Privacy policy

Last updated: September 8, 2026

ECOAURRA LTD, trading as EcoAurra, operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the “Services”).

EcoAurra is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use, make a purchase or other transaction using the Services, or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use and disclosure of your information as described in this Privacy Policy.

Personal Information We Collect or Process.

When we use the term “personal information,” we are referring to information that identifies or can reasonably be linked to you or another person.

Personal information does not include information that is collected anonymously or that has been de-identified so that it cannot identify or reasonably be linked to you.

We may collect or process the following categories of personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

  • Contact details, including your name, billing address, shipping address, phone number and email address.
  • Financial and payment information, including payment information, transaction details, form of payment, payment confirmation and other payment-related details processed in connection with your purchase.
  • Account information, including your account identifiers, preferences and settings.
  • Transaction information, including the items you view, place in your cart, purchase, return or cancel, and information about your past transactions.
  • Communications with us, including information you provide when contacting us or submitting a customer-support enquiry.
  • Device information, including information about your device, browser or network connection, IP address and other unique identifiers.
  • Usage information, including information about how and when you interact with or navigate the Services.

Personal Information Sources.

We may collect personal information:

  • Directly from you, including when you create an account, visit or use the Services, place an order, communicate with us or otherwise provide information to us.
  • Automatically through the Services, including from your device when you use our Services or visit our website, and through cookies and similar technologies.
  • From service providers we engage to provide technology, payment, fulfilment, delivery, marketing or other services on our behalf.
  • From partners or other third parties where permitted by applicable law.

How We Use Your Personal Information.

Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:

Provide, Tailor and Improve the Services.

We use your personal information to provide the Services, including to perform our contract with you, process payments, fulfil and deliver orders, remember your preferences, send notifications related to your account or orders, process purchases, returns, refunds or other transactions, create and manage your account, arrange shipping, provide customer support and improve the shopping experience.

Marketing and Advertising.

We may use your personal information for marketing and promotional purposes, such as sending promotional communications by email where permitted and showing online advertisements for EcoAurra products or Services, including advertising that may be based on previous interactions with our store.

Security and Fraud Prevention.

We use personal information to authenticate accounts, provide a secure payment and shopping experience, detect, investigate or take action regarding possible fraudulent, illegal, unsafe or malicious activity, and protect our Services, customers and business.

Communicating with You.

We use personal information to provide customer support, respond to enquiries, provide effective Services and maintain our relationship with you.

Legal Reasons.

We may use personal information to comply with applicable law or valid legal processes, respond to requests from law-enforcement or government authorities, establish, exercise or defend legal claims, and enforce or investigate potential violations of our terms or policies.

Lawful Bases for Processing.

If you are located in the United Kingdom or European Economic Area, we process your personal information under one or more lawful bases depending on the purpose of the processing.

Contract.

We process personal information where necessary to provide products and Services you request, including processing payments, fulfilling and delivering orders, managing customer accounts, handling returns and refunds, and providing customer support relating to your purchase.

Legitimate Interests.

We may process information where necessary for our legitimate business interests, including protecting our store and customers, preventing fraud, improving our Services, understanding how customers use our website and responding to enquiries, provided those interests are not overridden by your rights and freedoms.

Consent.

Where required by law, we rely on your consent for activities such as promotional communications, non-essential cookies and similar technologies, and certain forms of personalised advertising.

You may withdraw your consent at any time.

Legal Obligations.

We may process information where necessary to comply with legal, tax, accounting, regulatory or other obligations, or to establish, exercise or defend legal claims.

How We Disclose Personal Information.

In certain circumstances, we may disclose personal information to third parties for legitimate purposes subject to this Privacy Policy.

This may include disclosure:

  • To Shopify, payment providers, technology providers, fulfilment and shipping providers, customer-support providers, cloud-storage providers, analytics providers and other parties that perform services on our behalf.
  • To business and marketing partners that provide marketing or advertising services.
  • When you direct, request or consent to the disclosure, such as where information is required to deliver an order or where you use third-party integrations.
  • To affiliates or members of our corporate group, where applicable.
  • In connection with a business transaction such as a merger, sale, restructuring or insolvency.
  • Where necessary to comply with legal obligations, enforce our terms or policies, or protect the rights of EcoAurra, our customers or others.

Depending on where you reside, you may have the right to opt out of certain sharing or processing for targeted advertising. You can exercise applicable rights through the Data Sharing Opt-Out page available on our website.

Relationship with Shopify.

The Services are hosted by Shopify, which collects and processes personal information relating to your access to and use of the Services in order to provide and improve the Services.

Information you submit through the Services may be transmitted to and shared with Shopify and third parties that may be located in countries other than the country where you reside.

To help protect, grow and improve our business, we may use Shopify features that incorporate data and information obtained from interactions with our store, other merchants and Shopify.

In certain circumstances, Shopify is responsible for its own processing of personal information, including responding to requests relating to information processed by Shopify.

You can learn more through Shopify’s Consumer Privacy Policy and Privacy Portal.

Third Party Websites and Links.

The Services may provide links to websites or other online platforms operated by third parties.

If you follow links to sites not affiliated with or controlled by us, you should review their privacy and security policies and other terms and conditions.

We do not guarantee and are not responsible for the privacy or security practices of third-party sites, including the accuracy, completeness or reliability of information found on those sites.

Information you provide in public or semi-public areas, including information shared through third-party social-networking platforms, may also be visible to other users.

Our inclusion of third-party links does not, by itself, imply endorsement of the content, owners or operators of those platforms.

Children’s Data.

The Services are not intended to be used by children, and we do not knowingly collect personal information about children under the age of majority in their jurisdiction.

If you are the parent or guardian of a child who has provided us with personal information, you may contact us using the details below to request that it be deleted.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell,” as those terms may be defined under applicable law, personal information belonging to individuals under 16 years of age.

Security and Retention of Your Information.

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee absolute security.

Information transmitted over the internet may not always be completely secure while in transit. We recommend that you do not use unsecured channels to communicate sensitive or confidential information.

How long we retain personal information depends on factors such as whether we need the information to maintain your account, provide the Services, comply with legal or regulatory obligations, resolve disputes or enforce applicable contracts and policies.

Your Rights and Choices.

Depending on where you live, you may have some or all of the following rights in relation to your personal information. These rights are not absolute and may apply only in certain circumstances.

Right to Access / Know.

You may have the right to request access to personal information we hold about you.

Right to Delete.

You may have the right to request that we delete personal information we maintain about you.

Right to Correct.

You may have the right to request that we correct inaccurate personal information we maintain about you.

Right of Portability.

You may have the right to receive a copy of personal information we hold about you and, in certain circumstances, request that we transfer it to another organisation.

Right to Opt Out of Sale or Sharing for Targeted Advertising.

Depending on where you reside, you may have the right to opt out of the “sale” or “sharing” of personal information or processing for purposes considered to be targeted advertising.

You can exercise applicable rights through the Data Sharing Opt-Out page available on our website.

If you visit our website with the Global Privacy Control preference signal enabled, and applicable law requires us to honour that signal, it may automatically be treated as an opt-out request for the device and browser you use.

Managing Communication Preferences.

We may send promotional emails where permitted.

You can opt out at any time by using the unsubscribe option included in those emails.

If you opt out of promotional communications, we may still send you non-promotional communications relating to your account, orders, transactions or customer-service requests.

Additional Rights for UK and EEA Customers.

If you reside in the United Kingdom or European Economic Area, and subject to applicable exceptions and limitations, you may have additional rights.

Objection to Processing and Restriction of Processing.

You may have the right to ask us to stop or restrict certain processing of your personal information.

Withdrawal of Consent.

Where we rely on consent to process personal information, you have the right to withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

You may exercise your rights by contacting us using the details provided below.

We will not discriminate against you for exercising your rights.

We may need to verify your identity before processing a request where permitted or required by applicable law.

We will respond to valid requests within the time required by applicable law.

Complaints.

If you have a complaint about how we process your personal information, please contact us using the details provided below.

Depending on where you live, you may also have the right to lodge a complaint with your local data-protection supervisory authority.

If you are located in the United Kingdom, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.

If you are located in the European Economic Area, you may lodge a complaint with the relevant data-protection supervisory authority in your country.

International Transfers.

We may transfer, store and process your personal information outside the country in which you live.

Where personal information is transferred outside the United Kingdom or European Economic Area, we will rely on recognized transfer mechanisms where required, such as adequacy decisions, the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Agreement or applicable UK Addendum, or another legally recognized transfer mechanism.

Changes to This Privacy Policy.

We may update this Privacy Policy from time to time to reflect changes to our practices, Services, legal requirements or other operational reasons.

When we make changes, we will publish the revised Privacy Policy on this website, update the “Last updated” date and provide any additional notice required by applicable law.

Contact.

If you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of your privacy rights, please contact us at:

hello@ecoaurra.com

For the purposes of applicable data-protection laws, ECOAURRA LTD is the data controller of your personal information.

Thank you for taking the time to read our Privacy Policy.

EcoAurra Team