Privacy policy

Privacy Policy

Last updated: October 29, 2026

This Privacy Policy explains how Mushroom by Aurora ("AURORA", "we", "us", "our") collects, uses and shares your personal information when you visit createaurora.com, make a purchase or contact us. We keep it simple: we only use your information to run our store, deliver your order and, if you agree, tell you about new products and offers.

1. WHO WE ARE
Mushroom by Aurora is an online store based in Spain. We are responsible for your personal information (the "data controller").
Contact: createaurora.shop@gmail.com

2. INFORMATION WE COLLECT
- Contact and order details: name, email, phone number, shipping and billing address, and the products you buy.
- Payment information: processed securely by Shopify and its payment partners. We never see or store your full card number.
- Communications: messages you send us, such as support emails or return requests.
- Device and usage information: IP address, browser, device type, pages you visit and how you interact with our store, collected through cookies and similar technologies.
- Marketing preferences: whether you subscribed to our emails.

3. HOW WE USE YOUR INFORMATION
- To process, ship and track your order, and handle returns and refunds (necessary to fulfill our contract with you).
- To answer your questions and provide customer support (contract / legitimate interest).
- To prevent fraud and keep our store secure (legitimate interest and legal obligation).
- To improve our website and understand how it is used (legitimate interest or consent, where required).
- To send you marketing emails, only if you subscribed. You can unsubscribe at any time (consent).
- To show you relevant ads on platforms such as Meta (Facebook and Instagram), based on your visits to our store, where permitted by law and, where required, with your consent.
- To comply with legal, tax and accounting obligations.

4. WHO WE SHARE YOUR INFORMATION WITH
We do not sell your personal information for money. We share it only with service providers that help us run our store:
- Shopify: our e-commerce platform, which hosts our store and processes payments.
- Payment providers: to process your payment securely.
- Our fulfillment partner and its suppliers: to prepare and ship your order (they receive your name, shipping address, phone number and the products ordered).
- Shipping carriers: to deliver your order and provide tracking.
- Advertising and analytics partners, such as Meta and Google: to measure and improve our ads.
- Authorities: when required by law.

5. INTERNATIONAL TRANSFERS
Our service providers may process your information outside your country, including in the United States, the European Union and the country where your order is shipped from. When information from the European Economic Area is transferred, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

6. COOKIES
We use cookies to keep the store working (for example, your cart), to understand how visitors use our site and to measure our ads. You can manage cookies through the cookie banner, where shown, and in your browser settings.

7. HOW LONG WE KEEP YOUR INFORMATION
We keep your order information for as long as needed to provide our services and to meet legal, tax and accounting requirements (usually up to 6 years). Marketing data is kept until you unsubscribe.

8. YOUR RIGHTS
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate information.
- Delete your information.
- Object to or restrict certain uses, including direct marketing.
- Receive a copy of your information (data portability).
- Withdraw your consent at any time.
- Opt out of the "sale" or "sharing" of personal information for targeted advertising (U.S. state privacy laws). You can do this on our "Your Privacy Choices" page or by using the Global Privacy Control signal in your browser.
To exercise any of these rights, email us at createaurora.shop@gmail.com. We will reply within the time required by law and will never discriminate against you for exercising your rights.
If you are in the European Union and are not satisfied with our answer, you can file a complaint with your local data protection authority (in Spain, the Agencia Española de Protección de Datos, www.aepd.es).

9. CHILDREN
Our store is not intended for children under 16, and we do not knowingly collect their personal information.

10. SECURITY
We use trusted providers and reasonable measures to protect your information. However, no method of transmission or storage is 100% secure.

11. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. The latest version will always be on this page, with the date it was last updated.

12. CONTACT US
Questions about your privacy? Email us at createaurora.shop@gmail.com.