Privacy Policy
Last updated 1 May 2026
STUDIO AUREL ("we", "us", "our") is committed to protecting your personal data. This policy explains what we collect, why, and your rights under the EU General Data Protection Regulation (GDPR) and applicable national law. We are the data controller for the personal data processed through this website.
1. Data we collect
- Order & account data: name, billing and delivery address, email, phone number and order history.
- Payment data: payments are processed by our payment providers (e.g. PayPal and card processors). We do not store full card numbers on our servers.
- Communications: messages you send us via the contact form or email.
- Technical data: IP address, device and browser type, and usage data collected through cookies and similar technologies.
2. How we use your data
- To process and deliver your orders and handle returns and refunds.
- To provide customer support and respond to enquiries.
- To send marketing communications where you have consented (you can unsubscribe at any time).
- To improve our website, prevent fraud and meet legal obligations.
3. Legal bases for processing
We rely on: performance of a contract (to fulfil your order); consent (for marketing and non-essential cookies); legitimate interests (to secure and improve our service); and legal obligation (e.g. tax and accounting records).
4. Sharing your data
We share data only with service providers who help us operate, including payment providers (such as PayPal), shipping carriers, and IT and analytics providers. These parties process data on our instructions under appropriate agreements. We never sell your personal data.
5. International transfers
Where data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
6. Data retention
We keep order and transaction records for as long as required to fulfil the order and to meet legal and accounting obligations (typically up to 10 years for invoicing records). Marketing data is kept until you withdraw consent.
7. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict or object to processing of your personal data, and the right to data portability. Where processing is based on consent, you may withdraw it at any time. To exercise these rights, contact us at [email protected]. You also have the right to lodge a complaint with your local data protection authority.
8. Cookies
We use essential cookies to run the site (e.g. to remember your cart) and, with your consent, analytics cookies to understand how the site is used. You can manage your preferences via the cookie banner or your browser settings.
9. Contact
For any privacy question, contact our team at [email protected] or write to STUDIO AUREL, Room 1002, No. 968 Shenchang Road, Minhang District, Shanghai 201106, China.