AuraFine / Legal
Privacy Policy.
Last updated · 25 April 2026
AuraFine is a small studio. We collect only what we need to make your ring and write back to you, and we keep it only for as long as honesty allows. This page explains, in plain English, what we hold, why we hold it, and how to ask us to let it go.
Who is responsible for your data
AuraFine, the studio behind this site, is the data controller for any personal information you share with us. You can reach a real person, at a real desk in London, by writing to hello@aurafine.co.uk. We will reply within a few working days.
What we collect, and why
When you reserve a ring, send us an audio recording, or otherwise write to us through this site, we may collect the following. We never ask for more than is needed for the conversation in front of us.
- Email address
- So we can write back to confirm your reservation and arrange casting. Lawful basis: performance of a contract (your reservation request) and, where you opt in, consent for occasional letters from the studio.
- Name (optional)
- So we can address you as a person rather than an inbox. Lawful basis: legitimate interest in courteous correspondence.
- Phone number (optional)
- Used only if email fails or you ask us to call. Lawful basis: performance of a contract.
- Ring size and metal preference
- Required to cast a ring that fits and matches the finish you chose. Lawful basis: performance of a contract.
- Your message and any audio recording you upload
- The recording is the shape of your ring; the message is your context. Lawful basis: performance of a contract. We keep your recording only for as long as it takes to make your ring; then we delete it.
- IP address, browser user agent, referring page, and any UTM parameters in the link you arrived through
- Captured automatically when you submit a form. We use these to prevent fraud and to understand which letters and adverts brought you to us. Lawful basis: legitimate interest in protecting the studio and improving how we reach the people who would love what we make.
How long we keep it
Reservation records are kept for three years from the day you submit them, in case you write to us again about the same piece. Other contact-form messages are kept for two years. Audio recordings are deleted as soon as your ring has been cast, finished, and shipped — or sooner, if you ask us to remove them. Records we are required to keep for tax or accounting purposes are retained for the period UK law requires, which is currently six years.
Who we share it with
We use a small number of carefully chosen suppliers to run the studio. We do not sell your data, ever, to anyone.
- Google Cloud (Firestore, in europe-west2)
- Where your reservation is stored. Data is held in the United Kingdom and the European Union.
- Resend
- The service that delivers our transactional email — the note we send back to confirm your reservation, for example. Resend is a US-based provider; we rely on the UK Government’s adequacy decision and Standard Contractual Clauses for the limited data that crosses the Atlantic to send you a reply.
- Google Analytics 4 (when loaded)
- If, and only if, you have consented to analytics cookies, anonymised traffic data is shared with Google to help us understand which pages people read.
- Meta Pixel (when loaded)
- If, and only if, you have consented to advertising cookies, an event ping is sent to Meta so we can measure the reach of the rare advert we run. See our Cookies Notice for details.
International transfers
Your reservation lives in the United Kingdom. The only routine transfer outside the UK is to Resend in the United States, for the purpose of sending you our reply. That transfer is governed by Standard Contractual Clauses approved by the UK Information Commissioner’s Office and by the UK extension to the EU–US Data Privacy Framework.
Your rights under UK GDPR
You have the right to ask us for a copy of the personal data we hold about you, to correct anything that is wrong, to ask us to delete it, to ask us to limit how we use it, to receive it in a portable format, to object to our use of it, and — where we relied on your consent — to withdraw that consent at any time. None of this costs anything; none of it is awkward. To exercise any of these rights, write to hello@aurafine.co.uk and we will respond within one calendar month.
Complaining to the regulator
If you feel we have not handled your data well, you have the right to complain to the UK Information Commissioner’s Office at ico.org.uk. We would always rather hear from you first, but we will not stand in your way.
Changes to this policy
When we change this policy in any meaningful way, we will update the date at the top of the page. Small clarifications may be made silently; substantive changes will not.