سياسة الخصوصية
Last updated: 26 August 2026
This Privacy Policy describes how Aaria London ("we", "us", "our") collects, uses, and discloses your personal information when you visit, interact with, or make a purchase from www.aarialondon.com (the "Site").
Aaria London is the data controller for the personal information described in this policy. You can contact us at info@aarialondon.com or by post at 160 City Road, London EC1V 2NX, United Kingdom.
1. Information We Collect
Device and usage information
What we collect: browser type and version, IP address, time zone, cookie and pixel identifiers, pages and products viewed, search terms, referring website, and how you interact with the Site.
Why: to load the Site correctly, to keep it secure, to understand how it is used so we can improve it, and (where you have consented) to measure and target our advertising.
How: collected automatically through cookies, log files, web beacons, tags, and pixels, including the Meta Pixel, Google Analytics, and Klaviyo's on-site tracking.
Shared with: Shopify, Meta Platforms, Google, and Klaviyo, as described in Section 3.
Order information
What we collect: name, billing address, shipping address, email address, phone number, and payment information (card details are processed directly by our payment providers and are not stored by us).
Why: to fulfil our contract with you, process your payment, arrange shipping, provide invoices and order confirmations, communicate with you about your order, screen orders for fraud, and, where you have opted in, send you marketing.
How: collected from you at checkout.
Shared with: Shopify, Shopify Payments, PayPal, Klaviyo, our shipping carriers, and Meta and Google for advertising measurement where you have consented. See Section 3.
Customer support information
What we collect: your name, contact details, order references, and the content of your messages to us, including any photographs or attachments you send.
Why: to respond to your enquiries, handle returns, exchanges, warranty claims, and complaints, and to keep a record of the outcome.
How: collected from you by email, contact form, or social media message.
Marketing information
What we collect: your email address, phone number where provided, marketing preferences, and your engagement with our emails and SMS messages (opens, clicks, and subscription status).
Why: to send you newsletters, product launches, and offers where you have subscribed, and to measure whether those messages are useful.
How: collected from you when you subscribe, and from your interactions with our messages.
Shared with: Klaviyo, and (where you have consented) Meta and Google for audience matching.
2. Children
The Site is not intended for individuals under the age of 16, and we do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at the address above and we will delete it.
3. How We Share Your Personal Information
We share your personal information with the following categories of recipients, who act as our processors or as independent controllers as noted.
Shopify hosts our online store and processes orders, customer accounts, and analytics on our behalf. Shopify's privacy policy: https://www.shopify.com/legal/privacy
Shopify Payments and PayPal process payments. Payment card details are handled directly by these providers under their own privacy terms. PayPal's privacy policy: https://www.paypal.com/uk/legalhub/privacy-full
Klaviyo provides our email and SMS marketing platform and stores subscriber profiles and engagement data. Klaviyo's privacy policy: https://www.klaviyo.com/legal/privacy-notice
Meta Platforms (Facebook and Instagram) receives information about your activity on the Site, including pages viewed, products added to cart, and purchases completed. This is collected both through the Meta Pixel in your browser and through Meta's Conversions API, which sends event data from our server directly to Meta. Where the Conversions API is used, we may share a hashed (irreversible, encrypted) version of your email address, phone number, name, city, and country so that Meta can match the event to an account. We only do this where you have given consent to marketing cookies and tracking. Meta acts as an independent controller in respect of this data. Meta's privacy policy: https://www.facebook.com/privacy/policy
Google (Google Analytics and Google Ads) helps us understand how visitors use the Site and measure our advertising. Google's privacy policy: https://policies.google.com/privacy
Shipping and fulfilment partners, including Royal Mail and our international couriers, receive your name, delivery address, and contact details so that your order can be delivered and tracked. Some orders are dispatched from a fulfilment facility in the Netherlands, and your delivery details are shared with that facility for this purpose. Aaria London remains the data controller for all orders.
We may also disclose your personal information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request, to protect our legal rights, or in connection with a merger, acquisition, or sale of business assets.
We do not sell your personal information for money.
4. Behavioural Advertising
We use your personal information to show you advertising and marketing that we believe may be of interest to you. This includes retargeting you on Facebook and Instagram, building lookalike audiences based on our existing customers, and measuring how well our campaigns perform.
To do this, we share information about your use of the Site, your purchases, and your interaction with our advertising with Meta and Google, both directly from our server and through cookies and similar technologies in your browser. Where required by law, we do this only after you have given consent through our cookie banner.
You can opt out of this at any time by:
- Adjusting your cookie preferences on the Site through the cookie banner or preferences link in our footer
- Meta: https://www.facebook.com/settings/?tab=ads
- Google: https://adssettings.google.com
- Google Analytics browser opt-out: https://tools.google.com/dlpage/gaoptout
- The Digital Advertising Alliance opt-out portal: http://optout.aboutads.info
- The Network Advertising Initiative's educational and opt-out page: http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work
Please note that opting out will not stop you seeing our ads. It means the ads you see will be less relevant to you.
5. Lawful Basis for Processing (UK GDPR and EU GDPR)
If you are in the United Kingdom or the European Economic Area, we process your personal information on the following lawful bases:
Performance of a contract: to process and deliver your order, handle returns and exchanges, and provide customer support.
Consent: to send you marketing emails and SMS messages, and to place non-essential cookies and tracking technologies (including the Meta Pixel, Conversions API, Google Analytics, and Klaviyo tracking) on your device. You may withdraw your consent at any time by using the unsubscribe link in our messages or by updating your cookie preferences.
Legitimate interests: to secure the Site, prevent fraud, understand how our Site is used, improve our products and service, and defend our legal rights. We have assessed that these interests do not override your fundamental rights and freedoms.
Legal obligation: to retain transaction and tax records and to comply with consumer protection law.
6. International Transfers
Your personal information is processed within the United Kingdom and the European Economic Area, and is also transferred outside these regions for storage and further processing, including to Canada and the United States, by providers such as Shopify, Klaviyo, Meta, and Google.
Where we transfer personal information outside the UK or EEA, we rely on adequacy decisions issued by the UK Government or the European Commission, or on the UK International Data Transfer Addendum and the European Commission's Standard Contractual Clauses, together with any additional safeguards required. For more information on how Shopify handles data transfers, see: https://help.shopify.com/en/manual/your-account/privacy/GDPR
7. Retention
We retain your order information for as long as necessary to fulfil your order and then for a further six years, to meet our UK tax, accounting, and consumer protection obligations.
We retain marketing subscriber data until you unsubscribe, and for a short period afterwards to ensure we honour your opt-out.
We retain customer support correspondence for up to three years after your enquiry is resolved.
You can ask us to erase your information sooner. Please see Section 9.
8. Automated Decision-Making
If you are in the UK or the EEA, you have the right to object to processing based solely on automated decision-making, including profiling, where that decision has a legal effect on you or otherwise significantly affects you.
We do not engage in fully automated decision-making that has a legal or similarly significant effect on you.
Our processor Shopify uses limited automated decision-making to prevent fraud, which does not have a legal or similarly significant effect on you. This includes:
- A temporary denylist of IP addresses associated with repeated failed transactions, which lasts a small number of hours
- A temporary denylist of payment cards associated with denylisted IP addresses, which lasts a small number of days
9. Your Rights
If you are in the UK or the EEA, you have the right to:
- Access the personal information we hold about you
- Have inaccurate information corrected
- Have your information erased
- Restrict or object to how we process your information
- Receive your information in a portable format
- Withdraw consent at any time, where we rely on consent
- Object to direct marketing at any time
To exercise any of these rights, please email us at info@aarialondon.com. We will respond within one month. We may ask you to verify your identity before we act on your request.
If you are a resident of California, you have the right to know what personal information we hold about you, to request that it be corrected or deleted, and to port it to another service. You may designate an authorised agent to make a request on your behalf. Please contact us at the address above.
10. Cookies
A cookie is a small file placed on your device when you visit our Site. We use essential cookies, which are required for the Site to work, and non-essential cookies for analytics, advertising, and personalisation, which are only set where you have consented.
You can change your preferences at any time using the cookie preferences link in our footer.
Cookies necessary for the functioning of the store
| Name | Function |
|---|---|
_ab |
Used in connection with access to admin |
_secure_session_id |
Used in connection with navigation through a storefront |
cart, cart_sig, cart_ts
|
Used in connection with the shopping cart and checkout |
checkout_token |
Used in connection with checkout |
secret |
Used in connection with checkout |
secure_customer_sig |
Used in connection with customer login |
storefront_digest |
Used in connection with customer login |
_shopify_u |
Used to facilitate updating customer account information |
_tracking_consent |
Stores your tracking and cookie preferences |
Reporting and analytics
| Name | Function |
|---|---|
_landing_page |
Tracks landing pages |
_orig_referrer |
Tracks landing pages |
_s, _shopify_s
|
Shopify analytics |
_shopify_sa_p, _shopify_sa_t
|
Shopify analytics relating to marketing and referrals |
_shopify_y, _y
|
Shopify analytics |
_ga, _gid, _gat
|
Google Analytics, used to distinguish users and limit request rates |
Advertising and marketing
| Name | Function |
|---|---|
_fbp |
Meta Pixel, used to identify browsers for advertising and analytics |
_fbc |
Meta Pixel, stores the click identifier when you arrive from a Meta ad |
__kla_id |
Klaviyo, identifies subscribers and tracks on-site activity for email marketing |
How long a cookie stays on your device depends on whether it is a session cookie or a persistent cookie. Session cookies last until you stop browsing. Persistent cookies last until they expire or you delete them, typically between 30 minutes and two years.
Most browsers accept cookies automatically, but you can block or delete them through your browser settings. Blocking cookies may affect how parts of the Site work. Guidance is available at www.allaboutcookies.org.
Please note that blocking cookies in your browser may not stop all sharing with our advertising partners, because some data is sent from our server. To stop that, please use the cookie preferences link on our Site or the opt-out routes in Section 4.
11. Do Not Track
Because there is no consistent industry standard for how to respond to "Do Not Track" browser signals, we do not currently alter our data collection practices when we receive one. You can control tracking through our cookie preferences instead.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons. The date at the top of this page shows when it was last revised.
13. Contact and Complaints
For any questions about this policy, to exercise your rights, or to make a complaint, please contact us:
Email: info@aarialondon.com
Post: Aaria London, 160 City Road, London EC1V 2NX, United Kingdom
If you are not satisfied with our response, you have the right to complain to a data protection authority.
United Kingdom: Information Commissioner's Office, https://ico.org.uk/make-a-complaint/
European Economic Area: you may complain to the supervisory authority in your country of residence. A list is available at https://www.edpb.europa.eu/about-edpb/about-edpb/members_en