1. Who we are

Aurelin ("we", "us", or "our") is a beauty brand operating at aurelinbeauty.com. We sell beauty and personal care products to customers in Pakistan and internationally. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website or make a purchase.

By using our website, you agree to the practices described in this policy.

2. Information we collect

Information you give us directly:

• Name, email address, and phone number when you create an account, place an order, or contact us
• Billing and shipping address needed to process and deliver your purchases
• Payment details — processed securely by our payment provider; we do not store full card numbers
• Messages or enquiries you send to our support team

Information collected automatically:

• IP address, browser type, device type, and operating system
• Pages visited, time spent on the site, and referring URLs
• Cookie and session data (see section 4)

3. How we use your information

We use the information we collect to:

• Process, fulfil, and deliver your orders, and handle returns or exchanges
• Communicate with you about your orders, account, or enquiries
• Send marketing emails or promotions — only where you have opted in; you may opt out at any time
• Improve our website, products, and customer experience
• Detect and prevent fraud or unauthorised activity
• Comply with applicable legal and regulatory obligations

We will not use your information for purposes incompatible with those listed above without informing you first.

4. Cookies & tracking technologies

We use cookies and similar technologies to support essential site functions (such as your shopping cart and checkout), remember your preferences, and understand how visitors use the site. We may also use third-party analytics or advertising tools (such as Google Analytics or Meta Pixel) that set their own cookies.

You can control or disable cookies through your browser settings. Disabling certain cookies may affect site functionality, such as the ability to complete a purchase.

5. Sharing of information

We do not sell your personal information. We may share your information only in the following circumstances:

• Service providers: payment processors, shipping and logistics partners, email service providers, and website hosting companies — only to the extent necessary to provide our services, and under appropriate data processing agreements
• Legal obligations: where required by applicable law, court order, or to protect the rights and safety of Aurelin, our customers, or others
• Business transfers: in the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity

6. International transfers

Aurelin serves customers in Pakistan and internationally. Your personal data may be processed and stored in countries other than your own, including the United Kingdom, the United States, and Pakistan. Where we transfer data internationally, we take reasonable steps to ensure it is protected in accordance with this policy and applicable law.

7. Data retention & security

We retain your personal data only as long as necessary to fulfil the purposes described in this policy, or as required by law (for example, financial records for tax purposes).

We implement reasonable technical and organisational measures — including encrypted connections (HTTPS) and access controls — to protect your personal data. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

8. Your rights

Depending on where you live, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Correction: ask us to correct inaccurate or incomplete data
• Deletion: request that we delete your personal data, subject to legal obligations
• Restriction or objection: ask us to limit or stop certain processing of your data
• Marketing opt-out: unsubscribe from marketing communications at any time via the link in any email, or by contacting us directly

To exercise any of these rights, please contact us using the details in section 11. We will respond within 30 days.

9. Children's privacy

Our website and services are not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the effective date at the top of this page and, where appropriate, notify you by email. We encourage you to review this page periodically.