Política de privacidad

Last updated: August 23, 2025

CalmAura operates this store and website, including the data, content, features, tools, products, and services, to offer you—the customer—a curated shopping experience (the “Services”). CalmAura is powered by Shopify, which enables us to provide the Services. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, make a purchase, or conduct another transaction through the Services, or when you contact us through any other means. In case of a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy shall prevail with respect to the collection, handling, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using or accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand how your personal information is collected, used, and disclosed, as described herein.

Personal Information We Collect or Process

When we use the term “personal information,” we mean any data that identifies you or can reasonably be linked to you or another individual. Personal information does not include anonymized or de-identified data that cannot identify you or be reasonably linked to you. Depending on how you interact with the Services, where you reside, and what is permitted or required by applicable law, we may collect or process the following categories of personal information (including inferences drawn from such data):

  • Contact details including your name, address, billing address, shipping address, phone number, and email address.

  • Financial information including credit card numbers, debit card numbers, financial account details, payment card data, transaction details, payment method, and confirmation of payment.

  • Account information including your username, password, security questions, preferences, and settings.

  • Transaction information including items you browse, add to your cart, save to your wishlist, purchase, return, exchange, or cancel, as well as your previous transactions.

  • Communications with us including information you share in communications with us, for example when contacting customer service.

  • Device information including details about your device, browser, network connection, IP address, and other unique identifiers.

  • Usage information including data related to your interaction with the Services—how and when you access or browse them.

Sources of Personal Information

We may collect personal information from the following sources:

  • Directly from you, such as when you create an account, use the Services, contact us, or otherwise share personal data.

  • Automatically through the Services, including via your device when you interact with our website or services, and through cookies and similar technologies.

  • From our service providers, such as those who help enable technology or process data on our behalf.

  • From our partners or other third parties.

How We Use Your Personal Information

Depending on how you interact with us or which Services you use, we may use your personal information for the following purposes:

1. Providing, Personalizing, and Improving the Services

We use your personal information to deliver the Services, fulfill contracts with you, process payments, manage orders, remember preferences, send account-related notifications, facilitate transactions, manage accounts, organize shipping, handle returns or exchanges, and allow you to post reviews. This includes offering a personalized shopping experience and recommending related products.

2. Marketing and Advertising

We use your personal information for marketing and promotional purposes, such as sending promotional emails, SMS, and direct mail, and displaying targeted ads within the Services or on other websites—based on items you’ve browsed, purchased, or interacted with.

3. Security and Fraud Prevention

We use your personal information to authenticate accounts, provide secure shopping, detect and investigate fraud or unlawful behavior, protect public safety, and enforce the security of our services. If you register an account, you are responsible for maintaining the confidentiality of your login credentials. We recommend not sharing your username, password, or other sensitive data with anyone.

4. Communications

We use your personal information to provide customer support, respond to inquiries, deliver services effectively, and maintain our business relationship with you.

5. Legal Purposes

We use your personal information to comply with legal obligations, respond to law enforcement or government requests, participate in legal proceedings, and enforce or investigate violations of our terms or policies.

How We Disclose Personal Information

We may disclose your personal information to third parties under legitimate circumstances, as described below:

  • With Shopify, service providers, and vendors (e.g., IT management, payment processing, analytics, customer service, cloud storage, order fulfillment).

  • With marketing and business partners to deliver marketing services and show you targeted ads (e.g., through Shopify’s tools that support cross-site advertising). Your data may be used by partners under their own privacy policies. Depending on your location, you may have the right to opt out of such sharing for personalized ads [link opt-out].

  • With your consent or at your request, such as to fulfill a specific service or through social media integrations.

  • With our affiliates or within our business group.

  • As part of a business transaction, such as a merger or bankruptcy; or as required by law, to enforce terms or protect our Services, our users, or others.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes your personal information in connection with your use of the Services, to operate and improve them. Data you submit to the Services may be transmitted to and shared with Shopify and third parties in countries other than yours.

We also use advanced Shopify features that process data across interactions with our store, other merchants, and the Shopify platform itself. In these cases, Shopify is the data controller and responsible for handling requests related to such data. For more information, visit Shopify’s Consumer Privacy Policy.

Third-Party Sites and Links

The Services may contain links to websites or platforms operated by third parties. If you access a third-party link, we recommend reviewing their privacy and security policies. We are not responsible for the content, security, or privacy of such sites.

Information you share in public or semi-public spaces (e.g., on social media) may be visible to other users without restrictions on our or others’ use. Unless otherwise noted, linking to third-party sites does not imply endorsement.

Children’s Data

The Services are not intended for minors, and we do not knowingly collect personal data from children under the age of consent in your jurisdiction. If you are a parent or guardian and believe your child has provided personal information, contact us to request deletion. As of this Policy's effective date, we do not knowingly "sell" or "share" personal information of individuals under 16, as defined by applicable law.

Security and Retention of Your Information

No security measure is perfect. We cannot guarantee "absolute security," and transmissions may not be secure. Do not send sensitive data through unsecured channels.

We retain personal information based on the need to maintain your account, deliver services, fulfill legal obligations, resolve disputes, or enforce agreements.

Your Rights and Choices

Depending on your location, you may have rights including:

  • Right to access personal data we hold about you.

  • Right to delete your personal information.

  • Right to correct inaccurate personal information.

  • Right to data portability in certain circumstances.

  • Right to object to the sale or sharing of your data for personalized ads.

  • Right to manage communication preferences, including opting out of promotional emails.

You may also have rights under UK or EEA law, including:

  • Right to object or restrict processing

  • Right to withdraw consent, where applicable

You can exercise these rights via designated channels in the Services or by contacting us. We may verify your identity before processing your request. You may designate an authorized agent to make requests on your behalf, and we will require proof of authorization.

We will respond to your request within a reasonable time as required by law.

Complaints

If you have concerns about how we handle your personal information, contact us via the details below. Depending on your location, you may have the right to appeal our decision or file a complaint with your local data protection authority. For the EEA, you can find a list of authorities here.

International Transfers

We may transfer, store, and process your personal information outside your country. If transferred outside the EEA or UK, we rely on legal transfer mechanisms such as Standard Contractual Clauses (SCCs) or their UK equivalents, unless transferred to a country deemed adequate.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes in practices, laws, or operational needs. We will post the updated version on this website and change the “Last Updated” date. We will notify you as required by applicable law.

Contact Us

If you have any questions about our privacy practices or this Privacy Policy, or if you wish to exercise your rights, please:

For purposes of applicable data protection law, we are the data controller of your personal information.