Aura Elixir ("we", "our") sells premium essential oils and aromatherapy products online to customers in Canada. This policy explains what personal information we collect, why we collect it, and the rights you have over it.
Information we collect
- Account information — name, email address, and password (stored securely) when you create an account.
- Order information — shipping address, billing details, and order history needed to fulfil your purchases.
- Payment information — processed securely by our payment provider (Stripe). We never see or store your full card number.
- Communications — messages you send us (for example by email) and your marketing preferences.
- Technical information — privacy-friendly, aggregated analytics (via Plausible) such as pages visited. We do not use cross-site tracking cookies.
How we use it
- To process and deliver your orders and provide customer support.
- To manage your account and remember your preferences (such as your cart).
- To send order updates and, only with your consent, marketing emails you can unsubscribe from at any time.
- To meet legal and tax obligations.
If you arrive by scanning one of our QR cards, your browser remembers which card for 30 days so we can credit it when you order. It is a short code, with nothing about you in it.
When you choose English or French with the language switch, your browser remembers the choice in a small cookie (ae_lang) so the site opens in that language next time. It holds only the language.
If you arrive through a partner’s link, your browser remembers the partner’s code for 30 days so the partner can be credited when you order. It is the partner’s code, with nothing about you in it.
Sharing
We do not sell your personal information. We share it only with the service providers needed to run the store — payment processing (Stripe), shipping carriers, and email delivery — and only the data they need to perform their service.
Your rights (Québec Law 25)
If you are in Québec, you have the right to access the personal information we hold about you, to have it corrected, and to request its deletion, subject to legal retention requirements. To exercise any of these rights, email aura.elixir@outlook.com and we will respond within 30 days.
Retention & security
We keep your information only as long as needed for the purposes above (for example, order records required by tax law). We protect it with encrypted connections (HTTPS), secure password storage, and limited staff access.
Changes
If we change this policy, we will post the updated version here with a new effective date.
Contact
Questions about privacy: aura.elixir@outlook.com.
