Privacy Policy

1. Introduction

Aurora Lusus ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you visit our website auroralusus.com (the "Site"), subscribe to our mailing list, or make a VIP reservation.

We comply with the General Data Protection Regulation (GDPR) and applicable Irish and EU data protection laws.

2. Data Controller

The data controller responsible for your personal data is Aurora Lusus, based in Dublin, Ireland. You can contact us at info@auroralusus.com for any data protection enquiries.

3. What Data We Collect

We may collect the following types of personal data:

a) Information you provide directly

• Email address — when you subscribe to our mailing list. This is the only information required to sign up.
• Founder name / alias — an optional public display name you choose after reserving (see Section 3c).
• Reservation & payment data — when you make a €3 VIP reservation, our payment provider (SumUp) processes your card payment. We receive only a payment reference and date — we never see or store your card details.
• Communication data — when you contact us via email or social media.

b) Information collected automatically

• Technical data — such as IP address, browser type, and device information, recorded automatically by our hosting provider in server logs.
• Cookies — see Section 8 below.

c) Information displayed publicly

If you choose a Founder name, it is shown publicly on our Founding Supporters page after a short review. The Founder name is free-form text — it can be a nickname, an alias, or your real name if you prefer — so please only enter what you are comfortable displaying publicly. This is entirely optional: if you don't choose one, you appear only as an anonymous numbered entry (for example, "Founding Trader #12"). You can change or remove your Founder name at any time by contacting us.

4. How We Use Your Data

We use your personal data for the following purposes:

• To process your €3 VIP reservation and record your founding-supporter status.
• To display your chosen Founder name on our public Founding Supporters page (with your consent).
• To send you updates about our Kickstarter campaign and product launches (only with your consent).
• To respond to your enquiries and provide customer support.
• To operate, secure, and improve our Site.
• To comply with legal obligations (e.g. tax and accounting).

5. Legal Basis for Processing

Under the GDPR, we process your data based on:

• Consent — for mailing-list subscription, marketing emails, and publishing your Founder name publicly. You can withdraw consent at any time.
• Contract — to process your €3 VIP reservation and honour the associated benefits.
• Legitimate interest — for site security, fraud prevention, and keeping the Site running reliably.
• Legal obligation — to comply with tax, accounting, and regulatory requirements.

6. Data Sharing

We do not sell your personal data. We may share data with:

• SumUp — our payment provider, to securely process your reservation payment.
• EmailOctopus — our email provider, to manage our mailing list and send updates.
• Vercel — our hosting provider, which processes requests and technical logs in order to serve the Site.
• Kickstarter — if we run a campaign, pledges and reward fulfilment (including any shipping details) are handled through Kickstarter under its own privacy policy. We do not collect or store your shipping address ourselves.

All third-party providers are contractually required to protect your data and process it only for the purposes we specify.

7. Data Retention

We retain your personal data only for as long as necessary:

• Mailing-list subscribers — until you unsubscribe or request deletion.
• Founder name — until you ask us to remove it or delete your data.
• Reservation & payment records — for 7 years, to comply with Irish tax and accounting regulations.
• Communication records — for up to 2 years after the last interaction.

8. Cookies

The Site uses a single strictly necessary cookie:

• Session cookie (aurora_sub) — set when you subscribe, so we can link your reservation to your email during checkout. It is essential for the reservation flow to work.

We do not use advertising, tracking, or analytics cookies, so no cookie-consent banner is required. You can block cookies in your browser settings, but the reservation flow may not work without this essential cookie.

9. Your Rights

Under the GDPR, you have the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your personal data ("right to be forgotten").
• Restriction — request that we limit how we process your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — for any processing based on consent, at any time.

To exercise any of these rights, please contact us at info@auroralusus.com. We will respond within 30 days.

10. International Transfers

Your data may be processed by third-party services located outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or the service provider's participation in an approved data protection framework.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption of data in transit (HTTPS), secure hosting, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

12. Children's Privacy

Our Site is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically. Significant changes will be communicated via email where possible.

14. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC): www.dataprotection.ie

15. Contact Us

For any questions or requests regarding this Privacy Policy or your personal data, please contact us at: info@auroralusus.com