GDPR Compliance

The General Data Protection Regulation (GDPR) is a mandatory solution for international e-commerce luxury brands like Aura to provide seamless, secure solutions to customers globally and to uphold the highest service standards.

Rules for National Sales (India)

While operating within India, we maintain strict adherence to local and global best practices:

• Required customer data is collected solely to improve service and payment solutions.
• Data collection and retention comply fully with the Indian Information Technology Act, 2000.
• Sharing with third parties is restricted to business-oriented purposes with valid, law-abiding justifications.
• Protection of data used for crucial tasks like payment services is mandatory and non-negotiable.

Rules for International Sales

For our global clients, we extend specific transparency and control mechanisms:

• Right to Control: International users are entitled to delete, retrieve, and correct their data flexibly upon request.
• Marketing Transparency: No auto-subscription methods are used for cookies or email marketing for international clients.
• Retention: Billing and client data storage is reviewed and renewed every 5-year intervention.
• Transparency: Total transparency is maintained regarding how and why client data is shared with the business.

Data Security & Partners