Privacy & Data Protection

Holiday Aura is the data controller responsible for your personal information. If you have any questions about this policy or how your data is handled, you can contact us directly at orders@holidayaura.shop. We are committed to ensuring that your privacy is protected and that we comply with all applicable data protection laws, including the GDPR for our European customers.

We collect information to provide you with a smooth, secure shopping experience. The data we collect includes:

• Information you provide to us: Your name, billing and shipping addresses, email address, phone number, and payment details when you place an order or create an account.
• Information we collect automatically: When you browse our site, we may collect your IP address, browser type, device information, and browsing behavior (via cookies and similar technologies).
• Information from third parties: We may receive updated delivery or address information from our shipping partners to ensure your order arrives correctly.

We use your data for the following purposes, each supported by a legal basis under the GDPR:

• To fulfil your order: Processing payments, shipping your items, and providing customer support. (Legal basis: Performance of a contract)
• To improve our store: Analyzing how you use our site to make your shopping experience better. (Legal basis: Legitimate interests)
• To communicate with you: Sending order updates, responding to your inquiries, and (if you opt-in) sending marketing emails about new products or promotions. (Legal basis: Consent or Legitimate interests)
• To comply with the law: Keeping records for tax, accounting, and fraud prevention. (Legal basis: Legal obligation)

We will only keep your personal data for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements.

• Order data: Kept for up to 7 years to comply with tax and consumer protection laws.
• Marketing data: Kept until you unsubscribe or request deletion.
• Browsing data: Kept for a maximum of 12 months.

Once the retention period expires, we will securely delete or anonymize your data.

If you are a resident of the European Economic Area (EEA), you have specific rights regarding your personal data. We extend these rights to all our global customers as a best practice:

• Right of Access: You can request a copy of the data we hold about you.
• Right to Rectification: You can ask us to correct any inaccurate or incomplete data.
• Right to Erasure (“Right to be Forgotten”): You can ask us to delete your data when it is no longer needed.
• Right to Restrict Processing: You can ask us to limit how we use your data.
• Right to Data Portability: You can request that we transfer your data to another organization.
• Right to Object: You can object to our processing of your data for marketing or legitimate interests.

To exercise any of these rights, simply email us at orders@holidayaura.shop. We will respond within 30 days.

Holiday Aura operates globally and ships worldwide. This means your data may be transferred to, and processed in, countries outside of your own — including the United States.

When we transfer data outside the EEA, we ensure a similar degree of protection is afforded to it by implementing appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission. By using our site and placing an order, you consent to the transfer of your data as described in this policy.