Data controller
Aura Digital Media Ltd (brand Allure Aura), a company registered in England and Wales, Companies House no. 17026228. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Email: info@allureaura.art
Representative in the European Union
Representative under Article 27 GDPR: [TO BE COMPLETED]
What data we process
- Business details: name, type of business, town or city, VAT number (Partita IVA), Instagram or website, optional notes.
- Contact details: full name, email, WhatsApp number (optional) and the messages you send us.
- The photos of your shop you send us, including any recognisable people and brands.
- If you order the ad: invoicing details (company name, address, VAT number) and payment details.
- The confirmations you give in the form, with date and version of the texts.
- Technical data: a keyed, salted hash of your IP address, used to limit repeated requests (the IP address itself is not stored), and your browser type.
Why we process them and on what legal basis
- Preparing the preview you requested and contacting you: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
- Producing and delivering the ad you order, handling revisions and payment: performance of a contract (Article 6(1)(b) GDPR).
- Invoicing and bookkeeping: legal obligation (Article 6(1)(c) GDPR).
- Site security and abuse prevention (request limits, VAT number check): legitimate interest (Article 6(1)(f) GDPR).
- Showing delivered ads as examples on our website and social media: legitimate interest (Article 6(1)(f) GDPR). You can object at any time by writing to info@allureaura.art, and we will remove the ad.
Who receives the data
- Hostinger International Ltd: website hosting, storage of requests and email.
- Google: artificial intelligence tools that generate images, video and voice. The photos of your shop are uploaded to these tools to create the preview and the ad.
- OpenAI: script writing and quality checks.
- WhatsApp (Meta), if you message us on WhatsApp.
- Our bank or card payment provider, to collect payment for the ad.
Transfers outside the European Economic Area
- United Kingdom, where our company is based: covered by a European Commission adequacy decision.
- United States (Google, OpenAI): under the EU-U.S. Data Privacy Framework and/or standard contractual clauses.
How long we keep the data
- Preview request without an order (data and photos): deleted after 30 days.
- Ad order: for as long as the service lasts; invoices and accounting records for the period required by UK law (6 years).
- Ad shown as an example: until you object.
Your rights
You can ask for access to your data, correction, deletion, restriction of processing and portability, and you can object to processing (Articles 15–22 GDPR). Where processing is based on consent, you can withdraw it at any time.
To exercise them, write to info@allureaura.art.
Complaints
You can lodge a complaint with the Garante per la protezione dei dati personali (Italy, garanteprivacy.it) or the Information Commissioner's Office (United Kingdom, ico.org.uk).
Automated decisions
We make no decisions based solely on automated processing and we do no profiling.
Cookies and browser storage
This site uses no cookies, analytics or advertising tools.
The request form temporarily saves what you type in your browser (sessionStorage), so you don't lose it if you go back a step; it is cleared when you send the form or close the tab. Photos and consents are not saved in the browser. If you choose a language, we remember it in your browser (localStorage).
Last updated: 4 October 2026