1. Data Controller

Contact: hello@aurelkeepsakes.com

2. Data Collected

When you browse and make purchases on aurelkeepsakes.com, we may collect:

• Identification data: first name, last name, email address, postal address, phone number
• Order data: items ordered, amounts, customizations (engraving text, chosen style)
• Payment data: processed directly by our secure payment provider (Shopify Payments). AUREL does not store any banking data.
• Browsing data: IP address, browser type, pages visited, via analytical cookies

3. Purposes and Legal Bases

• Order processing and tracking — legal basis: contract performance
• Transactional communication (order confirmation, shipping) — legal basis: contract performance
• Customer service — legal basis: legitimate interest
• Audience analysis and site improvement — legal basis: consent (cookies)
• Legal and accounting obligations — legal basis: legal obligation

4. Data Recipients

Your data may be transmitted to the following service providers, strictly within the scope of their missions:

• Shopify Inc. — store hosting and management
• Shipping providers — order delivery
• Payment providers — secure transaction processing

Your data is never sold to third parties.

5. Data Retention Period

• Customer and order data: 5 years from the last order (accounting obligation)
• Browsing data: 13 months maximum

6. Your Rights

In accordance with the GDPR, you have the rights to access, rectify, erase ("right to be forgotten"), restrict processing, data portability, and object to the processing of your data. To exercise your rights, please contact us at hello@aurelkeepsakes.com. We will respond within 30 days. You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

7. Cookies

Our site uses cookies to ensure its proper functioning and analyze our audience. You can manage your preferences at any time via your browser settings.

• Essential cookies: necessary for the site's operation (cart, session). No consent required.
• Analytical cookies: anonymous audience measurement. Subject to your consent.

8. Security

AUREL implements all appropriate technical and organizational measures to protect your data against unauthorized access, loss, or disclosure, particularly through the SSL/TLS encryption protocol.

9. Modifications

AUREL reserves the right to modify this policy at any time. The current version is the one published on this page, with its last updated date.