Privacy Policy
Privacy Policy
Last updated: 18 August 2026.
This policy explains how AuraDesk processes personal data when you browse the store, place an order, contact customer service or otherwise interact with us.
1. Data controller
The data controller is Ilyes Yahia Benattia, Entrepreneur individuel (EI), trading as AuraDesk, 120 Rue de la Pagère, 69500 Bron, France. Privacy contact: auradesk13@gmail.com. Official business registration identifiers will be added after registration is confirmed.
2. Data we may process
Depending on your interaction with the store, we may process identification and contact information, billing and delivery information, order and transaction information, customer-service communications, marketing preferences, device/browser information, IP address, security/fraud signals and information generated through cookies or similar technologies.
3. Why we process personal data
We process data where necessary to perform a contract or take steps requested before a contract, comply with legal obligations, pursue legitimate interests such as store security, fraud prevention and service improvement, or where you have given consent, for example for certain marketing or non-essential tracking activities.
4. Recipients and service providers
Data may be shared only where necessary with service providers involved in operating the store, including Shopify, payment providers, order-fulfilment and delivery partners, customer-support tools, technical providers and, where enabled with the required consent, analytics or marketing providers. These providers process data according to their role and applicable contractual and legal safeguards.
5. Shopify
AuraDesk uses Shopify to operate the online store. For merchants in the EMEA region, Shopify International Limited is Shopify's principal contracting entity. Shopify and its authorised service providers may process data in different countries subject to the safeguards applicable to international transfers.
6. International transfers
Where personal data is transferred outside the European Economic Area, appropriate transfer mechanisms and safeguards are used where required by law. The exact providers used can evolve as store functionality changes.
7. Retention
Personal data is kept only for as long as necessary for the purpose for which it was collected and for any additional period required or permitted by law, including periods necessary for accounting, tax, fraud-prevention, dispute and legal-record obligations.
8. Your rights
Subject to applicable conditions, you may have rights of access, rectification, erasure, restriction, data portability and objection, and the right to withdraw consent at any time where processing is based on consent. To exercise a privacy right, contact auradesk13@gmail.com. You may also lodge a complaint with the French data-protection authority, the CNIL.
9. Marketing
Marketing communications are sent only where permitted by applicable law. You can unsubscribe using the link in the message or by contacting us. Withdrawing marketing consent does not affect transactional communications necessary to manage an order.
10. Cookies and similar technologies
Necessary technologies may be used to provide the store, checkout, security and requested functionality. Non-essential analytics or marketing technologies that require consent are not intended to be activated before the required choice has been obtained. See the Cookie Policy for more information.
11. Security
We use reasonable organisational and technical measures, together with the security features provided by Shopify and other service providers, to protect personal data. No online service can guarantee absolute security.
12. Changes
This policy may be updated when our services, providers or legal obligations change. The date at the top identifies the latest version.
