Privacy Policy

This policy explains how The Aurora Lens (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit theauroralens.com, book a session, purchase a product, or sign up to our mailing list. We are committed to handling your data in line with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

The Aurora Lens is a sole trader business operated by Dawn Harris, based in Brighton, UK.

Data controller contact: dawn@theauroralens.com

2. What Data We Collect

Depending on how you interact with us, we may collect:

• Contact details: name, email address, postal address (for deck delivery)
• Booking details: service booked, date/time, session notes you choose to share with us
• Payment information: processed securely by Square and/or PayPal — we do not store your full card details ourselves
• Marketing data: your email address if you subscribe to our newsletter, and your engagement with our emails (opens, clicks)
• Website usage data: collected via cookies/analytics (see Section 6)
• Sensitive personal information you choose to share: for example, in the context of a reading, Reiki session, or our free sessions for survivors of coercive control, you may voluntarily share information about your health, relationships, or personal circumstances. We only use this to deliver your session and do not use it for any other purpose without your explicit consent.

3. How We Use Your Data

We use your personal data to:

• Deliver the service, reading, or product you’ve booked or purchased
• Process payments and fulfil orders (including shipping via Royal Mail)
• Send you booking confirmations and essential service communications
• Send you marketing emails (only if you’ve opted in) via our email marketing platform
• Improve our website and services
• Comply with our legal and accounting obligations

4. Legal Basis for Processing

We rely on the following legal bases under UK GDPR:

• Contract: to provide the service or product you’ve booked/purchased
• Consent: for marketing emails and for any sensitive information you choose to share during a session
• Legitimate interests: to improve our services and communicate essential updates
• Legal obligation: for accounting and tax record-keeping

5. Who We Share Your Data With

We share data only where necessary, with:

• Square and PayPal — to process payments
• Royal Mail — to deliver physical orders (name and address only)
• Our email marketing platform (MailerLite) — if you’ve subscribed to our mailing list

We do not sell your personal data to third parties.

6. Cookies

Our website uses cookies and similar technologies — including Google Analytics and the Meta Pixel — to help it function and to understand how visitors use the site, so we can improve it. You can control or disable cookies at any time through your browser settings.

7. Data Retention

We keep your personal data only as long as necessary:

• Booking and payment records: retained for 6 years to meet HMRC record-keeping requirements
• Marketing data: retained until you unsubscribe or request deletion
• Session notes involving sensitive personal information: retained only as long as needed for the purpose they were shared, then securely deleted

8. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Restrict or object to certain processing
• Request a copy of your data in a portable format
• Withdraw consent at any time (e.g. unsubscribe from marketing emails)
• Complain to the Information Commissioner’s Office (ICO) at ico.org.uk if you believe your data has been mishandled

To exercise any of these rights, contact dawn@theauroralens.com.

9. Children’s Data

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18.

10. Data Security

We take reasonable technical and organisational measures to protect your personal data, including relying on secure, reputable third-party processors (Square, PayPal, our website host, and email marketing platform) for storage and payment processing.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be published on this website.

12. Contact Us

If you have any questions about this policy or how we handle your data, contact: dawn@theauroralens.com