Privacy policy

Last Updated: 27 July 2026

This Privacy Policy explains how Aetholux ("we", "us", or "our") collects, uses, stores, and protects your personal information when you visit aetholux.com (the "Site"), place an order through our Site, or otherwise use our services (the "Services").

1. Personal Data We Collect

Depending on how you use our Site and Services, we may collect the following categories of personal data:

Contact Information: Name, email address, shipping address, billing address, and phone number.

Payment Information: Payments are processed securely through third-party payment providers. We do not store your full credit or debit card details.

Account Information: Username, password, and other information used to create or manage your account.

Order Information: Details related to your purchases, delivery instructions, and any product-related information you provide when placing an order.

Usage Data: Information such as your browser type, device type, IP address, pages viewed, referring website, and interactions with the Site.

Cookie and Tracking Data: Information collected through cookies and similar technologies used to support website functionality, measure performance, and improve user experience.

Third-Party Information: Information we receive from service providers and platforms such as Shopify, payment providers, analytics providers, and advertising partners.

2. How We Use Your Data

We use personal data for the following purposes:

To process orders, deliveries, returns, refunds, and customer support requests.
To communicate with you about your order, account, or important service-related updates.
To provide, operate, maintain, and improve our Site and Services.
To comply with legal and regulatory obligations, including tax, accounting, and fraud prevention requirements.
To help detect, prevent, and investigate fraud, misuse, security incidents, or other harmful activity.
To send marketing communications where you have given your consent or where otherwise permitted by law.

3. Legal Basis for Processing

Under UK GDPR, we process your personal data on the following legal bases:

Contract: Where processing is necessary to fulfil your order or provide the Services you request.

Legal Obligation: Where processing is necessary to comply with legal or regulatory requirements.

Legitimate Interests: Where processing is necessary for our legitimate business interests, such as operating, securing, and improving our Site and Services, provided those interests are not overridden by your rights and freedoms.

Consent: Where you have given consent, such as for certain marketing communications or non-essential cookies where required.

4. Sharing Your Data

We may share your information only where necessary to operate our business and provide our Services, including with:

Service Providers: Such as Shopify, payment processors, delivery partners, hosting providers, and customer support tools.

Analytics and Advertising Partners: Such as Google Analytics and Google Ads, which help us understand website performance and show relevant advertising, subject to your cookie preferences.

Professional Advisers and Legal Authorities: Where necessary to comply with the law, enforce our terms, respond to legal requests, or protect our rights, property, or safety.

We take reasonable steps to ensure that third parties process personal data securely and only for appropriate business purposes.

5. International Transfers

Some service providers may process personal data outside the United Kingdom. Where this happens, we take appropriate steps to ensure your data remains protected in accordance with UK data protection laws.

6. Data Retention

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Order and Transaction Data: May be retained for up to 6 years for tax, accounting, legal, and record-keeping purposes.

Account Data: May be retained for as long as your account remains active and for a reasonable period afterwards where necessary for business or legal purposes.

Marketing Information: Kept until you unsubscribe, opt out, or withdraw your consent, unless retention is otherwise required by law.

Technical and Usage Data: May be retained for a reasonable period for analytics, security, and service improvement purposes.

7. Cookies and Similar Technologies

We use cookies and similar technologies to support website functionality, analyse site usage, remember preferences, and improve your browsing experience.

These may include:

Essential Cookies: Required for the Site to function properly.

Analytics Cookies: Help us understand how visitors use the Site and improve performance.

Marketing Cookies: Used to support relevant advertising and remarketing, subject to your preferences and consent.

You can manage your cookie preferences through our cookie banner or through your browser settings.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Request access to the personal data we hold about you.
Request correction of inaccurate or incomplete personal data.
Request deletion of your personal data in certain circumstances.
Request restriction of processing in certain circumstances.
Object to certain uses of your personal data.
Request a copy of your personal data in a portable format where applicable.
Withdraw consent at any time where processing is based on consent.

To exercise your rights, please contact us at support@aetholux.com. You also have the right to lodge a complaint with the UK Information Commissioner's Office if you believe your personal data has been handled unlawfully.

9. Children

Our Site and Services are not intended for children under the age of 16, and we do not knowingly collect personal data from children.

10. Security

We implement appropriate technical and organisational measures designed to protect your personal data against unauthorised access, loss, misuse, disclosure, or alteration. These measures may include secure website connections, trusted payment processing providers, restricted access to personal data, and regular reviews of our security practices.

11. Marketing

We will only send marketing emails where you have given your consent or where otherwise permitted by law. You can unsubscribe at any time by using the unsubscribe link in our emails or by contacting us.

12. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, legal obligations, or business practices. Any updates will take effect once posted on this page, and the latest version will always be available here with a "last updated" date at the top.