Last updated: 17 June 2026
Aurum & Relics Ltd respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains what information we collect, why we collect it, how we use it, who we may share it with and the rights available to you under UK data protection law.
Who we are
Aurum & Relics Ltd is the data controller responsible for the personal information collected through this website.
Website: aurumrelics.co.uk
You can contact us through the Contact page on our website regarding any privacy or personal data enquiry.
Information we collect
When you visit our website, create an account, contact us or place an order, we may collect:
- Your name
- Billing and delivery address
- Email address
- Telephone number
- Account username and password information
- Order details and purchase history
- Payment and transaction information
- Messages and enquiries you send to us
- IP address, browser, device and website usage information
- Cookie and consent preferences
We do not normally receive or store your complete payment card number. Payments are processed by authorised payment providers.
How we use your information
We may use your personal information to:
- Process and fulfil your order
- Take and confirm payment
- Deliver your purchase
- Send order, payment and delivery updates
- Manage returns, refunds and customer service requests
- Create and manage customer accounts
- Prevent fraud and protect our website
- Maintain accounting, VAT and tax records
- Improve the operation, security and performance of our website
- Comply with legal and regulatory obligations
- Send marketing communications where you have specifically agreed to receive them
Our lawful bases
We rely on one or more of the following lawful bases:
Contract — where the information is necessary to process an order, take payment, deliver goods or provide customer service.
Legal obligation — where we must keep records or provide information to comply with tax, accounting, consumer protection or other legal requirements.
Legitimate interests — where reasonably necessary to operate and protect our business, prevent fraud, improve our services and respond to enquiries, provided your rights do not override those interests.
Consent — where you have actively agreed to optional marketing, non-essential cookies or another specific use of your information.
You may withdraw consent at any time where consent is the lawful basis.
Payments
Payments may be processed through WooPayments and its payment processing partners.
The payment provider may receive information required to process and protect the transaction, including your name, billing details, contact details, order value, payment method and technical information.
Payment providers process information under their own privacy terms and legal obligations.
Delivery
We share the information needed to deliver your order with Royal Mail and Royal Mail Click & Drop.
This may include:
- Your name
- Delivery address
- Email address
- Telephone number
- Order and parcel information
This information is used to create shipping labels, deliver parcels and provide tracking or delivery notifications.
Website and store services
Our website is operated using WordPress and WooCommerce.
We may use service providers that assist with:
- Website hosting and security
- Store and order management
- Payments
- Delivery and tracking
- Email communications
- Spam prevention
- Technical support
- Website statistics and performance, where enabled
These providers only receive information reasonably required to provide their services and may have their own legal responsibilities as data processors or controllers.
Cookies
Our website uses cookies and similar technologies.
Some cookies are necessary for essential functions such as:
- Keeping items in the shopping basket
- Processing checkout
- Maintaining account sessions
- Remembering privacy preferences
- Protecting the website against fraud and misuse
Optional analytics, advertising or other non-essential cookies will only be used where required consent has been obtained.
You can manage cookies through the cookie controls available on the website and through your browser settings.
How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.
Order, transaction, VAT and accounting records may normally be retained for at least six years where required for legal, tax and business record-keeping purposes.
Account information may be retained while the account remains active.
Enquiries and customer service records may be retained for a reasonable period in case further assistance or a dispute is required.
Information may be kept longer where required by law, legal proceedings, fraud prevention or an official investigation.
International data transfers
Some website, payment or technical service providers may process information outside the United Kingdom.
Where this happens, we require appropriate protections to be used in accordance with UK data protection law, such as an adequacy decision or approved contractual safeguards.
How we protect your information
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, alteration, disclosure or misuse.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
Your rights
Depending on the circumstances, you may have the right to:
- Request access to your personal information
- Ask us to correct inaccurate or incomplete information
- Ask us to delete information
- Ask us to restrict how information is used
- Object to certain processing
- Request transfer of certain information
- Withdraw consent
- Complain about how your information has been handled
Some rights may be limited where we need to retain information to fulfil a contract, comply with the law, resolve a dispute or protect legal rights.
How to contact us
To exercise your rights or ask a privacy question, please contact us through the Contact page and provide enough information for us to identify and respond to your request.
We may need to verify your identity before releasing or changing personal information.
Complaints
Please contact us first so that we can try to resolve your concern.
You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection.
Changes to this policy
We may update this Privacy Policy when our services, legal obligations or data-handling practices change.
The latest version will always be published on this page with the date of the most recent update.