Privacy policy

Privacy Policy

Last updated: 19 August 2026

1. Controller

The controller responsible for the processing of personal data on this website is:

Lyvola UG (haftungsbeschränkt)
Ammerseestraße 30
82061 Neuried
Germany

The AuraGleam online store is operated by Lyvola UG (haftungsbeschränkt).

Phone: +49 89 97330414
Email: support@auragleamjewelry.com

2. General Information on Data Processing

We process personal data insofar as this is necessary or permitted for the provision and security of our online store, the processing of orders, the handling of enquiries, compliance with legal obligations, and for the other purposes described below.

Personal data means any information relating to an identified or identifiable natural person.

Depending on the purpose, processing is carried out in particular on the basis of Art. 6(1)(a) GDPR where consent has been given, Art. 6(1)(b) GDPR for the performance of a contract or pre-contractual measures, Art. 6(1)(c) GDPR for compliance with legal obligations, and Art. 6(1)(f) GDPR for the purposes of legitimate interests.

Where we rely on legitimate interests, these include in particular the secure and commercially efficient operation of our online store, the prevention of misuse and fraud, efficient customer communication, and the improvement of our services.

Depending on how you use our online store, we may process, in particular, your name and contact details, billing and shipping address, order and transaction data, payment information and payment status, customer account information, messages submitted by you, IP address, device, browser and network information, usage and interaction data, as well as cookie and consent information.

We obtain this data in particular directly from you, automatically when you use our website and, where required for the respective service, from the service providers and platforms we use.

3. Shopify, Hosting and Shopify Network Intelligence

Our online store is operated using Shopify. Shopify provides, in particular, the technical infrastructure for the store, hosting, checkout, customer accounts, order management, security features and other store functions.

In connection with these services, Shopify may process, in particular, contact, account, order, transaction, device, usage and consent data.

The European Union is configured in Shopify as the primary hosting location for our customer data. This does not exclude the possibility that Shopify or service providers engaged by Shopify may also process data in other countries in connection with the provision of their services.

Shopify Network Intelligence is enabled in our store. As a result, Shopify may process information from interactions with our store together with information from interactions with Shopify and other Shopify merchants in order to provide so-called enhanced services (“Enhanced Services”). These may include, among other things, the personalization of services, analysis and improvement of offerings, protection against misuse and, where the required consent has been obtained, the personalization and measurement of advertising.

Information about your activities in our store may for this purpose be transmitted to Shopify and other service providers involved in providing these services, which may also be located outside your country.

Where consent is required for this under applicable law, in particular for non-essential tracking technologies and certain personalized advertising purposes, the relevant processing will only take place on the basis of your consent.

Further information about the processing of personal data by Shopify can be found in the Shopify Consumer Privacy Policy.

Through the Shopify Privacy Portal, you can obtain further information about processing by Shopify and, where applicable, exercise data protection rights or object to processing for certain purposes.

4. Orders, Customer Profiles and Contract Processing

When you place an order through our online store, we process the data required to enter into and perform the purchase contract.

This includes, in particular, your name, contact information, billing and shipping address, products ordered, order value, payment method, payment status, shipping information and other information required for the order.

The legal basis is Art. 6(1)(b) GDPR.

In connection with orders and other interactions with our store, Shopify may create and manage a customer profile. A customer profile may include, among other things, contact details, order history, marketing status and other information related to the use of our store.

Where certain information is required for entering into or performing a contract, we may not be able to process an order without such information.

Data subject to commercial, tax or other statutory retention obligations is processed by us for the legally prescribed retention period on the basis of Art. 6(1)(c) GDPR.

5. Payment Processing

For payment processing, the data required for the selected payment method is transmitted to the payment service providers, banks and payment networks involved.

We use Shopify Payments in particular. Depending on the country, device and checkout, this may include card payments, Shop Pay, Apple Pay, Google Pay and local payment methods such as Klarna, Bancontact, EPS, iDEAL/Wero or MobilePay.

We also offer PayPal as a payment service provider.

In connection with payment processing, the following data in particular may be processed: name, billing and shipping address, email address, payment amount, currency, order and transaction information, payment status, as well as payment information required for the respective payment method.

Processing by us is carried out in particular for the performance of the purchase contract pursuant to Art. 6(1)(b) GDPR. Payment service providers may additionally process data under their own responsibility, for example for fraud prevention, identity verification, compliance with regulatory obligations and the provision of their payment services.

For such independent processing activities, the privacy information of the respective selected payment service provider also applies.

6. Shipping and Logistics

For the delivery of orders, we transmit the personal data required for this purpose to the shipping and logistics service providers we use.

We use DHL in particular for domestic and international shipments.

The data transmitted includes in particular your name and shipping address and, where required or intended for the specific shipping method, delivery or shipping notification, your email address and telephone number.

For international shipments, data may also be passed on to other postal, logistics and customs authorities or entities involved in transportation, delivery, customs clearance or importation.

Processing is carried out for the performance of the purchase contract pursuant to Art. 6(1)(b) GDPR and, where statutory customs or other obligations are concerned, pursuant to Art. 6(1)(c) GDPR.

7. Customer Account, Contact and Customer Service

If you use a customer account, we process the information required to provide and manage that account.

If you contact us by email, contact form or via Shopify Inbox, we process your contact details and the content submitted by you in order to handle your enquiry.

For enquiries relating to a contract or pre-contractual matters, processing is based on Art. 6(1)(b) GDPR. For other enquiries, processing is based on our legitimate interest in proper and efficient customer communication pursuant to Art. 6(1)(f) GDPR.

You can also contact us via WhatsApp, Facebook or Instagram. When using these services, personal data is additionally processed by the respective platform provider. We have only limited influence over the nature and extent of such independent processing by the respective platform provider. The privacy policies of the respective service additionally apply.

8. Withdrawal and Contract-Related Messages

If you use an electronic withdrawal function provided by us or another method to exercise a right of withdrawal, we process the data required to identify the relevant contract, handle the withdrawal and confirm receipt.

This may include, in particular, your name, email address, order or contract information, the withdrawal declaration and the time and status of its processing.

The Shopify app WorkflowMail Emails may be used for the technical sending of corresponding withdrawal and confirmation messages.

Processing is carried out for the performance and reversal of the contract pursuant to Art. 6(1)(b) GDPR and for compliance with legal obligations pursuant to Art. 6(1)(c) GDPR.

Order, payment, shipping, withdrawal or other messages directly related to the contract are not newsletters and may be sent independently of consent to marketing communications where they are required for contract processing or compliance with legal obligations.

9. Newsletter, Shopify Email, Shopify Forms and Wisepops

If you subscribe to our newsletter or other email marketing communications, we process in particular your email address, marketing status and, where applicable, other information voluntarily provided by you.

For managing and sending email marketing, we use in particular Shopify Email, Shopify Forms and functions provided by Shopify Flow.

We use Wisepops to display popups, in particular for newsletter sign-ups and promotional offers. If you submit your email address through such a popup, the information provided will be processed for handling your registration and the associated promotion or action.

In connection with the provision and optimization of popups, Wisepops may also process technical usage and interaction information. Where non-essential analytics or marketing technologies are used for this purpose, this is done only in accordance with the consent you have provided.

The processing of data for newsletters and other email advertising requiring consent is based on your consent pursuant to Art. 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future, in particular by using the unsubscribe link in our marketing emails. The lawfulness of processing carried out before the withdrawal of consent remains unaffected.

10. Pre-Orders and Product Availability Notifications

We use functions and Shopify apps such as Essential Preorder and SW Back in Stock, which may be used, among other things, to enable pre-orders and allow customers to request notifications when products become available again.

If you use such a function, your email address, information regarding the relevant product and technical information may in particular be processed.

Where you expressly request a product availability notification, processing is carried out to provide the service requested by you or in connection with pre-contractual measures pursuant to Art. 6(1)(b) GDPR.

These data will only be used for additional advertising requiring consent where an appropriate legal basis exists.

11. Customer Reviews – Judge.me

We use Judge.me to manage and display customer and product reviews.

Depending on the function used, the processing of reviews may involve, in particular, your name, email address, order information, product information and the review content provided by you.

Processing may serve, in particular, to verify purchases, obtain, manage and publish reviews and prevent abusive or fraudulent reviews.

Depending on the specific function, the legal basis is Art. 6(1)(b) GDPR, our legitimate interest in authentic customer reviews and the presentation of customer experiences pursuant to Art. 6(1)(f) GDPR or, where required, your consent pursuant to Art. 6(1)(a) GDPR.

12. Cookies and Similar Technologies

Our online store uses cookies and comparable technologies as well as functions that store information on your device or access information already stored on your device.

Some of these technologies are required in order for the online store requested by you to function properly. These include, in particular, functions for the shopping cart, checkout, security, customer account, language settings and storing your privacy and consent choices.

Where the storage of information on your device or access to such information is strictly necessary in order to provide a digital service expressly requested by you, this takes place pursuant to Section 25(2) TDDDG. The associated processing of personal data is carried out, depending on the respective purpose, in particular on the basis of Art. 6(1)(b), (c) or (f) GDPR.

Non-essential analytics, marketing, personalization or advertising technologies are used in regions where consent is required only after the relevant consent has been obtained. In such cases, access to information on your device or storage of information on your device takes place on the basis of Section 25(1) TDDDG, and the associated processing of personal data takes place on the basis of Art. 6(1)(a) GDPR.

For this purpose, we use Shopify's privacy and cookie banner functions.

You can change your selection at any time via the Cookie Settings on our website or withdraw previously given consent with effect for the future.

13. Analytics, Conversion Measurement and Personalized Advertising

Where you have provided the required consent via our Cookie Settings, we use analytics and advertising services to evaluate the use of our online store, measure advertising campaigns, attribute conversions and orders to advertising contacts and optimize our marketing activities.

In this context, the following data in particular may be processed: IP address, device and browser information, pages visited, interactions with products and our store, referrer and campaign information, cookie and device identifiers, as well as conversion, order and event data.

Depending on the respective service and technical integration, event data may be transmitted to the respective provider both through the web browser and server-side. Where applicable, pseudonymized or hashed identifiers may also be used for this purpose.

Google Analytics and Google Ads

We use Google Analytics to analyze the use of our online store and Google Ads to measure and optimize our advertising campaigns.

Usage, device, interaction, campaign and conversion data may be transmitted to and processed by Google.

Meta – Facebook and Instagram

We use services provided by Meta for advertising on Facebook and Instagram. These include browser-based and server-side technologies for measuring interactions and conversions, in particular Meta Pixel and corresponding server-side integrations.

As a result, usage, device, interaction, campaign and conversion data may be transmitted to Meta.

Microsoft Advertising

We use Microsoft Advertising, including Microsoft UET and corresponding server-side integrations, to measure and optimize advertising campaigns.

Usage, device, interaction, campaign and conversion data may be transmitted to Microsoft.

We use Pinterest to measure and optimize our advertising activities. Usage, device, interaction, campaign and conversion data may be processed through browser-based and server-side integrations.

TikTok

We use TikTok to measure and optimize our advertising activities. Usage, device, interaction, campaign and conversion data may be processed through browser-based and server-side integrations.

Processing by us for the non-essential analytics and advertising purposes described in this section is carried out, where consent is required, on the basis of Art. 6(1)(a) GDPR and – where information on the end device is accessed or information is stored there – in conjunction with Section 25(1) TDDDG.

You can change or withdraw your consent at any time with effect for the future via the Cookie Settings on our website.

14. Recipients of Personal Data

Where this is necessary for the provision of our services or for other legally permitted purposes, personal data may be transmitted to store, hosting and IT service providers used by us, payment service providers and banks, shipping and logistics companies, communications and customer service providers, providers of newsletter, form, review, pre-order and availability functions, analytics and advertising service providers, as well as professional advisers and public authorities.

Data is only disclosed where an appropriate legal basis exists.

Service providers that process personal data on our behalf are engaged in accordance with statutory requirements. Where a provider processes personal data for its own purposes under its own responsibility, that provider's privacy information additionally applies.

15. Transfers of Data Outside the European Economic Area

Some providers and subcontractors used by us or our service providers may also process personal data outside the European Economic Area.

Where personal data is transferred to a third country, this is done in accordance with Art. 44 et seq. GDPR.

This may take place in particular on the basis of an adequacy decision of the European Commission or appropriate safeguards such as the Standard Contractual Clauses approved by the European Commission. Where required, additional protective measures are taken into account.

Further information on international data transfers and the safeguards used in each case can also be found in the privacy information of the respective providers. You can also contact us at support@auragleamjewelry.com if you would like further information about the applicable safeguards.

16. Privacy Options and Data Sharing in Certain Regions

For certain regions, in particular certain U.S. states, specific privacy rights may apply with respect to the use of personal data for targeted advertising or processing described under applicable privacy laws as a “sale” or “sharing” of personal data.

Where these rights apply to your location, you can use the Data Sharing Opt-Out page provided by Shopify in our store to object to the processing described there.

Where your browser sends an applicable Global Privacy Control (GPC) signal and this is supported for your location, the signal will be taken into account through the privacy functions provided by Shopify.

Additional settings and options to object to certain processing activities by Shopify can be found in the Shopify Privacy Portal.

17. Retention Period

As a general rule, we store personal data only for as long as this is necessary for the respective processing purpose or there is a legal basis for continued storage.

Contract, order, payment and invoice data are stored in particular in accordance with applicable commercial and tax retention obligations.

We generally store data from customer enquiries for as long as this is necessary to handle the enquiry and, where applicable, document the underlying matter.

Data relating to a customer account may be stored until the account is deleted or the respective processing purposes no longer apply, unless statutory retention obligations require continued storage.

Data processed for marketing purposes on the basis of consent is generally processed until consent is withdrawn or the relevant purpose no longer applies, unless another legal basis exists for limited continued storage.

Once the processing purpose no longer applies and applicable retention periods have expired, personal data is deleted or anonymized unless another legal basis for its storage exists.

18. Your Rights

Subject to the applicable statutory requirements, you have the right of access pursuant to Art. 15 GDPR, the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restriction of processing pursuant to Art. 18 GDPR and the right to data portability pursuant to Art. 20 GDPR.

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future pursuant to Art. 7(3) GDPR. The lawfulness of processing carried out before the withdrawal of consent remains unaffected.

Where we process personal data on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right, subject to the statutory requirements and pursuant to Art. 21 GDPR, to object to such processing on grounds relating to your particular situation.

Where personal data is processed for direct marketing purposes, you may object to such processing at any time. This also applies to profiling insofar as it is related to such direct marketing. Following such an objection, your personal data will no longer be processed for these purposes.

In addition, pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority. The Bavarian State Office for Data Protection Supervision (BayLDA) is, in particular, the competent supervisory authority for our company. Your right to contact another data protection supervisory authority that may be competent for you remains unaffected.

To exercise your rights, you can contact us at support@auragleamjewelry.com.

19. External Links and Third-Party Services

Our website may contain links to third-party websites, social networks or services.

If you follow such an external link, you leave our area of responsibility. Any subsequent data processing by the respective third-party provider is governed by that provider's privacy information.

20. Changes to this Privacy Policy

We may amend this Privacy Policy if our online store, the services we use, our data processing activities or legal requirements change.

The current version will be published on this website.

21. Data Protection Contact

If you have any questions regarding the processing of your personal data or the exercise of your data protection rights, you can contact us at: