Privacy Policy
Last updated: 1 October 2026
1. Who we are
Aurora & Ivy is the trading name of Veylor Commerce LLC, 1603 Capitol Ave, Ste 413 E343, Cheyenne, WY 82001, United States. We are responsible for the personal data described in this policy (under the UK GDPR and the Data Protection Act 2018, we are the data controller). You can reach us any time at hello@auroraivy-jewellery.com.
2. What we collect
Information you give us
- Order details — name, delivery and billing address, email, phone number, and what you bought.
- Account details — if you create an account: your login and saved preferences.
- Payment details — handled by our payment processor. We never see or store your full card number.
- Messages — anything you send us by email or through the contact form.
- Marketing preferences — your email address if you sign up, and whether you have opted out.
Information we collect automatically
- Device and browser type, IP address, and approximate location derived from it.
- Pages viewed, items added to your basket, and how you arrived at the site.
- Cookie identifiers — see section 6.
3. How we use it
- To take payment and deliver your order.
- To provide customer support and handle returns.
- To send order and delivery notifications (these are service messages — you cannot opt out of them while you have an active order).
- To send marketing email, only if you asked us to, and to stop the moment you unsubscribe.
- To detect and prevent fraud and abuse.
- To understand which pages and products work, in aggregate, and to measure our advertising.
We do not sell your personal data. We have no interest in doing so and no arrangement to do it.
4. Our lawful bases under the UK GDPR
- Contract — processing your order and providing support.
- Legal obligation — keeping tax and transaction records.
- Legitimate interests — fraud prevention, site security, and improving the shop, balanced against your rights.
- Consent — marketing email and non-essential cookies. You can withdraw consent at any time.
5. Who we share it with
We share only what each provider needs to do its job, and only with providers under contract to protect it:
- Ecommerce platform — hosting the shop, orders and accounts.
- Payment processors — to take payment and handle refunds and chargebacks.
- Couriers and fulfilment partners — to get the parcel to your door.
- Email platform — to send order notifications and, where you have consented, marketing.
- Analytics and advertising partners — to understand aggregate site usage and measure our ads.
- Professional advisers and authorities — where we are legally required to disclose.
If we are ever involved in a merger or sale, customer data may transfer with the business. We will tell you before that happens and this policy continues to apply until it is replaced.
6. Cookies and tracking
Essential cookies keep your basket and your login working; the shop cannot function without them. Analytics and marketing cookies help us measure traffic and advertising, and we only set them where you have given consent or where the law permits. You can clear or block cookies in your browser, but your basket will stop working if you block the essential ones.
7. How long we keep it
- Order and transaction records — for as long as tax and accounting law requires.
- Account data — while your account is open, then deleted or anonymised.
- Marketing contacts — until you unsubscribe, plus a suppression record so we do not email you again by accident.
- Support messages — normally 24 months.
8. Your rights
Under the UK GDPR you have the right to:
- Get a copy of the personal data we hold about you.
- Have inaccurate data corrected.
- Have your data deleted.
- Object to or restrict certain processing, including direct marketing.
- Receive your data in a portable format.
- Withdraw consent at any time.
Email hello@auroraivy-jewellery.com and we will respond within one month, as the law requires. We will not charge you or make you jump through hoops.
Your right to complain. If you are unhappy with how we handle your personal data, you have the right to complain to the Information Commissioner's Office (ICO), the UK's data-protection regulator, at ico.org.uk. We would appreciate the chance to put things right first, so please do email us, but you can go to the ICO at any time. If you live outside the UK, you can complain to the data-protection regulator in your own country.
9. If you are in the United States
Residents of California, Colorado, Connecticut, Virginia and other states with a comprehensive privacy law also have the right to know what we collect, to delete it, to correct it, and to opt out of "sale" or "sharing" of personal information for cross-context behavioural advertising. We do not sell personal information for money, but advertising cookies may count as "sharing" under California law. To opt out, use your browser's Global Privacy Control signal, which we honour, visit Your Privacy Choices, or email hello@auroraivy-jewellery.com. We will not discriminate against you for exercising these rights.
10. International transfers
We are based in the United States and our providers may process data in the United States and other countries. Where we transfer personal data out of the UK, we rely on safeguards recognised under UK data-protection law, such as Standard Contractual Clauses with the UK Addendum.
11. Security
The shop runs over HTTPS, payment details go directly to our processor, and access to customer data is limited to people who need it. No system is perfectly secure, and we will not pretend otherwise — but if a breach affects your rights we will notify you and the ICO as the law requires.
12. Children
This shop is not directed at children and we do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, email hello@auroraivy-jewellery.com and we will delete it.
13. Changes
If we change this policy we will update the date at the top of this page. Where a change materially affects your rights we will tell you by email before it takes effect.
14. How to reach us
Email hello@auroraivy-jewellery.com. Our contact page is the fastest route for anything order-related.