Privacy policy

This Privacy Policy explains how Aurora Studio collects, uses, shares and protects your personal information when you visit or buy from aurorastudio.co.za, in line with the Protection of Personal Information Act 4 of 2013 ("POPIA").

1. Who We Are

The responsible party for your personal information is Aurora Studio. Our contact details are on our Contact Information page. For any privacy question or request, contact our Information Officer at info@aurorastudio.co.za.

2. What We Collect

  • Contact and delivery details: your name, email address, phone number (if provided) and delivery address.
  • Order details: the products you buy, order value, order history and any returns or support requests.
  • Payment information: card payments are processed securely by our payment provider, Yoco. We do not see or store your full card number.
  • Device and usage information: information collected through cookies and similar technologies, such as your browser, device, pages viewed and how you arrived at our site.
  • Communications: messages you send us by email or through our website.

3. How We Use Your Information

  • to process, deliver and support your orders, including returns and refunds;
  • to communicate with you about your order and respond to your enquiries;
  • to prevent fraud and keep our store secure;
  • to meet our legal, tax and accounting obligations;
  • to understand and improve our website and products; and
  • to send you marketing, only where you have agreed to receive it or where the law otherwise allows. You can unsubscribe at any time using the link in our emails.

We process your information because it is necessary to perform our contract with you, to comply with the law, for our legitimate interests in running and improving our store, or with your consent.

4. Who We Share It With

We only share your information with service providers that help us run the store, and only as much as they need:

  • Shopify, which hosts our online store and checkout;
  • Yoco, which processes card payments;
  • Aramex, which delivers your orders;
  • Zoho, which provides our email; and
  • advertising and analytics partners such as Meta (Facebook and Instagram) and TikTok, where you have accepted marketing cookies.

We may also disclose information where the law requires it, or to protect our rights. We do not sell your personal information.

Our store is hosted by Shopify. Shopify also uses some information about your interactions with our store, together with other merchants, to provide and improve certain enhanced features. For that processing, Shopify is responsible for your information. You can read more, and exercise your rights for that processing, in Shopify's Consumer Privacy Policy at privacy.shopify.com.

5. Information Stored Outside South Africa

Some of our service providers (such as Shopify, Zoho, Meta and TikTok) may store or process information outside South Africa. Where this happens, we rely on providers that are subject to laws, binding agreements or policies that give your information a level of protection substantially similar to POPIA, as required by section 72 of POPIA.

6. Cookies

Our site uses cookies to make the store and checkout work, remember your cart, understand how the site is used and, where you agree, show you relevant ads. You can manage your choices through our cookie banner and your browser settings. Blocking some cookies may affect how the store works.

7. How Long We Keep It

We keep personal information only for as long as we need it for the purposes above, or as long as the law requires. Order and transaction records are kept for at least five years for tax and accounting purposes.

8. How We Protect It

We use reputable providers with appropriate security measures, and we limit access to your information. No system is completely secure, but we take reasonable steps to protect your information against loss, misuse and unauthorised access.

9. Your Rights

Under POPIA you may:

  • ask whether we hold personal information about you and request a copy of it;
  • ask us to correct or delete inaccurate, out-of-date or unnecessary information;
  • object to certain processing, including direct marketing;
  • withdraw your consent where we rely on it; and
  • lodge a complaint with the Information Regulator (www.inforegulator.org.za).

To exercise any of these rights, email info@aurorastudio.co.za. We may need to verify your identity before responding.

10. Children

Our store is not aimed at children. If you are under 18, please use our store only with the involvement and consent of a parent or guardian.

11. Changes to This Policy

We may update this policy from time to time. The latest version will always be available on our website.