AUREL · Legal & Trust
Privacy Policy
How AUREL handles customer data, deliveries and payment records, and your GDPR rights.
Your information and privacy contact
This notice describes how AUREL Hifi Certified uses personal information when you browse, enquire, register or order. Contact contact@hificertified.com for privacy requests and information about the legal operator responsible for your data.
Data we process
We process names, email addresses, contact details, delivery and billing addresses, account information, orders, invoices, payment references and correspondence. Technical information needed to operate and protect the website may also be processed. Trade-in enquiries may include equipment details, serial numbers and photos you provide.
Purposes and lawful bases
We use data to review and fulfil orders, arrange delivery and returns, manage accounts and provide warranty support (contract or steps requested before a contract); keep legally required financial records (legal obligation); and protect the store and prevent fraud (legitimate interests, balanced against your rights). Optional marketing or non-essential cookies require consent where applicable, which you can withdraw.
Payments, recipients and international transfers
Card payments are completed on Stripe-hosted payment pages; do not send us card numbers or security codes. We retain order references and payment confirmations, not full card credentials. Bank transfers produce bank and reconciliation records. Only necessary data is shared with hosting, email, payment and delivery providers or authorities where required. Transfers outside the EEA must use a valid GDPR transfer mechanism and appropriate safeguards; contact us for applicable details.
Security and retention
We use access restrictions, secure connections and appropriate technical and organisational safeguards. No system can guarantee absolute security. Data is kept only as long as necessary for its purpose and applicable accounting, tax, warranty or dispute obligations, then deleted or anonymised where permitted. Ask us for the retention criteria applicable to your records.
Your rights and cookies
Under GDPR, you may request access, correction, erasure, restriction or portability, object to eligible processing, and withdraw consent without affecting earlier lawful processing. Some rights are limited by legal obligations. You may complain to your local data protection authority. Essential storage supports sign-in, checkout and language preferences; non-essential tracking, if introduced, requires an appropriate notice and consent where required.
For privacy, order or return enquiries, contact: contact@hificertified.com