Privacy policy

Last Updated: April 27, 2026

This Privacy Policy explains how AuraLoom Official (“we,” “our,” or “us”) collects, uses, and protects your personal information when you visit https://auraloomofficial.com/ (the “Site”) or interact with our services. We are committed to protecting your privacy and complying with UK GDPR and other applicable data protection laws.

1. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or business operations. The latest version will always be posted on this page with an updated “Last Updated” date.

2. Information We Collect

Information you provide directly: Contact details (name, email, phone), shipping/billing addresses, order and payment details, account credentials, communications with support.
Information collected automatically: Device type, browser, IP address, cookies, and analytics data.
Information from third parties: Payment processors, service providers, marketing partners, or social platforms.

3. How We Use Your Information

To process, confirm, and deliver your orders.
To provide customer support and respond to inquiries.
To communicate account, order, or policy updates.
To improve website functionality and services.
To conduct marketing activities where consent is provided.
To detect fraud, prevent misuse, and enhance security.
To comply with legal, regulatory, and contractual obligations.

4. Legal Basis for Processing

Under UK GDPR, we process personal data based on the following legal grounds:

Contractual necessity: Processing is required to fulfill your orders.
Consent: For marketing communications and optional services.
Legitimate interests: Fraud prevention, security, and service improvements.
Legal obligations: Compliance with UK law and regulatory requirements.

5. Your Data Protection Rights

You have the following rights under UK GDPR:

Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of personal data, subject to legal or contractual obligations.
Right to Restrict Processing: Limit how your personal data is processed.
Right to Data Portability: Receive your data in a structured, machine-readable format.
Right to Object: Object to processing for marketing or other purposes.
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise these rights, contact us at support@auraloomofficial.com. Identity verification may be required before processing requests. Routine inquiries are answered within 24 hours, while data rights requests are processed within 30 days. You can also contact the UK Information Commissioner's Office (ICO) if needed.

6. Cookies & Tracking Technologies

We use cookies and similar tools to improve site performance and user experience. Cookies may help analyze traffic, remember preferences, and personalize content. You can manage or disable cookies via your browser settings. Disabling cookies may limit certain site features. Non-essential cookies are only used after your consent through our cookie banner.

7. Sharing of Personal Information

We share personal data with trusted service providers and vendors to deliver services.
Data may be shared with affiliates or business partners where necessary.
We may disclose information to government or regulatory authorities when legally required.
We do not sell personal data without your explicit consent.

8. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the content or privacy practices of external sites. Users are encouraged to review third-party privacy policies before sharing personal data.

9. Children’s Privacy

Our services are not intended for children under the age of 13. We do not knowingly collect personal information from minors. If a child has provided personal data, please contact us to request deletion.

10. Security & Data Retention

We implement appropriate technical and organizational measures to protect personal data. No system is completely secure, and absolute security cannot be guaranteed. Personal data is retained only as long as necessary for business, legal, or contractual purposes.

11. International Data Transfers

Your information may be processed outside your country of residence. Where applicable, we ensure that data transfers comply with UK GDPR using appropriate safeguards such as standard contractual clauses.