Privacy Policy (GDPR)
Regulatory Scope
This privacy policy governs the collection, storage, and use of user data on the AURORAASH website, in accordance with the General Data Protection Regulation (GDPR) and current French law. It applies to all visitors and customers residing in France.
Data Controller
The controller responsible for processing personal data is JOHN MCBRIDE, with operational headquarters at 13491 VILLADEST DR, HIGHLAND, MD, United States. Contact email address: gladcare@auroraash.com.
Types of Data Collected
We only collect the data strictly necessary for processing orders and providing customer service: name, delivery address, contact number, payment information, and website browsing address. No sensitive data will be collected without the user's explicit consent.
Data Use and Retention
Personal data is only used for order processing, product delivery, after-sales support, and responding to customer inquiries. In accordance with the GDPR and the French Commercial Code, we apply specific retention periods: order, billing, and commercial transaction data are retained for 5 years from the end of the business relationship; accounting and tax data are retained for 10 years in accordance with French legal obligations; browsing data is retained for a maximum of 12 months. At the end of these periods, the data is deleted or securely archived.
Customer Service Hours
Customer service is available Monday to Friday from 9:00 a.m. to 5:00 p.m. (CET/CEST). Requests submitted on French weekends and public holidays are processed on the next business day.
Data Security
AURORAASH implements strict technical and security measures to protect all user data against any leak, modification, or unauthorized access. All transactions and personal information are protected in accordance with European digital security standards.