Privacy policy

Privacy Policy

Last updated: 4 May 2026 — The Colourful Aura Ltd — Company No. 13174635

Who We Are

The Colourful Aura ("we", "us", "our") is a UK-based jewellery brand operating at thecolourfulaura.uk.

  • Registered address: Tyburn Gardens, 5 Peto St N, London E16 1RE, United Kingdom
  • Company registration: 13174635
  • VAT number: GB386361372
  • Email: contact@thecolourfulaura.uk
  • Phone: +44 7464 336088

We are the data controller for personal information collected through this website. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What Data We Collect

When you place an order:

  • Full name, email address, phone number
  • Billing and delivery address
  • Payment information (processed securely by Shopify Payments, Klarna or PayPal — we never store card details)
  • Order history and preferences

When you browse our website:

  • IP address, browser type and version
  • Pages visited, time spent, referring URLs
  • Device type and operating system
  • Cookie and tracking data (see Cookies section below)

When you contact us or sign up to emails:

  • Email address and any information you choose to share
  • Marketing preferences

How We Use Your Data

  • To process and fulfil your orders — including dispatch, tracking and customer service
  • To send transactional emails — order confirmations, dispatch notifications and tracking updates
  • To send marketing emails — only if you have opted in. You can unsubscribe at any time
  • To improve our website — using anonymised analytics data to understand how visitors use the site
  • To prevent fraud — protecting both you and us from fraudulent transactions
  • To comply with legal obligations — including tax, accounting and regulatory requirements

Our lawful basis for processing your data is: contract performance (for orders), legitimate interests (for analytics and fraud prevention), and consent (for marketing emails).

Who We Share Your Data With

We only share your data with trusted third parties who help us run our business. We never sell your data.

  • Shopify Inc. — our ecommerce platform (data processed under Standard Contractual Clauses)
  • Royal Mail / DHL — for order delivery and tracking
  • Klarna / PayPal / Stripe — for secure payment processing
  • Klaviyo — for email marketing (only if you have opted in)
  • Google Analytics (GA4) — for anonymised website analytics
  • Judge.me — for product reviews
  • Debenhams, Boohoo, Dorothy Perkins, Roman Originals — our retail partners, where you purchase through their platforms

All third-party providers are required to process your data securely and only for the purposes we specify.

Cookies

We use cookies to make our website work properly and to understand how it is used. Cookies are small text files stored on your device.

  • Essential cookies — required for the website to function (shopping cart, checkout, login). Cannot be disabled.
  • Analytics cookies — Google Analytics (GA4) collects anonymised data about how visitors use the site. No personally identifiable information is collected.
  • Marketing cookies — used to show relevant ads on platforms like Facebook and Google. Only active if you consent.
  • Preference cookies — remember your settings and preferences for a better experience.

You can manage your cookie preferences at any time through your browser settings. Disabling non-essential cookies will not affect your ability to shop with us.

How Long We Keep Your Data

  • Order data — 7 years (required by UK tax law)
  • Customer accounts — until you request deletion
  • Marketing data — until you unsubscribe or request removal
  • Analytics data — 26 months (Google Analytics default)

Your Rights Under UK GDPR

Under UK data protection law, you have the following rights:

  • Right of access — request a copy of the personal data we hold about you
  • Right to rectification — ask us to correct inaccurate data
  • Right to erasure — ask us to delete your data ("right to be forgotten")
  • Right to restrict processing — ask us to limit how we use your data
  • Right to data portability — receive your data in a portable format
  • Right to object — object to processing based on legitimate interests or for direct marketing
  • Right to withdraw consent — unsubscribe from marketing at any time

To exercise any of these rights, contact us at contact@thecolourfulaura.uk. We will respond within 30 days.

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Security

Our website uses SSL encryption (HTTPS) for all data transmission. Payment data is processed by PCI-DSS compliant providers and we never store your card details on our servers. We will notify you promptly in the event of any data breach that affects your personal data.

Children's Privacy

Our website is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us immediately and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you by email or by a prominent notice on our website. We encourage you to review this policy periodically.

Contact Us

For any privacy-related questions or to exercise your data rights:
The Colourful Aura Ltd
Tyburn Gardens, 5 Peto St N, London E16 1RE, United Kingdom
Email: contact@thecolourfulaura.uk
Phone: +44 7464 336088