Privacy Policy

01What we collect

We only collect what we need to sell and deliver fragrances to you and to look after your account.

• Account details — your name, email address, phone number and a password when you create an account, plus your location if you choose to give it.
• Google Sign-In — if you sign in with Google, we receive your name, email address and profile picture from Google. See “Signing in with Google” below.
• Orders and delivery — your name, phone number, email, delivery address or chosen pick-up point, any note you add for the courier, the items you buy and your order history.
• Saved addresses — addresses you keep in your account for faster checkout.
• Messages — what you send through the contact form (name, email, subject, message) and the feedback page, and anything you tell us by phone or WhatsApp.
• Discount sign-ups — your email address and, optionally, your name when you ask for a discount code.
• Technical information — the standard records any web server keeps to run and secure a site, such as your IP address, browser type and the pages requested.

We do not take card details on this website, and we do not run advertising trackers or third-party analytics.

02How we use it

Under the NDPA we must have a lawful basis for each use. Ours are:

• To fulfil your order — confirming it, arranging payment, delivering or holding it for pick-up, and contacting you about it. (Performance of a contract.)
• To run your account — signing you in, keeping your saved addresses, wishlist and order history. (Performance of a contract.)
• To answer you — replying to enquiries, feedback and complaints. (Legitimate interest in serving our customers.)
• To send discount codes you asked for. (Your consent, which you can withdraw at any time by unsubscribing or emailing us.)
• To keep the site safe and meet our legal duties — preventing fraud and abuse, and keeping the business and tax records Nigerian law requires. (Legal obligation and legitimate interest.)

We do not sell your personal information, and we do not make automated decisions about you that have a legal or similarly significant effect.

03Signing in with Google

Google Sign-In is optional. When you use it, Google sends us a signed token that tells us your name, email address and profile picture. We use these only to create your Auroe account or sign you into it. We may then ask for a phone number, because our couriers need one to deliver.

We never see your Google password, and we do not ask for access to your contacts, calendar, files or any other Google data.

You can remove Auroe’s access at any time from your Google Account under Security → Third-party apps & services. Doing so stops Google Sign-In for Auroe but does not delete your Auroe account or order history — email us if you want those removed too.

Our use of information received from Google follows the Google API Services User Data Policy, including its Limited Use requirements.

04Payments

Placing an order on the site does not take a payment. After you order, our team gets in touch to confirm it and arrange payment through the methods the store offers at the time. Because of this, no card numbers or bank details are collected or stored by this website.

If we introduce online card payments in future, they will be handled by a licensed payment processor under its own privacy terms, and we will update this page before that happens.

05Who we share it with

We share personal information only with the people and services needed to run the store:

• QClose (qclose.io) — the commerce platform that powers our catalogue, accounts and orders. It processes your information on our behalf and under our instructions.
• Delivery partners — your name, phone number and address, so they can bring your order to you.
• Google — only if you choose to sign in with Google, as described above.
• WhatsApp — if you message us on WhatsApp, that conversation is also subject to WhatsApp’s own privacy policy.
• Professional advisers and public authorities — where the law requires it, or to establish or defend legal claims.

We do not share your information with advertising networks or data brokers.

06Cookies and browser storage

We keep this to a minimum:

• One sign-in cookie — set when you log in so you stay signed in. It is marked httpOnly, which means scripts on the page cannot read it, and it expires when your session does.
• Cart and wishlist — stored in your browser’s local storage on your own device, so what you picked is still there when you come back. This never leaves your browser until you check out.

There are no advertising or analytics cookies. You can clear the sign-in cookie by logging out, and clear the cart and wishlist through your browser’s site-data settings.

07How long we keep it

• Account details — for as long as your account is open. Ask us to close it and we will delete the details we are not legally required to keep.
• Orders — for as long as Nigerian tax and accounting rules require business records to be kept, generally six years.
• Messages and feedback — for as long as it takes to resolve the matter and a reasonable period afterwards.
• Discount sign-ups — until you unsubscribe or ask us to remove you.
• Technical logs — for a short period, only for security and troubleshooting.

08Your rights

The NDPA gives you rights over your personal information. You can ask us to:

• Tell you what information we hold about you and give you a copy.
• Correct anything that is wrong or out of date.
• Delete your information, where we have no legal reason to keep it.
• Restrict or object to how we use it, including for direct marketing.
• Send you your information in a portable format.
• Withdraw consent you have given, without affecting what was done before you withdrew it.

To use any of these rights, email [email protected] from the address on your account. We will respond promptly and within the time the law allows, and we may ask you to confirm your identity first. If you are unhappy with our response you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng).

09Security

The site is served over HTTPS, so what you send us is encrypted in transit. Your sign-in is held in a protected cookie rather than in page scripts, and your password is not stored by this website. Access to customer records is limited to the people who need it to serve you.

No method of storage or transmission is completely secure, so we cannot promise absolute security — but we take reasonable steps and will tell you and the authorities as the law requires if a breach affects you.

10Children

Our products and this website are intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.

11Changes to this policy

We will update this page when our practices change and revise the date at the top. If a change is significant we will say so on the site. Continuing to use the site after a change means you accept the updated policy.

12Contact us

Questions, requests or complaints about your personal information:

• Email: [email protected]
• Call or WhatsApp: 0802 288 5350
• Locations: Ikeja and Victoria Island (Lagos), Abuja and Port Harcourt