Privacy Policy
Last updated: 1 January 2025 · Effective: 1 January 2025
Aura Designs Pvt. Ltd. ("Aura", "we", "us") is committed to protecting your privacy. This Policy explains what personal data we collect, why we collect it, and how we use and protect it in accordance with the Digital Personal Data Protection Act, 2023 and other applicable Indian laws.
1. Information We Collect
We collect the following categories of personal data: • Identity data: name, email address, mobile number, date of birth. • Contact data: delivery addresses and billing details. • Transaction data: orders placed, payment methods used, returns and refunds. • Technical data: IP address, browser type, device identifiers, cookies. • Usage data: pages visited, products viewed, search queries, wishlist items. • Marketing data: your preferences for receiving communications from us.
2. How We Use Your Information
We use your personal data to: • Process and fulfil your orders and manage returns. • Provide customer support and resolve disputes. • Personalise your shopping experience and product recommendations. • Send you order updates, promotional offers, and important service notifications. • Detect and prevent fraud, abuse, and security threats. • Comply with legal obligations under Indian law (IT Act 2000, DPDP Act 2023).
3. Sharing Your Information
We share your data only as necessary with: • Delivery partners (name, address, phone) to complete your order. • Payment processors (tokenised card data) to handle transactions securely. • Sellers (order details only) to fulfil your purchase. • Analytics providers (aggregated, anonymised data) to improve our platform. • Authorities when required by law or court order. We do not sell your personal data to third parties for their own marketing purposes.
4. Data Security
We implement industry-standard security measures including TLS 1.3 encryption for data in transit, AES-256 encryption for sensitive data at rest, RBI-compliant card tokenisation, regular security audits and penetration testing, and strict access controls. Despite these measures, no system is completely immune to risk. Please notify us immediately if you suspect unauthorised access to your account.
5. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. Transaction records are retained for 7 years as required by Indian tax law. After account deletion, most personal data is purged within 30 days, except data required for legal compliance or pending disputes.
6. Your Rights Under DPDP Act 2023
Under India's Digital Personal Data Protection Act 2023, you have the right to: • Access: request a copy of personal data we hold about you. • Correction: correct inaccurate or incomplete data. • Erasure: request deletion of your data (subject to legal obligations). • Grievance redress: raise concerns with our Data Protection Officer. To exercise any right, email privacy@aura.local. We respond within 30 days.
7. Cookies
We use strictly necessary cookies (for login and cart), functional cookies (for preferences), and analytical/marketing cookies (with your consent). You can manage cookie preferences in your browser settings. Note that disabling cookies may affect platform functionality.
8. Children's Privacy
Aura is not directed at children under 13. We do not knowingly collect personal data from children under 13. If we discover that we have inadvertently collected such data, we will delete it promptly. Parents who believe their child's data has been collected should contact privacy@aura.local.
9. Changes to This Policy
We may update this Privacy Policy periodically. When we make material changes, we will notify you via email and an in-app notification at least 14 days before the changes take effect. Continued use of Aura after the effective date constitutes acceptance of the revised policy.
For privacy-related concerns, contact our DPO at privacy@aura.local or write to us at: Aura Designs Pvt. Ltd., Sy No. 17/9-11, Bettadasanapura Village, Bengaluru – 560 087.