1. Data Controller

The data controller responsible for your personal data is:

• Shoc Clean Tech Ltd
• Company No. 17037746 — Registered in England & Wales
• Email: contact@auraxhome.shop

2. Data We Collect

2.1 Data you provide to us

• Full name
• Email address
• Delivery and billing address
• Phone number (optional)
• Payment information (processed directly by Shopify Payments — we never access your card details)
• Messages sent via our contact form

2.2 Data collected automatically

• IP address
• Browser type and device information
• Pages visited and time spent on site
• Browsing data via cookies (with your consent where required)

3. Purposes and Legal Basis for Processing

• Processing your order — Legal basis: performance of a contract (Art. 6(1)(b) UK GDPR)
• Customer service — Legal basis: performance of a contract and legitimate interests
• Email marketing (only if you have opted in) — Legal basis: consent (Art. 6(1)(a) UK GDPR)
• Website improvement and analytics — Legal basis: legitimate interests (Art. 6(1)(f) UK GDPR)
• Legal obligations — Legal basis: compliance with a legal obligation (Art. 6(1)(c) UK GDPR)

4. Retention Periods

• Order data: 6 years (HMRC requirements for UK businesses)
• Contact data: 3 years from last interaction
• Marketing data: until consent is withdrawn
• Connection logs: 12 months

5. Sharing of Data

We share your data only with third-party processors necessary to operate our service:

• Shopify Inc. — e-commerce platform and secure payment processing (PCI DSS Level 1)
• Delivery carriers — your name and delivery address only, to fulfil your order
• Meta Platforms / TikTok — advertising pixels (anonymised data, only if cookies accepted)

We never sell your personal data to third parties.

6. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access — request a copy of your data
• Right to rectification — correct inaccurate data
• Right to erasure — request deletion of your data ("right to be forgotten")
• Right to data portability — receive your data in a structured format
• Right to object — object to certain types of processing
• Right to restriction — restrict how we process your data
• Right to withdraw consent — at any time, for consent-based processing

To exercise any of these rights, contact us at contact@auraxhome.shop. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk — Tel: 0303 123 1113.

7. Cookies

Strictly necessary cookies

Essential for the website to function (basket, session, security). These cannot be disabled.

Analytics cookies

Used to measure site traffic and improve performance (Shopify Analytics, Google Analytics). These require your consent.

Advertising cookies

Used to personalise ads (Meta Pixel, TikTok Pixel). These require your consent.

You can manage your cookie preferences via the banner displayed on your first visit.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction.

9. International Transfers

Some data may be transferred to countries outside the UK (e.g. Canada for Shopify hosting). Such transfers are protected by appropriate safeguards, including adequacy decisions or standard contractual clauses approved by the ICO.

10. Changes to This Policy

We may update this policy from time to time. For significant changes, we will notify you by email.

11. Contact

For any questions about this policy or your personal data: contact@auraxhome.shop