Privacy Policy

Aura Pawtrait makes handcrafted pet portrait jewellery to order. This policy explains what personal data we collect, why, and the choices you have. It applies to https://aurapawtrait.design. You can reach us at any time at support@aurapawtrait.design.

Our registered address is Science Building, Beijing University of Agriculture, Beiqing Road, Changping District, Beijing, China.

When you place a custom order, we collect what is needed to make your piece:

• Your name and email address — to confirm your order and email your design preview;
• Your pet’s photo — the photo you upload is the artwork our artisans sculpt from. It is processed solely to create your order;
• Your engraving text and the product / metal options you choose;
• If you contact us, the contents of that correspondence.
• If you submit a customer review, the name, optional location, star rating and review text you choose to enter (see “Customer reviews” below).

We do not collect or store payment card details on this website. Payment for custom orders is arranged individually by email and is handled outside this site.

If you sign up for any future newsletter, we collect your email address separately, with your consent, and you can unsubscribe at any time.

We process order data to perform the contract with you (Article 6(1)(b) GDPR) — without your name, photo and contact details we simply cannot craft your piece. We process correspondence in our legitimate interest of serving customers (Article 6(1)(f)). Any future marketing email will be sent only with your consent (Article 6(1)(a)) and can be withdrawn with one click.

Your photo is seen only by people directly involved in making your order — our design and artisan team, and the form provider that carries it to us. We never sell your data. We never display or repost your pet’s photo, and we never use it for marketing or gallery content, unless you give us separate, explicit permission (for example, when a customer shares their own finished piece with us).

You can submit a review on our /reviews/new page. When you do, we store the name you enter, your optional location, your star rating, and your review text. We do not ask for your email address, and we do not link a review to your order or identity.

Your review is read by a person before it is published. We only remove spam and abuse — we never edit what you wrote and we do not delete honest negative reviews. Once published, your chosen name, location and review text are visible to everyone who visits the site.

To keep out automated spam we store a salted, irreversible hash of the submitting IP address (never the address itself) and use it only to rate-limit repeated submissions. It is not used to identify you and is not shared.

If you would like a review you submitted to be removed, email us at support@aurapawtrait.design and we will delete it.

If you leave your email address with us — through the enquiry box that appears when you are about to leave, or anywhere else on the site — we store it in a managed PostgreSQL database (Neon) together with the type of piece you are interested in, anything you chose to write, and which page you were on. We use it to reply to your enquiry and to tell you when ordering opens.

Nothing is pre-ticked and we only contact you if you actively ticked the box confirming we may. If you also ticked the optional box for news and offers, you can withdraw that at any time by replying to any message or emailing support@aurapawtrait.design — we will remove you from that list. Withdrawing marketing consent never affects your enquiry.

We do not buy, sell, rent or share your email with anyone. As with reviews, we store only a salted, irreversible hash of the submitting IP address to rate-limit abuse — never the address itself.

• Form provider — our order form runs through a third-party form service (Formspree) that delivers your submission to our inbox. It stores the submission only for that purpose.
• Review database — customer reviews you submit are stored in a managed PostgreSQL database (Neon). Only reviews marked as published are shown on the site.
• Fonts— this site loads its typefaces from Google Fonts. When you visit, your browser requests the fonts from Google’s servers; Google receives your IP address as part of a standard web request.
• Hosting — the website itself is served by our hosting provider (Vercel), who processes standard server logs (IP address, browser type, pages visited) to keep the site secure and working.
• Visitor statistics — we use Vercel Web Analytics to count page views and see which pages people visit and where they arrive from. It sets no cookies, does not fingerprint visitors and does not build a profile of you: the numbers are aggregated and cannot be traced back to an individual.

This website sets no cookies at all — not for tracking, not for advertising, not for analytics. That is why you are not asked to dismiss a cookie banner. If we ever add a tool that does require cookies, this policy will be updated first and your consent will be requested before anything is stored.

Order records (including your photo and engraving) are kept for 24 months after delivery so we can answer after-sales questions and offer faithful remakes of your piece. Financial records are kept as long as tax law requires. After that, your photo is deleted.

Under the GDPR you have the right to access, correct, delete or port your personal data, to restrict or object to our processing, and to withdraw any consent you gave. To use any of these rights, simply write to support@aurapawtrait.design — we respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

If we change how we handle data, we will update this page and revise the date at the top.