1. Information We Collect
We collect information you provide directly to us when you place an order, set up a digital profile, or contact us. This includes:
- Full name and contact details (email address, phone number)
- Order information including card type, colour, and customisation requests
- Digital profile content: biography, social media links, portfolio URLs, profile photo, and any other information you choose to include
- Delivery address for card fulfilment
- Communication records (WhatsApp messages, emails) for support purposes
We may also collect limited technical data automatically, such as IP addresses and browser information, when you visit our website. This data is used solely for security and performance purposes.
2. How We Use Your Information
We use the information we collect to:
- Fulfil and deliver your card order
- Create and host your digital profile page
- Process annual Digital Space renewals
- Respond to your enquiries and provide support
- Send order confirmations and service-related communications
- Improve our website, products, and services
We do not sell, rent, or share your personal data with third parties for marketing purposes.
3. Digital Profile Data
The content you provide for your Aure digital profile (bio, links, photo, contact info) is publicly accessible to anyone who taps your card or scans your QR code. You are responsible for the accuracy and appropriateness of the content you choose to include in your profile.
We store your profile data on secure infrastructure provided by Supabase. Profile data is retained for the duration of your active Digital Space subscription and for a reasonable period following non-renewal, after which it may be permanently deleted.
4. Third-Party Services
We use the following third-party services to operate our platform:
- Supabase: database and backend infrastructure for storing user profiles and order data
- Vercel: website hosting and content delivery
- WhatsApp (Meta): customer support and order communication
Each of these services operates under their own privacy policies. We encourage you to review them if you have concerns about how your data is handled by these providers.
5. Data Retention
We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Specifically:
- Order records are retained for a minimum of 3 years for accounting and legal compliance
- Digital profile data is retained while your Digital Space is active and deleted upon request after deactivation
- Communication records are retained for up to 12 months
6. Your Rights
You have the right to:
- Request access to the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request deletion of your personal data (subject to legal retention requirements)
- Withdraw consent for data processing where consent was the legal basis
To exercise any of these rights, contact us at hello@aure.lk.
7. Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
8. Children's Privacy
Our services are not directed at individuals under the age of 13. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will promptly delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of our services after any changes constitutes your acceptance of the updated policy.
10. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please reach out:
- Email: hello@aure.lk
- Website: aure.lk/contact