Refund policy

Privacy and Cookies Policy

If you have found your way here, it is a clear sign that you value your privacy. We fully understand this, which is why we have prepared this document, where you can find in one place the rules governing the processing of personal data and the use of cookies and other tracking technologies in connection with the operation of the online store at https://aureliaworldwide.com/

The Store is operated by Anna Meronk, conducting business under the name AURELIA Anna Meronk, ul. Juliusza Słowackiego 58/9B, 81-392 Gdynia, Poland, Tax Identification Number (NIP): 9581402117

This Privacy Policy has been structured in a question-and-answer format in order to make the information as clear and easy to understand as possible.

Below you will find the table of contents of this Privacy Policy, corresponding to the questions answered in the following sections.

1. Who is the controller of your personal data?
2. Who can you contact regarding the processing of your personal data?
3. What information do we hold about you?
4. Where do we obtain your personal data?
5. Is your data secure?
6. For what purposes do we process your personal data?
7. How long will we retain your personal data?
8. Who are the recipients of your personal data?
9. Do we transfer your data to third countries or international organisations?
10. Do we use profiling? Do we make automated decisions based on your personal data?
11. What rights do you have in relation to the processing of your personal data?
12. Do we use cookies and what are they?
13. On what basis do we use cookies?
14. Can you disable cookies?
15. For what purposes do we use first-party cookies?
16. Which third-party cookies do we use?
17. Do we track your behaviour within our Store?
18. Do we display targeted advertisements to you?
19. How can you manage your privacy?
20. What are server logs?

If you have any questions or concerns regarding this Privacy Policy, you may contact us at any time by email at https://aureliaworldwide.com/

1. Who is the controller of your personal data?

The controller of your personal data is Izabela Meronk, conducting business under the name AURELIA Anna Meronk, ul. Juliusza Słowackiego 58/9B, 81-392 Gdynia, Poland, Tax Identification Number (NIP): 9581402117

2. Who can you contact regarding the processing of your personal data?

As part of implementing our personal data protection procedures, we have decided not to appoint a Data Protection Officer, as we are not legally required to do so.

For any matters relating to the protection of personal data and privacy in general, you may contact us at https://aureliaworldwide.com/

3. What information do we hold about you?

Depending on the purpose of processing, we may process the following information about you:

• your first and last name;
• your residential address;
• your business address;
• your Tax Identification Number (NIP);
• your email address;
• your telephone number;
• information contained in correspondence sent to us;
• details of orders placed;
• your bank account number;
• your activity within the Store and in relation to newsletters sent to you.

The scope of the data processed is described in detail for each individual processing purpose later in this Privacy Policy.

4. Where do we obtain your personal data?

In most cases, you provide it to us yourself. This happens when you:

• place an order in the Store;
• submit a complaint or withdraw from a contract;
• subscribe to our newsletter;
• contact us.

In addition, certain information about you may be collected automatically by the tools we use. In particular:

• the Store system and newsletter system collect your IP address;
• the newsletter system collects information about your activity in relation to the content sent to you, such as whether you opened an email, clicked a link, etc.

5. Is your data secure?

We take the security of your personal data seriously.

We have assessed the risks associated with the individual processes involving your personal data and have implemented appropriate data security and protection measures.

We continuously monitor the condition of our technical infrastructure, train our staff, review our procedures and introduce necessary improvements.

If you have any questions concerning your personal data, please contact us at https://aureliaworldwide.com/

6. For what purposes do we process your personal data?

We process your personal data for several purposes. These purposes and their corresponding legal bases are listed below:

• processing orders – Article 6(1)(b) GDPR;
• handling complaints and withdrawals from contracts – Article 6(1)(f) GDPR;
• sending newsletters – Article 6(1)(a) GDPR;
• handling correspondence – Article 6(1)(f) GDPR;
• compliance with tax and accounting obligations – Article 6(1)(c) GDPR;
• maintaining archives for the potential establishment, exercise or defence of claims, as well as identifying returning customers – Article 6(1)(f) GDPR;
• managing social media – Article 6(1)(f) GDPR;
• marketing our own products and services – Article 6(1)(f) GDPR.

Orders – details

When placing an order in the Store, you must provide the information necessary to process your order. The type of information required may vary depending on the details of the order.

For example, if you order physical products, we need to know the address to which your order should be delivered. If you request a VAT invoice for a business, we need your Tax Identification Number (NIP) and your business address.

Providing this information is voluntary, but necessary in order to place an order.

Each order is recorded in our database. This means that the personal data associated with your order is accompanied by information concerning the order itself, such as the products ordered, selected payment method, selected delivery method and payment date.

Data collected in connection with an order is processed for the following purposes:

• performance of the contract concluded when the order is placed – Article 6(1)(b) GDPR;
• issuing an invoice – Article 6(1)(c) GDPR in conjunction with applicable invoicing regulations;
• including the invoice in accounting records and fulfilling other tax and accounting obligations – Article 6(1)(c) GDPR in conjunction with applicable tax and accounting regulations;
• archival purposes, including the potential establishment, exercise or defence of claims and identification of returning customers, which constitutes our legitimate interest – Article 6(1)(f) GDPR.

Order data will be processed for the period necessary to fulfil the order and thereafter until the expiry of the limitation period for claims arising from the relevant contract.

After this period has expired, the data may continue to be processed for archival purposes where necessary for the establishment, exercise or defence of claims, as well as for identifying returning customers.

Please also note that we are required to retain accounting documentation that may contain your personal data for the period required by applicable law.

Complaints and withdrawals from contracts – details

If you submit a complaint or withdraw from a contract, you provide us with personal data contained in your complaint or withdrawal statement, which may include your first and last name, residential address, telephone number, email address and bank account number.

Providing this information is voluntary, but necessary in order to submit a complaint or withdraw from a contract.

The data provided to us in connection with a complaint or withdrawal is used to handle the complaint or withdrawal procedure and subsequently for archival purposes. This processing is based on our legitimate interest under Article 6(1)(f) GDPR.

The data will be processed for the period necessary to complete the relevant complaint or withdrawal procedure.

Complaint documentation will be retained until the expiry of the relevant statutory claim period. Statements of withdrawal from contracts will be retained together with accounting documentation for the period required by applicable law.

Newsletter – details

When you subscribe to our newsletter, you provide us with your email address. Providing this information is voluntary, but necessary in order to subscribe.

Our newsletter system also tracks your activity in relation to messages sent to you. Therefore, we may have information about which emails you opened, which links you clicked, and similar activity.

The information you provide in connection with subscribing to the newsletter is used for the purpose of sending you the newsletter. The legal basis for this processing is your consent under Article 6(1)(a) GDPR, given when subscribing.

With regard to information that is not provided directly by you but is collected automatically by our mailing system, we rely on our legitimate interest under Article 6(1)(f) GDPR, consisting of analysing newsletter subscriber behaviour in order to optimise our mailing activities.

You may unsubscribe from the newsletter at any time by clicking the dedicated unsubscribe link included in each newsletter or simply by contacting us.

Even after you unsubscribe, your data may continue to be stored in our database for the purpose of identifying a returning subscriber and for the establishment, exercise or defence of claims relating to the sending of newsletters, in particular to demonstrate that you gave consent to receive the newsletter and when that consent was withdrawn. This constitutes our legitimate interest under Article 6(1)(f) GDPR.

You may also modify the information provided for newsletter purposes at any time by using the appropriate link included in each newsletter or by contacting us.

Correspondence – details

When you contact us, you naturally provide personal data contained in your correspondence, in particular your email address and your first and last name.

Providing this data is voluntary, but necessary in order to communicate with us.

Your data is processed for the purpose of communicating with you on the basis of Article 6(1)(f) GDPR, i.e. our legitimate interest.

After communication has ended, the legal basis for further processing is also our legitimate interest in archiving correspondence so that we can demonstrate specific facts in the future, under Article 6(1)(f) GDPR.

The content of correspondence may be archived, and we are unable to specify precisely when it will be deleted.

You have the right to request access to the history of your correspondence with us, where it has been archived, and to request its deletion, unless continued retention is justified by our overriding legitimate interests, such as the defence against potential claims.

Tax and accounting obligations – details

If we issue an invoice to you, it forms part of our accounting records and will be retained for the period required by applicable law.

Your personal data is processed in this context for the purpose of complying with our tax and accounting obligations under Article 6(1)(c) GDPR in conjunction with applicable tax and accounting regulations.

Archives – details

In the descriptions above of the individual purposes for processing personal data, we have specified the applicable retention periods.

These periods are often associated with archiving certain information so that we can demonstrate specific facts in the future, reconstruct the course of our relationship with a customer, review correspondence exchanged between us, or establish, exercise or defend claims.

We rely on our legitimate interest under Article 6(1)(f) GDPR for these purposes.

Marketing our own products and services – details

Our Store uses an abandoned-cart recovery mechanism.

If you begin the ordering process but do not complete it, our system may record this fact so that we can take steps intended to encourage you to complete your order.

Such activities may include, in particular, sending you an email encouraging you to complete the order or displaying targeted advertising to you while browsing the Internet.

We carry out these activities on the basis of our legitimate interest under Article 6(1)(f) GDPR, consisting of marketing our own products and services.

You may object to this type of processing at any time.

7. How long will we retain your personal data?

The retention periods for personal data have been specified separately for each purpose of processing. You can find this information in the detailed descriptions relating to each purpose above.

Please note that we have adopted a model under which information concerning your orders may be retained for the entire period during which our online Store operates.

We believe this may benefit you, as it allows your purchase history to be reconstructed and may enable you to benefit from discounts where we offer such benefits to returning customers.

However, if you do not wish your order data to be retained for this purpose for such a long period, you may object at any time.

Please note, however, that we consider ourselves to have an overriding legitimate interest in retaining order information until the limitation period for claims arising from the sales contract concluded with us has expired.

8. Who are the recipients of your personal data?

Modern businesses generally rely on services provided by third parties, and we are no exception. Some of these services involve the processing of your personal data.

Third-party service providers involved in processing your personal data may include:

• our hosting provider, which stores data on servers;
• our online Store provider, which enables orders to be placed and processed;
• our cloud service provider, where backups containing personal data may be stored;
• our mailing system provider, where your data is stored if you subscribe to our newsletter;
• our invoicing system provider, where your data is stored for the purpose of issuing invoices;
• our accounting office, which processes data appearing on invoices;
• providers of technical support services, who may obtain access to data where technical work concerns areas containing personal data;
• other subcontractors who obtain access to data where such access is necessary for the performance of their services.

The above service providers process your data under appropriate data-processing agreements concluded with us and are required to ensure an appropriate level of personal data protection.

Your data is also shared with courier companies to the extent necessary to deliver your order. Such companies act as independent controllers of your personal data.

Where necessary, your data may be disclosed to a legal adviser or attorney who is bound by professional confidentiality. Such disclosure may be required where we need legal assistance involving access to your personal data.

Your personal data may also be disclosed to tax authorities to the extent necessary to fulfil tax, accounting and reporting obligations. This may include, in particular, declarations, reports, statements and other accounting documents containing your personal data.

Where legally required, your personal data may also be disclosed to entities, authorities or institutions legally entitled to access such data, such as the police, security authorities, courts and public prosecutors.

In addition, we use tools that collect information about your use of our Store. This may include, in particular:

• information about the device, operating system and browser you use;
• pages you visit;
• time spent on the website;
• links you click;
• the source from which you arrived at our website;
• your age range;
• your approximate location, limited to the city or town level;
• interests inferred from your online activity.

In our assessment, this information does not in itself constitute personal data.

However, because this information is collected through third-party tools, it is also processed by the providers of those tools in accordance with their own terms and privacy policies.

In general, this information is used to provide, improve and manage services, develop new services, measure advertising effectiveness, protect against fraud and abuse, and personalise content and advertising displayed across websites, services and applications.

Further details are provided later in this Privacy Policy in the sections concerning specific tools.

9. Do we transfer your data to third countries or international organisations?

Yes. Some processing of your personal data may involve transfers to third countries.

We may transfer your personal data to third countries in connection with the use of tools that store personal data on servers located outside the European Economic Area, in particular in the United States.

Providers of these tools ensure an appropriate level of personal data protection through the compliance mechanisms provided for under the GDPR, including, in particular, Standard Contractual Clauses.

Personal data may be stored on servers located in third countries in connection with the following services:

• Shopify online Store and Shopify Email, provided by Shopify Inc., 150 Elgin Street, 8th Floor, Ottawa, ON K2P 1L4, Canada – in relation to your first and last name, address, telephone number, email address, Tax Identification Number (NIP), bank account number, details of orders placed and statistical information concerning your responses to messages sent by us;
• Google services within Google Workspace, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland – in relation to all data processed through Google services, including email correspondence and data contained in files synchronised with Google Drive;
• Dropbox cloud services, provided by Dropbox International Unlimited Company, One Park Place, Floor 5, Upper Hatch Street, Dublin 2, Ireland – where backups containing your personal data, including issued invoices, may be stored.

Please also note that we use third-party tools that may collect information about you which is anonymous from our perspective.

Providers of such tools frequently use servers located around the world, particularly in the United States, to store the information collected.

10. Do we use profiling? Do we make automated decisions based on your personal data?

We do not make decisions about you based solely on automated processing, including profiling, which would produce legal effects concerning you or otherwise similarly significantly affect you.

We do use tools that may take certain actions depending on information collected through tracking mechanisms. However, we do not consider these activities to have a significant impact on you because they do not alter your position as a customer or affect the terms of any contract you may enter into with us.

For example, we may use certain tools to show you personalised advertising based on your previous activity on our website or recommend products that may be of interest to you.

This is commonly referred to as behavioural advertising.

We encourage you to learn more about behavioural advertising, particularly in relation to privacy issues. Further information, including options for managing behavioural advertising preferences, is available at:

http://www.youronlinechoices.com

11. What rights do you have in relation to the processing of your personal data?

Under the GDPR, you may have the following rights in relation to the processing of your personal data:

• the right to access your data and receive a copy;
• the right to rectification of your data;
• the right to erasure of your data;
• the right to restriction of processing;
• the right to object to processing;
• the right to data portability;
• the right to withdraw consent to the processing of personal data where you have previously given such consent;
• the right to lodge a complaint with a supervisory authority.

If you believe there are no grounds for us to process your personal data, you may request its deletion.

You may request that processing be restricted to storage or to activities agreed with you if, in your opinion, we hold inaccurate information or process your data without a valid legal basis.

You have the right to object to processing based on our legitimate interests. You should indicate the particular situation which, in your opinion, justifies stopping the processing to which you object.

We will stop processing your data for those purposes unless we demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms, or unless the processing is necessary for the establishment, exercise or defence of legal claims.

You also have the right to receive personal data you have provided to us on the basis of a contract or your consent in a structured, commonly used and machine-readable format. You may also request that we transmit such data directly to another entity where technically feasible.

The rules governing the exercise of these rights are set out in detail in Articles 16–21 GDPR.

Please note that the rights described above are not absolute and may not apply to every processing activity involving your personal data.

One right is always available to you: if you believe that we have breached personal data protection laws when processing your data, you may lodge a complaint with the competent supervisory authority, including the President of the Polish Personal Data Protection Office.

You may also ask us at any time to provide information about what personal data we hold about you and for what purposes it is processed.

Simply email us at https://aureliaworldwide.com/

We have nevertheless made every effort to provide comprehensive information in this Privacy Policy.

12. Do we use cookies and what are they?

Yes. Like almost all websites, our Store uses cookies.

Cookies are small text files stored on your device, such as a computer, tablet or smartphone. They can be read by our IT systems in the case of first-party cookies, or by the IT systems of third parties in the case of third-party cookies.

Cookies may store specific information which can subsequently be accessed by IT systems for particular purposes.

Some of the cookies we use are deleted when your browser session ends, i.e. when you close your browser. These are known as session cookies.

Other cookies remain stored on your device and allow us to recognise your browser when you visit the website again. These are known as persistent cookies.

If you would like to learn more about cookies in general, you may consult, for example:

https://en.wikipedia.org/wiki/HTTP_cookie

13. On what basis do we use cookies?

We use cookies on the basis of your consent, except where cookies are necessary to provide an electronic service properly.

With regard to consent to cookies, we assume that such consent is expressed through the settings of your web browser or additional software used to manage cookies.

We assume that you consent to all cookies used by us which are not blocked by your browser or additional software.

14. Can you disable cookies?

Yes. You can manage cookie settings through your web browser.

You may block all cookies or selected cookies. You may also block cookies from specific websites.

You may delete previously stored cookies and other website or plug-in data at any time.

Web browsers also offer private or incognito browsing modes. You may use such modes if you do not want information about websites you visit and files you download to be stored in your browsing or download history.

Cookies created during an incognito session are generally deleted when all incognito windows are closed.

Browser extensions are also available to help manage cookies, such as Ghostery:

https://www.ghostery.com

Additional software, including antivirus packages, may also provide cookie management functionality.

There are also online tools that allow you to manage certain types of cookies, particularly behavioural advertising preferences, including:

www.youronlinechoices.com
www.networkadvertising.org/choices

Please remember that disabling or restricting cookies may prevent you from using certain functions available in our Store and may cause difficulties when using our Store or many other websites that use cookies.

For example, if you block cookies used by social media plug-ins, buttons, widgets and social functions implemented in our Store may become unavailable.

15. For what purposes do we use first-party cookies?

First-party cookies are used within the Shopify Store to ensure the proper functioning of various Store mechanisms, such as maintaining your session when you are logged into your account, remembering recently viewed products and remembering products added to your shopping cart.

First-party cookies used through Shopify are also used for analytical and marketing purposes, in particular to support abandoned-cart recovery and to create aggregate statistics.

Such statistics may include information concerning the devices, operating systems and browsers used by visitors, the sources from which users arrived at the Store, and the pages viewed.

We carry out such activities on the basis of our legitimate interest in creating and analysing statistics in order to optimise our websites.

Shopify is provided by Shopify Inc., 150 Elgin Street, 8th Floor, Ottawa, ON K2P 1L4, Canada.

If you would like more information about how Shopify uses data from websites and applications, please see:

https://www.shopify.co.uk/legal/cookies
https://www.shopify.com/legal/privacy

16. Which third-party cookies do we use?

The following third-party cookies and tools may operate within our Store:

• PayPal – for payment processing;
• Facebook Custom Audiences – for marketing purposes;
• Facebook, Twitter, Instagram and Pinterest – social media tools and cookies.

Further information about these third-party cookies is provided below.

PayPal – details

The PayPal payment system is provided by PayPal, 2211 North First Street, San Jose, California 95131, USA.

Cookies used by PayPal are necessary for processing and securing transactions, including logging into PayPal for the purpose of making a payment.

For more information about PayPal’s use of cookies and personal data, please see:

https://www.paypal.com/pl/webapps/mpp/ua/cookie-full
https://www.paypal.com/hk/webapps/mpp/ua/privacy-full

Facebook Custom Audiences – details

As part of the Facebook Ads advertising system, we use the Custom Audiences feature to display targeted advertising to specific groups of users.

We carry out these activities on the basis of our legitimate interest in marketing our own products and services.

In order to show you personalised advertisements based on your behaviour in our Store, we have implemented the Facebook Pixel on our website.

The Pixel automatically collects information concerning your use of our website.

The information collected in this way is usually transferred to Facebook servers, which may be located around the world, including in the United States.

From our perspective, the information collected by the Facebook Pixel is anonymous and does not allow us to identify you personally.

Depending on your activity on our website, you may be assigned to a particular audience group, but we do not identify individual people belonging to those groups.

Please note, however, that Facebook may combine the information collected with other information about you gathered through your use of Facebook and may use such information for its own purposes, including marketing purposes.

Such processing by Facebook is outside our control.

More information is available in Facebook’s privacy policy:

https://www.facebook.com/privacy/explanation

You can also manage your advertising and privacy settings from your Facebook account:

https://www.facebook.com/ads/settings

Social media tools – details

Our website uses plug-ins, buttons and other social media tools, collectively referred to as “plug-ins”, provided by social media platforms such as Facebook, Instagram, Twitter and Pinterest.

When you visit a page on our website containing a plug-in from a particular social media service, your browser transmits information about your visit to the operator of that social media service.

Because the plug-in is part of the social media service embedded within our website, your browser sends a request to retrieve content from that social media service for display on our website.

Plug-ins may collect certain information about you, such as your user ID, the website visited, the date and time of the visit and information concerning your web browser.

Social media providers use some of this information to personalise the way our website is displayed to you.

For example, if you visit a page containing a “Like” button, the social media provider may need information about who you are in order to show you which of your friends also like our page.

Information collected through plug-ins may also be used by social media providers for their own purposes, including improving their products, creating user profiles, analysing and optimising their services and targeting advertisements.

We have no meaningful control over how information collected through such plug-ins is subsequently used by social media providers.

Further details can be found in the terms and privacy policies of the relevant social media platforms.

Social media plug-ins may collect and transmit information to social media providers even when you visit our website without being logged into your social media account. In such cases, however, your browser generally transmits a more limited set of information.

If you are logged into a particular social media service, the operator of that service may be able to associate your visit to our website directly with your profile on that platform.

If you do not want social media services to associate information collected during your visit to our website directly with your profile, you should log out of the relevant social media service before visiting our website.

You may also prevent plug-ins from loading by using appropriate browser extensions, such as script-blocking tools.

In addition, using certain plug-ins may result in information being published on your social media profiles.

For example, information about clicking a “Like” button may appear on your Facebook timeline. Similarly, if you share content from our website using embedded social media plug-ins, that activity may naturally become visible on your social media profile.

For further information about how individual social media providers process information collected through plug-ins, including the purpose and scope of collection, further processing and use, your rights and available privacy settings, please see their respective privacy policies:

• Facebook – https://www.facebook.com/privacy/explanation
• Twitter – https://twitter.com/en/privacy
• Instagram – https://www.facebook.com/help/instagram/155833707900388
• Pinterest – https://policy.pinterest.com/pl/privacy-policy

17. Do we track your behaviour within our Store?

Yes.

As explained above, we use Shopify tools and Facebook Custom Audiences, which involve collecting information concerning your activity within our Store.

18. Do we display targeted advertisements to you?

Yes.

We use Facebook Ads, which enables us to target advertisements at specific audience groups defined according to various criteria, such as age, gender, interests, profession, employment and previous activity within our Store.

These tools are described in greater detail in the section concerning third-party cookies above.

19. How can you manage your privacy?

Information about managing your privacy appears in several places throughout this Privacy Policy, particularly in the sections concerning specific tools, behavioural advertising and cookie consent.

For your convenience, the principal options are summarised below:

• managing cookies through your web browser settings;
• using browser extensions for managing cookies, such as Ghostery;
• using additional cookie-management software;
• using your browser’s incognito or private mode;
• managing behavioural advertising preferences, for example through youronlinechoices.com;
• Facebook Ads Settings: https://www.facebook.com/ads/settings.

20. What are server logs?

Using the Store involves sending requests to the server on which the Store is hosted.

Each request sent to the server is recorded in server logs.

Server logs may include, among other things, your IP address, the date and server time, information about your web browser and information about the operating system you use.

These logs are recorded and stored on the server.

Information stored in server logs is not associated by us with specific individuals using the website and is not used by us to identify you.

Server logs are used solely for administrative and technical purposes relating to the operation of the website, and their contents are not disclosed to anyone other than persons authorised to administer the server.