Privacy Policy

Enquiry data: name, company, email, phone, country and the content of your message or tech pack.

Account data: name, company, email, account type and a hashed password when you request access to the client area. Approval status is recorded so an administrator can review the request.

Technical data: essential logs needed to operate and secure the site.

To answer enquiries, prepare quotations and perform manufacturing or wholesale contracts (Art. 6(1)(b) GDPR).

To review and approve client-area access requests, and to keep our accounting and customs records as required by Italian law (Art. 6(1)(c) GDPR).

For limited business communication about your project, based on our legitimate interest (Art. 6(1)(f) GDPR).

Client-area account records created on this website are stored locally in your browser and on our internal systems for review. Enquiry emails are processed on business email systems located in the European Union.

We do not sell personal data and we do not share it for advertising purposes.

Data may be shared with our accountants, freight forwarders and IT providers acting as data processors, and with public authorities when the law requires it.

Enquiry data is kept for up to 24 months. Contract, invoicing and customs records are kept for 10 years as required by Italian law. Client-area accounts are kept until you ask us to delete them.

You may request access, rectification, erasure, restriction, portability or object to processing by writing to contact@auralunasrls.com.

You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali).

Passwords are never stored in plain text, access to client records is limited to authorised staff and file transfers of tech packs are handled through protected channels.