At The Aurora Ensemble, we value your privacy and are dedicated to safeguarding your personal information. This privacy notice is designed to inform you about your privacy rights and the legal protections that are in place.
Please refer to the Glossary for explanations of some terms used in this privacy notice.
Purpose of this Privacy Notice
This privacy notice is intended to provide you with information about how The Aurora Ensemble collects and processes your personal data. This data is provided by you when you purchase goods or services through our websites and retailer portals, make payments, submit inquiries, visit our websites and retailer portals, or engage with us in any other manner. It is crucial that you read this privacy notice alongside any other privacy or fair processing notices we may provide on specific occasions when we collect or process personal data about you. This privacy notice complements those notices and is not intended to replace them.
The Aurora Ensemble is the controller and is responsible for your personal data (referred to as the “Company,” “we,” “us,” or “our” in this privacy notice).
We have appointed a representative who oversees questions related to this privacy notice. If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact our representative using the details provided below.
You have the right to lodge a complaint with a supervisory authority for data protection issues at any time. However, we would appreciate the opportunity to address your concerns before you approach a supervisory authority. Therefore, please contact our Representative as your first point of contact.
It is essential that the personal data we hold about you remains accurate and up-to-date. Please inform us of any changes to your personal data during your relationship with us.
Third-Party Links on Our Websites
Our websites may contain links to third-party websites, plug-ins, and applications. Clicking on these links or enabling these connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. We encourage you to review the privacy notice of every website you visit when leaving our websites.
The Data We Collect About You
Personal data, or personal information, refers to any information about an individual that can be used to identify that person. It excludes data where the identity has been removed (anonymous data).
We may collect, use, store, and transfer different types of personal data about you, which we group as follows:
- Identity Data: Includes your first name, maiden name, last name, username or similar identifier, marital status, title, date of birth, and gender.
- Wedding Data: Encompasses wear date (wedding date), dress worn, photographer, videographer, location, venue, and other details specific to your wedding.
- Contact Data: Comprises billing address, delivery address, email address, and telephone numbers.
- Financial Data: Involves bank account and payment card details.
- Transaction Data: Contains information about payments you make and other details of goods and services you purchase through our websites and retailer portals.
- Technical Data: Includes your internet protocol (IP) address, login data, browser type and version, time zone setting, location, browser plug-in types and versions, operating system, platform, and other technology on the devices you use to access our websites, retailer portals, and systems.
- Profile Data: Encompasses your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.
- Usage Data: Comprises information about how you use our websites and retailer portals.
- Marketing and Communications Data: Includes your preferences for receiving marketing from us and our third parties, as well as your communication preferences.
We may also collect, use, and share Aggregated Data, such as statistical or demographic data, for various purposes. Aggregated Data may be derived from your personal data but does not qualify as personal data under the law because it does not directly or indirectly reveal your identity. For example, we may aggregate Usage Data to determine the percentage of users accessing a specific feature on our websites. However, if we combine or connect Aggregated Data with your personal data in a way that enables us to identify you, we will treat the combined data as personal data and use it in accordance with this privacy notice.
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect information about criminal convictions and offenses.
How Your Personal Data is Collected
We may employ various methods to collect data from and about you, including:
- Direct Interactions: You may provide us with your Identity, Location, Contact, and Financial Data by filling in forms or corresponding with us via post, phone, email, or other means. This includes data you provide when you apply for goods or services, create an account with us, subscribe to our email marketing, request marketing materials, enter a competition, promotion, or survey, or provide feedback.
- Automated Technologies or Interactions: As you interact with our websites and retailer portals, we may automatically collect Technical Data regarding your equipment, browsing actions, and patterns. We may collect this personal data using cookies, server logs, and similar technologies.
- Third Parties or Publicly Available Sources: We may receive personal data about you from various third parties and public sources. Additionally, we may record phone conversations with you.
How We Use Your Personal Data
We will only use your personal data when the law permits. Most commonly, we will use your personal data in the following circumstances:
- Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
- Where we need to comply with a legal or regulatory obligation.
We generally do not rely on consent as a legal basis for processing your personal data, except in relation to sending direct marketing communications to you via email or text message. You have the right to withdraw your consent for marketing at any time by contacting our Representative.
Purposes for Which We Will Use Your Personal Data
We have outlined in the table below a description of all the ways we intend to use your personal data, along with the legal bases we rely on for doing so. We have also indicated our legitimate interests where applicable.
Please note that we may process your personal data for more than one lawful ground, depending on the specific purpose for which we are using your data. If you need further details regarding the specific legal ground we are relying on to process your personal data when more than one ground is applicable, please contact our Representative.
Receiving Promotional Offers
We may utilize your Identity, Contact, Technical, Usage, and Profile Data to analyze your preferences and interests. This allows us to determine what goods, services, offers, and other relevant information, including event updates and news, may be of interest to you (referred to as marketing).
You may receive marketing communications from us if you’ve requested information, made purchases through our websites or retailer portals, or entered a competition or registered for a promotion, providing us with your details. These marketing communications will be delivered electronically, such as via email or text message, only if you have chosen to receive them and have not subsequently opted out.
You have the option to stop receiving marketing messages from us or third parties at any time. You can do this by following the opt-out links included in any marketing message sent to you or by contacting our Representative.
We may employ cookies to monitor user activity on our websites and retailer portals. This enables us to gain insights into how our users and potential users navigate and interact with our online platforms. Consequently, we can make improvements to aspects such as layout, functionality, and design.
A cookie is a small piece of information that is stored on your computer’s hard drive, recording your interactions with a website. Upon your subsequent visits to that website, it can tailor your options based on the data it has retained from your previous visits.
You can configure your browser to decline all or specific types of cookies or to notify you when websites attempt to set or access cookies. However, please be aware that disabling or refusing cookies may render certain parts of our websites and retailer portals inaccessible or cause them to function improperly.
Change of Purpose
We will use your personal data solely for the purposes for which we collected it, unless we reasonably believe that we need to use it for another purpose that aligns with the original one. If you require an explanation of how this new purpose is compatible with the original one, please get in touch with our Representative.
If we ever need to use your personal data for a purpose unrelated to the one we initially collected it for, we will inform you and provide an explanation of the legal basis that permits us to do so. Please be aware that we may process your personal data in accordance with the above rules without requiring your knowledge or consent, if necessary or permitted by law.
Disclosure of Your Personal Data
We may need to share your personal data with the following parties for the purposes outlined in the table in paragraph 4 above:
- Internal Third Parties, as defined in the Glossary.
- External Third Parties, as defined in the Glossary.
- Third parties to whom we may choose to sell, transfer, or merge parts of our business or assets. In the event of such a change, the new owners may use your personal data as outlined in this privacy notice.
We ensure that all third parties respect the security of your personal data and handle it in compliance with the law. We do not permit third-party service providers to use your personal data for their own purposes; they may only process it for specified purposes following our instructions.
International Data Transfers
Your personal data may be transferred outside the European Economic Area (EEA) or the United States of America (USA). Some Internal Third Parties and External Third Parties may conduct their operations outside these regions. While they may not be subject to the same data protection laws as organizations within the EEA and the USA, we will take measures to ensure they provide an adequate level of protection in accordance with EEA and USA data protection laws. By submitting your personal information to us, you consent to the transfer, storage, or processing of your data outside the EEA and the USA.
We have implemented appropriate security measures to prevent the accidental loss, unauthorized access, use, alteration, or disclosure of your personal data. Access to your personal data is limited to employees, agents, contractors, and other third parties who require such access for business purposes. They may only process your personal data according to our instructions and are bound by confidentiality obligations. We have established procedures for addressing any suspected breaches of personal data and will notify you and the relevant regulatory authority in the event of a breach, as required by law.
We will retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including meeting any legal, accounting, or reporting obligations. The appropriate retention period depends on various factors, such as the type, volume, and sensitivity of the personal data, the potential risks associated with unauthorized use or disclosure, the purposes of processing, and whether we can achieve those purposes through alternative means. Details of specific retention periods for different categories of your personal data can be obtained from our Representative upon request.
In certain circumstances, you have the right to request the deletion of your data. Please refer below for further information. Additionally, we may anonymize your personal data (making it impossible to associate with you) for research or statistical purposes, allowing us to use this information indefinitely without further notice to you.
Your Legal Rights
You have rights under data protection laws in relation to your personal data, as detailed in the Glossary. To exercise any of these rights, please contact our Representative.
We typically do not charge a fee to access your personal data or exercise your rights. However, if your request is unfounded, repetitive, or excessive, we may charge a reasonable fee or refuse to comply with the request. In such cases, we will inform you accordingly.
We may require specific information from you to confirm your identity and ensure your right to access your personal data or exercise your other rights. This is a security measure to prevent the disclosure of personal data to unauthorized individuals. We may also reach out to you for additional information to expedite our response.
We aim to respond to all legitimate requests within one month. However, if your request is particularly complex or if you have made multiple requests, it may take longer to address. We will notify you and keep you informed in such cases.
Rest assured that exercising your privacy rights, including the right to have your personal information deleted, will not affect the services or pricing provided by the Company; you will continue to receive equal treatment.