Privacy Policy

The AURA SOL Swimwear online store (“AURA SOL”, “we”, “us”, “our”) is operated by Atusha LLC (EIN: 30-1394965), a company registered in the United States, with its business address at 169 Madison Avenue, New York, NY 10016, United States. For any question about this policy or to exercise your privacy rights, contact us at support@aurasol.online.

This policy covers personal data we process as a data controller when you interact with our Shopify-powered online store, our marketing emails and SMS, our social media pages, our customer service channels, and any AURA SOL pop-up or event. It does not cover third-party websites that we link to.

• Identity & contact data: first and last name, email address, phone number, billing and shipping address, and (where applicable) a company or tax ID for wholesale orders.
• Account data: login credentials, password hash, wishlist items, saved sizes, order history and product preferences.
• Order & transaction data: items purchased (style, size, colour), order value, currency, discount codes used, gift messages, order status, returns and exchanges.
• Payment data: the last four digits and brand of your card, billing postcode and transaction reference. Full card numbers, CVV and bank credentials are collected and stored directly by our PCI-DSS Level 1 certified payment processors (Shopify Payments, Stripe, PayPal, Razorpay) and never touch our servers.
• Customer service data: messages, chat transcripts, photographs of items you send us for returns or quality claims, and call recordings where allowed by law.
• Marketing data: subscription status, campaign opens and clicks, product interests, referral source and marketing consents.
• Technical & usage data: IP address, device identifiers, browser and operating system, referring URL, pages viewed, products browsed, add-to-cart and checkout events, and approximate location derived from IP.
• User-generated content: product reviews, ratings, photos and tags you share with us (for example when you use #AURASOL on social platforms and grant us permission to repost).

We do not knowingly collect sensitive categories of personal data (such as health, biometric or government ID data) through the store.

We use your personal data to:

• Process, ship and deliver your swimwear orders and manage returns, exchanges and refunds.
• Authenticate your account and keep your wishlist, sizes and order history.
• Take payment and prevent fraudulent transactions and chargebacks.
• Provide customer service by email, chat, WhatsApp, Instagram DM and phone.
• Send transactional messages (order confirmation, shipping updates, delivery, return status).
• Send marketing emails and SMS about new collections, restocks, editorials and promotions when you have opted in.
• Personalise product recommendations, on-site content and advertising.
• Measure how our store, campaigns and product pages perform, and improve them.
• Moderate and publish reviews and user-generated content.
• Comply with tax, accounting, consumer protection and anti-money-laundering laws.

• Performance of a contract — creating your account, processing orders, deliveries, returns and refunds.
• Consent — marketing emails and SMS, non-essential cookies, personalised advertising, publishing your reviews.
• Legitimate interests — fraud prevention, store security, aggregate analytics, product improvement, defending legal claims.
• Legal obligation — invoicing, tax and accounting records, consumer-law compliance, responding to lawful requests.

You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

We and our partners use first- and third-party cookies, pixels, SDKs and local storage on www.aurasol.online to run the store, remember your cart, secure checkout, measure performance and deliver relevant advertising. The main partners we work with are:

• Shopify — cart, checkout, fraud prevention, session and store analytics.
• Google Analytics 4, Google Ads and Google Tag Manager — audience measurement, conversion tracking and remarketing.
• Meta Pixel & Conversions API — Facebook and Instagram advertising and conversion measurement.
• Microsoft Advertising (Bing UET) — Bing and Microsoft Audience Network conversion tracking and retargeting.
• TikTok, Pinterest and Snapchat pixels — social advertising and retargeting when enabled.
• Klaviyo — email and SMS marketing analytics and abandoned-cart recovery.
• Stripe, PayPal, Razorpay — payment authentication and fraud checks at checkout.

On your first visit our cookie banner lets you accept, reject or granularly configure non-essential cookies. You can change your choice at any time via the “Cookie settings” link in the footer. See our Cookie Policy for the full list.

We share personal data only with vetted service providers acting on our instructions under written data-processing agreements:

• Shopify — e-commerce platform, checkout and hosting.
• Payment processors — Shopify Payments, Stripe, PayPal, Razorpay.
• Shipping and logistics carriers — USPS, UPS, FedEx, DHL and other national carriers used to deliver your order.
• Warehousing and 3PL partners — for picking, packing and returns.
• Marketing & CRM — Klaviyo, Meta, Google, Microsoft, TikTok, Pinterest.
• Review and UGC platforms — for product reviews and moderation.
• Customer service tooling — helpdesk and chat providers.
• Professional advisors — accountants, auditors and lawyers, under confidentiality.
• Authorities — where required by a valid legal request.

We do not sell your personal information in the traditional sense. Some advertising cookies may qualify as a “sale” or “sharing” under CCPA/CPRA — see Section 10 for how to opt out.

AURA SOL operates from the United States and ships worldwide, so your personal data may be transferred to and processed in the United States, the European Economic Area, the United Kingdom and other countries where our processors operate. Where personal data leaves your country we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum and, where applicable, the EU–US Data Privacy Framework. A copy of the safeguards is available on request from support@aurasol.online.

• Order and invoice records — up to 7 years to comply with US, EU and UK tax and accounting law.
• Account data — while your account is active, then deleted or anonymised after 3 years of inactivity.
• Marketing data — until you unsubscribe or after 3 years without engagement.
• Customer service records — up to 3 years after the interaction closes.
• Cookie and advertising identifiers — for the lifetime declared in our Cookie Policy, typically no longer than 13 months.

Depending on where you live, you have the following rights over your personal data:

• GDPR / UK GDPR (EU, EEA, UK): access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You may also lodge a complaint with your local supervisory authority (e.g. CNIL in France, ICO in the UK, Garante in Italy).
• CCPA / CPRA (California): right to know, delete, correct and to opt out of the sale or sharing of personal information and of targeted advertising. We honour the Global Privacy Control (GPC) browser signal as an opt-out.
• PIPEDA (Canada): access, correction and withdrawal of consent. You may complain to the Office of the Privacy Commissioner of Canada.
• Australia Privacy Act & APPs: access, correction, and the right to complain to the Office of the Australian Information Commissioner (OAIC).

To exercise any right, email support@aurasol.online from the email address associated with your account. We respond within 30 days (extendable by a further 60 days for complex requests). We may need to verify your identity before acting.

Do Not Sell or Share My Personal Information (California residents): send an email titled “CCPA opt-out” to support@aurasol.online, use the “Cookie settings” link in the footer to disable Marketing cookies, or enable Global Privacy Control in your browser.

• Email: click “Unsubscribe” at the bottom of any AURA SOL email or write to support@aurasol.online.
• SMS / WhatsApp: reply STOP to any promotional message.
• Push notifications: disable them in your browser or device settings.
• Advertising cookies: use our Cookie settings link, opt out at youronlinechoices.eu or optout.aboutads.info, and enable the Global Privacy Control signal.

Our store is served over TLS 1.3. Payments are processed by PCI-DSS Level 1 certified providers. Access to personal data inside AURA SOL is limited to authorised staff on a need-to-know basis, protected by strong passwords, multi-factor authentication and role-based access controls. Despite our safeguards no online service can be 100% secure; please keep your account password confidential.

AURA SOL is intended for adults. We do not knowingly market to or collect personal data from children under 16 (or the age of digital consent in your country). If you believe a child has provided us with personal data, please contact support@aurasol.online and we will delete it.

We use automated systems for fraud scoring at checkout and for product recommendations. These do not produce legal or similarly significant effects on you. You may contact us to request human review of a fraud decision that blocked your order.

We may update this Privacy Policy from time to time. Material changes will be announced by email or through a notice on the store. The “Effective date” at the top always reflects the latest version.

Atusha LLC (AURA SOL Swimwear) — EIN: 30-1394965
169 Madison Avenue, New York,
NY 10016, United States
https://www.aurasol.online
Privacy: support@aurasol.online · General: support@aurasol.online · Phone: +1 (888) 756-7626