Last updated: September 2026

This policy explains what personal information we collect when you visit or buy from auroraeshop.com, why we collect it, who we share it with, and what you can ask us to do with it.

The store is operated by Aurorae Hongkong Limited, registered at Flat/RM A, 12/F, ZJ 300, 300 Lockhart Road, Wan Chai, Hong Kong. Our operations and fulfilment team is based at Room 401, Building F, Bantian International Center, No. 5 Huancheng South Road, Ma’antang Community, Bantian Subdistrict, Longgang District, Shenzhen, Guangdong 518129, China. In this policy, "we" and "Aurorae" mean that company. For the purposes of applicable data protection law, we are the data controller of your personal information.

The site runs on Shopify, which hosts the store and processes information on our behalf. Shopify's own role is explained further below.

If anything here is unclear, email info@auroraeshop.com and we will answer within 12 hours, Monday to Friday.

What We Collect

When you place an order. Your name, email address, billing and shipping addresses, phone number, the items you ordered, and the card type and last four digits of the payment method used. We do not receive or store your full card number, expiry date, or security code — those go directly to our payment processor.

When you browse. Your IP address, browser and device type, time zone, the pages and products you view, how you arrived at the site, and how you move through it. Most of this is collected through cookies and similar technologies described below.

When you create an account. Your email address and the settings and preferences saved to that account.

When you contact us. Whatever you send us — your email address, the content of your message, and any photos or order details you include. If you use the chat window on the site, we keep the conversation so we can follow up on it.

When you subscribe. Your email address, and whether you open or click our emails.

When you apply to our Trade Program. Your business name, professional role, business address, and one form of professional verification — a business licence or registration number, a resale certificate, a trade association membership number, or a link to your portfolio.

When you leave a review. Your name as you enter it, your country, your rating and review text, and confirmation of whether the review is tied to a verified order.

Where It Comes From

• Directly from you — when you order, create an account, subscribe, apply to the Trade Program, or write to us
• Automatically — from your device and browser as you use the site, through cookies and similar technologies
• From our service providers — when they process information on our behalf, for example a carrier confirming delivery

Why We Use It

• To fulfil your order — take payment, arrange shipping, clear customs, send confirmations and tracking, and handle returns, replacements, and warranty claims. This is how we perform our contract with you.
• To answer you — respond to emails, chat messages, quotation requests, and Trade Program applications.
• To screen for fraud — check orders and payments for signs of fraudulent or unlawful activity, which is where your IP address is most often used.
• To improve the site — understand which pages and products people look at, where the site is confusing, and which product photographs are useful.
• To send marketing you asked for — new designs and styling notes, only if you subscribed, and only until you unsubscribe.
• To advertise — show our products in Google Shopping results and on Google's advertising network, and measure whether those ads lead to purchases.
• To meet our legal obligations — keep tax and customs records, respond to lawful requests for information, and establish or defend legal claims.

Who We Share It With

We do not sell your personal information. We share it with the following providers, each of which only receives what it needs to do its job:

We also disclose personal information where the law requires it, in response to valid legal process, and in connection with a business transaction such as a merger or sale of the business.

Shopify's Own Role

Beyond hosting our store, Shopify uses information about how shoppers interact with Shopify-powered stores — including ours — to run certain enhanced features across its merchant network. For that use, Shopify is the data controller, not us, and Shopify handles requests about it directly.

You can read how Shopify uses your information, and exercise the rights available to you in relation to that use, through the Shopify Privacy Portal.

Cookies and Similar Technologies

Cookies are small files stored on your device. We and our providers use them to:

• Keep the site working — remember what is in your cart, keep you signed in, and process checkout. These cannot be switched off without breaking the site.
• Measure how the site is used — count visits, see which pages people read, and identify errors.
• Support advertising — recognise that a visit came from a Google or Pinterest ad, and record whether it led to a purchase.

We also use log files, web beacons, and tracking pixels, which record the same kinds of information in a different form.

You can block or delete cookies in your browser settings. If you block the ones that keep the site working, checkout will not function. Independent guidance is available at allaboutcookies.org.

Advertising Choices

To stop seeing personalised advertising from the networks we use:

• Google — ads on Google services (Search, Shopping, YouTube): myadcenter.google.com
• Google — ads on partner sites (the Display Network): adssettings.google.com/partnerads. Your My Ad Center settings do not cover partner sites, so both need setting separately.
• Pinterest: personalisation settings inside your Pinterest account
• Industry-wide: optout.aboutads.info or youronlinechoices.eu

Opting out stops advertising being tailored to you. It does not stop you seeing ads.

Global Privacy Control. If you visit our site with the Global Privacy Control signal enabled in your browser, we treat that as an opt-out request for the browser and device you are using. Where that browser can be matched to a Shopify account, the opt-out is applied to the account as well. You can read more at globalprivacycontrol.org. We do not respond to other "Do Not Track" signals, because there is no common standard for how a site should react to them.

Links to Other Sites

Our site links to pages we do not control — carrier tracking pages, Pinterest, and the opt-out tools listed above. Once you follow a link, that site's own privacy policy applies. We are not responsible for how those sites handle your information, and a link is not an endorsement.

Where Your Information Goes

Your information is held on Shopify's servers and is accessed by our team in Hong Kong and in Shenzhen, China, so that we can process, pack, and ship your order and answer your questions. Shipping carriers and the customs authority in your own country also receive your delivery details.

Neither Hong Kong nor mainland China is covered by a European Commission adequacy decision. Where personal information is transferred out of the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms — including the European Commission's Standard Contractual Clauses and the UK equivalent — contained in our agreements with Shopify and our other providers. We limit what our own team accesses to what is needed to fulfil your order and respond to you.

How Long We Keep It

• Order records — kept for as long as needed to support your warranty, and to meet tax and customs record-keeping requirements.
• Email subscriptions — kept until you unsubscribe, then removed from our sending list.
• Chat and email conversations — kept while they may still be relevant to your order or a warranty claim.
• Trade Program applications — kept for as long as your trade account is open. If an application is declined, the documents are deleted.

You can ask us to delete your information sooner. Where a record has to be kept for tax or accounting reasons, we will tell you which part we cannot remove and why.

Your Rights

Depending on where you live, you may have some or all of the following rights. They are not absolute, and in some cases we may decline a request where the law permits — we will explain why if that happens.

• Access — ask what personal information we hold about you and receive a copy
• Correction — have inaccurate information corrected
• Deletion — have your information deleted
• Portability — receive your information in a portable format, or ask us to send it to someone else
• Opt out of targeted advertising — using the controls in the Advertising Choices section above, or by emailing us
• Marketing preferences — unsubscribe from promotional email at any time using the link in any email. We will still send messages about your account and your orders.

If you are in the EEA or the UK

You also have the right to object to processing based on our legitimate interests, to ask us to restrict processing, and to withdraw consent at any time where we relied on it. Withdrawing consent does not affect processing that already took place.

We process your order information to perform our contract with you, and the rest for our legitimate interests in running and improving the business — or on the basis of your consent, where you gave it.

If you are in California

You have the right to know what personal information we collect and who we disclose it to, to request a copy, to have it corrected or deleted, and to opt out of the sale or sharing of your personal information.

We do not sell your personal information for money. Some of the advertising cookies described above may count as "sharing" for cross-context behavioural advertising under California law. You can stop that sharing using the opt-out links in Advertising Choices, by enabling Global Privacy Control, or by emailing us.

We do not have actual knowledge that we sell or share the personal information of anyone under 16.

Making a request

Email info@auroraeshop.com with what you want us to do. We may need to verify your identity first, which usually means matching the email address or order number you give us against our records.

You can appoint an authorised agent to make a request for you. We will ask the agent for proof that you authorised them, and we may still need to verify your identity with you directly.

We will not treat you differently for exercising any of these rights. We respond within one month, or sooner where the law requires it.

Complaints

If you are unhappy with how we have handled your personal information, write to us first at info@auroraeshop.com — we would rather put it right ourselves. You also have the right to complain to your national data protection authority. In the United Kingdom that is the Information Commissioner's Office; in the EEA it is the supervisory authority in the country where you live.

Children

Aurorae sells lighting for the home and our site is intended for adults. We do not knowingly collect personal information from anyone under 16. If you are a parent or guardian and believe your child has given us their information, email us and we will delete it.

Security

Payment details are encrypted in transit and handled by our payment processor, which is certified to PCI DSS Level 1. Access to order records inside our own team is limited to the people who need it to process, ship, and support your order.

No security measure is impenetrable, and information sent over the internet may not be secure in transit — please do not send us sensitive information through unsecured channels. If a breach ever affected your personal information, we would notify you and the relevant authority as required by law.

Changes to This Policy

We update this policy when our practices change, or when the law requires it. The revised version is posted on this page and the "Last updated" date at the top is changed. Material changes will be flagged.

Contact Us

• Email: info@auroraeshop.com
• WhatsApp: +1 513 206 0326 — message only
• Reply time: Within 12 hours, Monday to Friday
• Postal address: Aurorae Hongkong Limited, Flat/RM A, 12/F, ZJ 300, 300 Lockhart Road, Wan Chai, Hong Kong