Privacy Policy

1. Who controls your information

The data controller for the website aurawonders.com and the Aura | Human Wonders online store is:

Marco Cremona
Via Croce Malloni 259/A
84015 Nocera Superiore (SA), Italy
Italian Fiscal Code: CRMMRC84H25F912T
Administrative and privacy email: admin@aurawonders.com
Customer service email: customers@aurawonders.com

In this Policy, “Aura”, “we”, “us” and “our” refer to the controller above.

2. Scope of this Policy

This Policy applies when you browse the website, create or use an account, place or manage an order, request a custom print, contact customer service, submit content or instructions, subscribe to the newsletter, interact with our social or advertising campaigns, or otherwise communicate with Aura.

Third-party websites and services have their own privacy notices. This Policy does not control how those third parties process information for their independent purposes.

3. Information we collect

3.1 Information you provide

• Identity and contact information: name, email address, telephone number and billing or delivery address.
• Account information: username, encrypted password credentials, account preferences and account activity.
• Order and transaction information: products, sizes and framing options selected, order value, currency, payment status, taxes, shipping method, tracking information, returns, refunds and customer-care history.
• Custom-print information: images, files, references, text, instructions, requested styles and any other content you choose to submit for a custom request.
• Communications: emails, contact-form messages, complaints, reviews, support requests and related correspondence.
• Marketing preferences: newsletter subscription, consent status and communication preferences.

3.2 Information collected automatically

• Technical information: IP address, browser type, operating system, device type, language, approximate location derived from IP, referring URL, timestamps and security logs.
• Website and shopping activity: pages viewed, products viewed, cart activity, account or checkout interactions, session identifiers and error or performance information.
• Analytics and advertising information: online identifiers, campaign source, ad interactions, conversion events and similar information, but only when the relevant technology is enabled and the required consent or opt-out choice has been respected.

3.3 Information from third parties

We may receive payment confirmation from payment providers, delivery and tracking updates from carriers or fulfilment partners, fraud or security signals from service providers, campaign attribution information from advertising platforms, and information you make available when interacting with our social-media pages.

3.4 Information we do not intentionally request

Please do not send special-category or highly sensitive information—such as health, biometric, religious, political or government-identity information—unless it is strictly necessary and we have expressly asked for it. Aura does not intentionally collect precise geolocation data through the website.

4. Why we use information and our legal bases

Where we rely on legitimate interests, we assess the necessity and impact of the processing and apply safeguards. You may object where applicable. Where we rely on consent, you can withdraw it at any time without affecting earlier lawful processing.

5. Who receives your information

We disclose information only as reasonably necessary to the following categories of recipients:

• Hosting, website, e-commerce, database, security and technical-support providers.
• Payment providers and financial institutions selected at checkout.
• Print-production, fulfilment, packaging, logistics, postal and courier partners that manufacture or deliver the order.
• Email, newsletter, customer-support and communications providers.
• Analytics and advertising providers, including Google, Meta and Pinterest, only if their services are enabled and your applicable choices permit their use.
• Professional advisers, such as accountants, legal advisers, insurers and auditors.
• Authorities, courts or other parties where disclosure is required by law, needed to protect rights or safety, or necessary in connection with a legal claim or business reorganisation.

Service providers acting on our behalf are required to process information under appropriate instructions and safeguards. Some recipients, such as payment, social-media and advertising companies, may also act as independent controllers for parts of their processing.

We do not sell personal information for monetary payment. Certain advertising disclosures may be considered a “sale”, “sharing” or use for targeted advertising under some privacy laws; where applicable, you can opt out through Cookie Settings or an enabled browser-based opt-out signal.

6. Payments

Payments are handled by the payment method and provider displayed at checkout, which may include card, digital-wallet and PayPal services. Aura generally receives transaction identifiers, payment status, limited payer information and fraud or chargeback information. Full card numbers and card-security codes are processed by the relevant payment provider and are not intended to be stored on Aura’s website.

7. International data transfers

Aura is established in Italy, but providers, production partners, carriers, advertising platforms or customers may be located outside the European Economic Area, the United Kingdom or your country.

Where required, international transfers are protected through an adequacy decision, approved contractual safeguards such as Standard Contractual Clauses, supplementary security measures, or another lawful transfer mechanism. You may request further information about the applicable safeguards by contacting us.

8. How long we keep information

We keep personal information only for as long as needed for the stated purposes, considering legal, accounting, security and dispute-resolution requirements. Our intended schedule is:

• Completed orders, invoices and core accounting records: generally 10 years from the relevant transaction or financial year, and longer only where a legal hold, audit or dispute requires it.
• Pending, failed, abandoned or cancelled orders: normally up to 30 days, unless needed for fraud prevention, customer service or a dispute.
• Customer accounts: while active and, where technically configured, up to 24 months after inactivity or until a valid deletion request, subject to records that must be retained by law.
• Customer-service and complaint records: normally 24 months after closure, or longer where needed for a claim.
• Custom-print files and instructions: for production and support, normally up to 24 months after fulfilment, unless an earlier deletion is appropriate or longer retention is necessary for a dispute.
• Newsletter data: until you unsubscribe or withdraw consent, and normally deleted or suppressed within 24 months after the last meaningful interaction, subject to a minimal suppression record used to respect your opt-out.
• Security logs: normally up to 12 months, unless a longer period is needed to investigate an incident.
• Cookie preference: stored in your browser for up to 6 months, after which the site may request a new choice.
• Analytics data: according to the configuration of the relevant service; where Google Analytics is enabled, we intend to use the shortest practical user-level retention setting and no more than 14 months unless a different period is justified and disclosed.

Information may be anonymised instead of deleted. Anonymised information that can no longer identify you may be retained for statistics and business analysis.

9. Marketing, analytics and advertising technologies

9.1 Email marketing

Where required, Aura sends promotional emails only with your consent. Every marketing email should contain an unsubscribe option. Withdrawing marketing consent does not affect service messages about an order, account, security matter or legal notice.

9.2 Cookies, pixels and tags

Strictly necessary technologies support functions such as the shopping cart, checkout, account login, security and consent storage. Non-essential technologies are controlled through the cookie banner.

As of the date of this Policy, Aura does not intend to activate non-essential analytics or advertising tags before a user has made the required choice. The website may introduce:

• Google Analytics 4 for audience and performance measurement;
• Google Ads tags for conversion measurement and advertising;
• Meta Pixel for advertising measurement, audiences and remarketing;
• Pinterest Tag for conversion measurement, audiences and Pinterest advertising.

When enabled, these services may receive online identifiers, IP address, browser and device information, page URLs, referral data and interaction or purchase events. Enhanced matching features that use customer information should remain disabled unless separately assessed, documented and lawfully configured.

For more detail, see our Cookie Policy and open Cookie Settings. Browser controls and privacy signals may also affect tracking.

9.3 No solely automated decisions with significant effects

Aura does not currently make decisions based solely on automated processing that produce legal or similarly significant effects for customers. Advertising platforms may perform profiling for ad delivery when permitted by your choices and their terms.

10. Your privacy rights

Depending on your location and the applicable law, you may have the right to:

• obtain information about and access personal information;
• correct inaccurate or incomplete information;
• request deletion or anonymisation;
• restrict or object to processing;
• receive portable information in a structured format;
• withdraw consent at any time;
• opt out of sale, sharing, targeted advertising or certain profiling;
• appeal a refusal where local law provides an appeal right;
• not be discriminated against for exercising privacy rights;
• complain to a competent privacy or data-protection authority.

To exercise a right, email admin@aurawonders.com and describe your request. We may ask for proportionate information to verify identity and authority. An authorised agent may submit a request where permitted by law, subject to verification.

For cookie consent, use Cookie Settings. You can also unsubscribe from promotional emails using the link in the message.

EU and EEA residents may complain to the Italian Data Protection Authority (Garante per la protezione dei dati personali) at garanteprivacy.it, or to the authority in their place of habitual residence or work. UK residents may complain to the UK Information Commissioner’s Office. Residents elsewhere may contact their local privacy authority.

11. Additional regional notices

11.1 California and other United States privacy laws

Where an applicable United States state privacy law covers Aura’s processing, residents may have rights to know, access, correct and delete information, and to opt out of sale, sharing, targeted advertising or qualifying profiling.

In the preceding 12 months, Aura may have collected the categories described in Section 3: identifiers and contact information; customer records; commercial information; internet or electronic-network activity; approximate geolocation derived from IP; audio, electronic or visual information you submit; professional information if provided for a business order; and inferences limited to product or marketing preferences. Sources, purposes and recipient categories are described in Sections 3–5.

Aura does not knowingly sell personal information for money. When advertising pixels are enabled, disclosure of identifiers and internet activity to advertising platforms may be treated as “sharing”, a “sale” or targeted advertising under some laws. You may opt out through Cookie Settings. The banner is designed to recognise the Global Privacy Control signal and keep marketing tracking disabled when that signal is active.

Aura does not intend to use sensitive personal information to infer characteristics and does not knowingly sell or share personal information of consumers under 16.

11.2 Brazil

Where Brazil’s LGPD applies, you may have rights to confirmation, access, correction, anonymisation, blocking, deletion, portability, information about sharing, information about consent choices, consent withdrawal and review of certain automated decisions. Depending on the processing, legal bases may include contract, legal obligation, legitimate interests and consent.

11.3 Canada

Where Canadian privacy law applies, Aura uses personal information for identified and appropriate purposes, obtains meaningful consent where required, limits use and disclosure, and provides access and correction rights subject to lawful exceptions.

11.4 United Kingdom, Switzerland and other jurisdictions

Residents may have equivalent or additional rights under their local law. Nothing in this Policy limits mandatory rights that cannot lawfully be waived.

12. Security

We use reasonable technical and organisational safeguards appropriate to the nature and risk of the information, including access controls, secure connections, software updates, backups, service-provider review and payment-provider separation. No system is completely secure, and we cannot guarantee absolute security.

If a personal-data breach creates a notification duty, Aura will notify the competent authority and affected individuals as required by applicable law.

13. Children

The store is intended for adults. Orders must be placed by a person who is at least 18 years old or has the consent and involvement of a parent or legal guardian. Aura does not knowingly use the website to collect personal information from children for behavioural advertising.

14. Changes to this Policy

We may update this Policy when our services, providers, legal obligations or data practices change. The “Last updated” date identifies the current version. Material changes may also be highlighted on the website or communicated through an appropriate channel.

15. Contact

Privacy questions and rights requests:

Marco Cremona — Aura | Human Wonders
Via Croce Malloni 259/A, 84015 Nocera Superiore (SA), Italy
admin@aurawonders.com

Order and customer-service questions: customers@aurawonders.com.