Privacy policy

Last updated: 27 July 2026

This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website, aurelora.co.uk, or place an order with us.

By using the Website, you agree to this Privacy Policy. We may update this policy from time to time. We recommend that you check this page periodically.

1. Who We Are (Data Controller)

E-mail: support@aurelora.co.uk

Telephone: [to be provided]

Address: Bolwerksepoort 39, 2152EW Nieuw-Vennep, The Netherlands

Customer service hours: Monday to Friday, 09:00 to 17:00

Company name: Nebb Capital

Trade name: Aurelora

Chamber of Commerce (KvK) number: 98039849

VAT number: NL868334959B01

2. What Data Do We Collect?

Depending on how you use the Website, we may process the following categories of personal data:

Identity and contact details

First name and last name
E-mail address
Telephone number

Address and order details

Billing address
Delivery address
Order details (products, date, amount)
Order history

Payment and transaction data

Payment method (e.g., iDEAL, credit card, Shop Pay)
Payment status and transaction reference

Please note: card details are processed by our payment provider and are not stored by Aurelora itself.

Communication with our customer service

Content of e-mails or messages you send us
Notes about your question, complaint, or request

Technical and usage data

IP address
Browser type, device type, operating system
Pages visited, click behaviour, and timestamps
Cookie ID and cookie preferences

This data is collected when you place an order, contact us, or visit the Website.

3. What Do We Use Your Data For?

To process and deliver your order

Handling orders, payments, shipping, and returns
Sending order and shipping confirmations

Customer service and communication

Answering questions, complaints, and requests
Providing support with payments, returns, and delivery issues

Improving our Website and services

Analysing visitor behaviour and performance
Resolving technical issues

Protection against fraud and misuse

Marketing and offers (optional)

Sending newsletters and offers (only with your consent)
Showing personalised content or advertisements, where permitted

You can withdraw your consent for marketing at any time via the unsubscribe link in our e-mails or by contacting us.

4. On What Legal Bases Do We Process Your Data?

Performance of a contract

For processing orders, delivery, returns, and customer service.

Legal obligation

To comply with tax and accounting obligations, such as retaining invoice data.

Legitimate interest

For example, for fraud prevention, improving our Website, and keeping statistics. We always balance our interests against your privacy rights in these cases.

Consent

For certain forms of marketing and the use of non-essential cookies. You can withdraw this consent at any time.

5. Who Do We Share Your Data With?

We do not sell your personal data. We may share your data with carefully selected third parties who help us deliver our services:

Payment service providers and financial institutions — to process payments securely
Logistics and shipping partners — for delivery and tracking information
IT, hosting, and webshop systems — for the technical operation of the Website
Analytics tools and marketing services — for statistics and advertising campaigns

These parties process your data solely on our instructions and are contractually required to handle your data confidentially. In addition, we may share your data where legally required, or in connection with a merger, acquisition, or sale of (part of) our business.

6. How Long Do We Retain Your Data?

We do not retain your personal data for longer than is necessary for the purposes described in this Privacy Policy, unless a longer retention period is required by law.

Order and invoice data are retained for a minimum of 7 years, in accordance with the statutory tax retention obligation.
Customer service data is retained for the duration of handling the matter and a reasonable period thereafter.
Marketing data, such as newsletter sign-ups, is retained until you unsubscribe or withdraw your consent.
Technical and analytical data is retained for as short a period as necessary, in line with our internal retention periods and the settings of the tools used.

When data is no longer needed, we will delete it or, where possible, anonymise it.

7. Your Rights Under the GDPR

Under the General Data Protection Regulation (GDPR), you have various rights regarding your personal data:

Right of access — you may request which personal data we process about you.
Right to rectification — you may have incorrect or incomplete data corrected.
Right to erasure — in certain cases, you may request that your data be deleted.
Right to restriction of processing — in certain cases, you may request that the processing of your data be restricted.
Right to object — you may object to processing based on a legitimate interest or to the use of your data for direct marketing.
Right to data portability — in certain cases, you may request to receive your data in a structured, machine-readable format.
Right to withdraw consent — where we process your data based on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

If you wish to exercise any of these rights, please contact us at support@aurelora.co.uk or [to be provided]. We will respond within the timeframes set out in the GDPR.

In addition, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we are not handling your personal data properly.

8. Cookies and Similar Technologies

We use cookies and similar technologies to make our Website function properly, to analyse usage, and, where permitted, to personalise content and advertisements. More information about the types of cookies we use and how you can manage your preferences can be found in our Cookie Policy.

9. Security of Your Data

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or disclosure. These include:

Encrypted connections (SSL)
Secure systems and access management
Restricted access to personal data, limited to employees who need it

Although we do our utmost, no method of transmission or storage can be guaranteed to be 100% secure. We therefore cannot absolutely guarantee complete security.