Privacy Policy
Effective 1 September 2026
This policy explains how Aura Ilaj handles information submitted through the Aura Ilaj storefront and administrator portal. The store uses Cash on Delivery and does not collect card or online-payment credentials.
Information we handle
If ordering is enabled, we collect the customer's name, email address, phone number, delivery address, ordered products, order notes, policy-acceptance version and time, and order status. Contact-form submissions contain the name, email address, optional order number, message, and a reference number.
The browser stores the cart and wishlist on the customer's device. Security services use Cloudflare Turnstile and short-lived, salted hashes derived from request information for rate limiting; the application does not store the raw IP address in those rate-limit records. Analytics is not enabled by default.
Why we use it
Information is used to validate and fulfil COD orders, reserve inventory, confirm a phone number before dispatch, provide private order tracking and notifications, handle support and delivery problems, prevent abuse, maintain operational records, and protect the service.
Service providers and disclosure
The website uses Google Firebase for hosting, authentication, and database services, and Cloudflare for the trusted API, human verification, and product-image storage. Order details may be shared with an actual courier only as needed to deliver an accepted order. A configured email provider processes notification messages. We do not sell customer information.
Retention and security
Records are access-controlled and retained only for operational, fraud-prevention, customer-support, accounting, and applicable legal needs. A specific retention schedule and deletion process must be approved by the business owner before public checkout opens. No internet service can guarantee absolute security.
Questions and requests
The public privacy-contact address is being finalized. Checkout remains unavailable until a monitored support address and the owner-approved retention process are published.