers. We do not necessarily receive or store your complete payment-card details ourselves.

Information collected automatically

When you visit or interact with the Site, we and our service providers may automatically collect certain information about your device and your use of the Site, including:

  • IP address;

  • browser and device type;

  • operating system;

  • time zone and approximate location;

  • cookie and similar technology identifiers;

  • pages and products viewed;

  • links clicked;

  • referring websites;

  • search terms;

  • dates and times of visits;

  • interactions with the Site;

  • shopping and checkout activity; and

  • information about how you interact with our marketing and advertising.

We may collect this information using cookies, pixels, tags, web beacons, software development kits and similar technologies.

Please see our Cookie Policy and cookie consent settings for further information.

2. HOW WE USE YOUR PERSONAL INFORMATION

We may use your personal information to:

  • process and fulfil your orders;

  • process payments and refunds;

  • arrange production, delivery and shipping;

  • send order confirmations and service communications;

  • provide customer service;

  • respond to questions, complaints and requests;

  • administer your customer account;

  • prevent and detect fraud, misuse and security incidents;

  • operate, maintain and improve our Site;

  • understand how customers use our Site;

  • measure the performance of our Site and marketing campaigns;

  • personalise your experience;

  • send marketing communications where permitted;

  • create and measure advertising audiences;

  • display and measure relevant advertising;

  • analyse the effectiveness of advertising;

  • comply with tax, accounting and other legal obligations;

  • establish, exercise or defend legal claims; and

  • protect our business, customers and legal rights.

3. OUR LAWFUL BASES FOR PROCESSING

Where UK GDPR or EU GDPR applies, we rely on one or more of the following lawful bases.

Contract

We process personal information where necessary to enter into or perform a contract with you. This includes processing your order, taking payment, arranging delivery, processing returns and providing customer service relating to your purchase.

Consent

We rely on your consent where required, including for certain:

  • email marketing communications;

  • advertising and analytics cookies;

  • pixels and similar tracking technologies; and

  • personalised advertising activities.

Where we rely on consent, you may withdraw your consent at any time.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Legitimate interests

We may process information where necessary for our legitimate business interests and where those interests are not overridden by your rights and interests.

These interests may include:

  • operating and improving our business and Site;

  • understanding how customers use our services;

  • protecting our business against fraud and misuse;

  • providing effective customer service;

  • maintaining the security of our systems; and

  • measuring and improving business performance.

Where applicable law requires consent for a particular activity, such as the use of certain non-essential cookies, we will seek consent rather than relying solely on legitimate interests.

Legal obligations

We process certain information where necessary to comply with our legal obligations, including tax, accounting, consumer protection and regulatory requirements.

4. EMAIL MARKETING

If you choose to sign up to receive marketing emails from Aureous, we may use your name, email address, marketing preferences, purchase history and interactions with our emails and Site to send you information about:

  • new products;

  • offers and promotions;

  • sales;

  • product recommendations;

  • inspiration; and

  • other Aureous news.

We use Klaviyo to help manage our email marketing and related customer communications.

Where consent is required, we send marketing on the basis of the consent you provide when signing up.

You can withdraw your consent and unsubscribe from marketing emails at any time by using the unsubscribe link included in our marketing emails.

You can also contact us at hello@aureous.co.

Unsubscribing from marketing does not prevent us from sending necessary transactional or service messages concerning an order or customer-service request.

We may retain limited information indicating that you have opted out so that we can respect your preference and avoid sending you further marketing.

5. COOKIES, ANALYTICS AND ADVERTISING

We use cookies and similar technologies to operate our Site, understand how it is used, improve our services and, where permitted, provide and measure advertising.

These technologies may include services provided by:

Shopify

Our online store is powered by Shopify, which processes information required to operate our ecommerce store, facilitate transactions and provide related services.

Klaviyo

We use Klaviyo for email marketing, customer communications, marketing analytics and related functionality.

Google

We use Google Analytics to understand how visitors interact with our Site.

We also use Google Ads and related Google advertising technologies to measure advertising performance and, where permitted, provide relevant or personalised advertising.

Meta

We use advertising and measurement technologies provided by Meta, including the Meta Pixel, to understand the effectiveness of our advertising and, where permitted, create audiences and deliver relevant advertising on services such as Facebook and Instagram.

Pinterest

We use Pinterest advertising and measurement technologies, which may include the Pinterest Tag, to measure advertising performance and, where permitted, provide relevant advertising and create advertising audiences.

These providers may receive information about your browser, device, interactions with our Site, purchases and other online activity.

Where required by applicable law, non-essential analytics and advertising technologies will not be used until you have provided the necessary consent.

You can manage your choices through the cookie consent tools available on our Site.

6. PERSONALISED ADVERTISING AND PROFILING

Where permitted by law and subject to your consent where required, we and our advertising partners may use information about your activity to:

  • understand your interests;

  • create advertising audiences;

  • show advertisements that may be more relevant to you;

  • measure whether advertising resulted in visits or purchases; and

  • improve the effectiveness of our advertising.

This may involve limited profiling based on your browsing, purchasing or interaction history.

We do not use automated decision-making that produces legal effects or similarly significant effects on you solely through automated processing unless we tell you otherwise and have an appropriate lawful basis.

7. HOW WE SHARE PERSONAL INFORMATION

We may share personal information with third parties where necessary to operate our business and provide our services.

These may include:

  • Shopify and ecommerce service providers;

  • Klaviyo;

  • payment processors;

  • manufacturers and fulfilment partners;

  • delivery companies and couriers;

  • IT and website service providers;

  • cloud hosting providers;

  • customer-service providers;

  • fraud prevention and security providers;

  • professional advisers such as accountants and lawyers;

  • Google;

  • Meta;

  • Pinterest;

  • analytics providers;

  • advertising and marketing providers; and

  • government, regulatory, tax or law-enforcement authorities where legally required.

We do not disclose personal information to third parties simply for them to use for unrelated purposes without an appropriate legal basis.

We may also disclose personal information in connection with a merger, acquisition, restructuring, financing, sale of assets or similar corporate transaction.

8. INTERNATIONAL TRANSFERS

Aureous is based in the United Kingdom, but some of our service providers operate internationally.

As a result, your personal information may be processed in countries outside the UK, European Economic Area or Switzerland, including the United States and Canada.

Where applicable data protection law requires safeguards for an international transfer, we take appropriate steps designed to protect your information.

Depending on the circumstances, these may include:

  • transfers to countries recognised as providing an adequate level of data protection;

  • approved contractual safeguards, such as applicable standard contractual clauses;

  • the UK International Data Transfer Agreement or UK Addendum where appropriate;

  • recognised data-protection transfer frameworks where applicable; or

  • another lawful transfer mechanism permitted by applicable law.

You can contact us if you would like further information about safeguards relevant to transfers of your personal information.

9. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including satisfying legal, accounting, tax, fraud-prevention and reporting requirements.

The appropriate retention period depends on factors including:

  • why we collected the information;

  • the nature and sensitivity of the information;

  • whether we need it to provide a service;

  • applicable legal and regulatory requirements;

  • applicable limitation periods; and

  • whether retention is necessary to establish, exercise or defend legal claims.

Order and transaction information may therefore need to be retained even after you ask us to delete your information where we have a legal obligation or other lawful reason to retain it.

Marketing information is generally retained until you unsubscribe, withdraw your consent or we determine that it is no longer necessary, subject to retaining limited suppression information where necessary to honour your opt-out.

10. SECURITY

We use reasonable technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

11. YOUR UK AND EUROPEAN DATA PROTECTION RIGHTS

If UK GDPR, EU GDPR or other applicable European data-protection legislation applies to you, you may have rights including:

  • Access – to request access to personal information we hold about you.

  • Rectification – to ask us to correct inaccurate or incomplete information.

  • Erasure – to ask us to delete your personal information in certain circumstances.

  • Restriction – to ask us to restrict how we use your information in certain circumstances.

  • Data portability – to receive certain information in a structured, commonly used and machine-readable format and, where applicable, have it transferred to another organisation.

  • Objection – to object to certain processing based on legitimate interests.

  • Direct marketing objection – to object to the use of your personal information for direct marketing.

  • Withdrawal of consent – to withdraw consent at any time where we rely on consent.

  • Automated decision-making rights – to have protections in relation to certain solely automated decisions where applicable.

These rights are subject to legal conditions and exemptions.

To exercise a privacy right, contact us at hello@aureous.co.

We may need to verify your identity before completing your request.

12. UK RESIDENTS

If you are in the United Kingdom, you have the right to complain to the Information Commissioner's Office (ICO) if you have concerns about how we use your personal information.

We would appreciate the opportunity to address your concerns first, so you are welcome to contact us at hello@aureous.co.

Your right to complain to the ICO is not affected by contacting us first.

13. EU/EEA RESIDENTS

If you are located in the European Union or European Economic Area, you may have rights under the EU General Data Protection Regulation and applicable national data-protection legislation.

You may also have the right to lodge a complaint with the data-protection supervisory authority responsible for your country or region.

14. SWITZERLAND

If you are located in Switzerland, we process personal information in accordance with applicable Swiss data-protection requirements, including the Swiss Federal Act on Data Protection where it applies.

You may have rights under Swiss law regarding personal information we hold about you, including rights relating to access and correction and other rights provided by applicable law.

You may contact us at hello@aureous.co regarding your personal information.

You may also have the right to contact the Swiss Federal Data Protection and Information Commissioner regarding data-protection concerns.

15. UNITED STATES PRIVACY RIGHTS

Residents of certain US states may have additional privacy rights under applicable state law.

Depending on the law applicable to you and whether Aureous falls within its scope, these rights may include the right to:

  • know or confirm whether we process your personal information;

  • access personal information;

  • obtain a copy of certain personal information;

  • correct inaccurate personal information;

  • request deletion of personal information;

  • opt out of certain targeted advertising;

  • opt out of certain sales or sharing of personal information;

  • opt out of certain profiling;

  • limit certain uses of sensitive personal information; and

  • appeal certain decisions concerning a privacy request.

These rights vary by state and are subject to applicable thresholds, definitions, exceptions and exemptions.

You may submit a privacy request by contacting hello@aureous.co.

Where required, we will provide additional methods for exercising applicable opt-out rights through our Site.

We will not unlawfully discriminate against you for exercising an applicable privacy right.

California residents

If the California Consumer Privacy Act, as amended (“CCPA”), applies to Aureous and to your personal information, you may have rights including rights to know, access, correct or delete certain personal information and to opt out of certain sales or sharing of personal information.

Certain advertising activities involving the disclosure of identifiers or online activity to advertising partners may constitute “sharing” for cross-context behavioural advertising under California law even where no money is exchanged.

Where required by applicable law, we will provide an appropriate method for California consumers to opt out of such activity and will process legally recognised opt-out preference signals where required.

Nothing in this section is intended to state that a particular US state privacy law applies to Aureous where the applicable statutory thresholds or other requirements are not met.

16. CHILDREN

Our Site and services are not directed at children.

We do not knowingly collect personal information from children in circumstances prohibited by applicable law.

If you believe a child has provided us with personal information inappropriately, please contact hello@aureous.co.

17. THIRD-PARTY WEBSITES

Our Site may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices of third-party websites. We encourage you to review their privacy policies before providing personal information.

18. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our practices, technologies, legal requirements or for other operational reasons.

When we make changes, we will update the “Last updated” date at the top of this policy.

Where required by law, we will provide additional notice of material changes.

19. CONTACT US

If you have questions about this Privacy Policy, would like to exercise your privacy rights or have a complaint about how we handle your personal information, please contact:

Aureous Ltd
Withington Works
30 Burton Road
Manchester
M20 3EB
United Kingdom

Email: hello@aureous.co