Aurex Gold BV (“Aurex Gold”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit or make a purchase from our webshop.
This policy is designed to comply with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).
2. Scope
This Privacy Policy applies to:
- Our webshop and website
- Customer accounts
- Orders and transactions
- Communications via email or contact forms
It does not cover third-party websites linked from our platform.
3. Personal Data We Collect
We collect and process personal data relevant to operating a professional precious metals webshop. This includes:
3.1 Identity & Contact Data
- Full name
- Billing and shipping address
- Email address
- Phone number
3.2 Order & Transaction Data
- Order details
- Payment confirmations
- Purchase history
- Delivery instructions
3.3 Financial Data
- Payment details processed through secure third-party providers
- Transaction IDs and payment references
(Note: We do not store full card details on our systems.)
3.4 Technical & Usage Data
- IP address
- Browser type and device information
- Website usage and navigation patterns
3.5 Marketing & Communication Data
- Newsletter preferences
- Communication history
E-commerce platforms process a wide range of data such as identity, payment, shipping, and behavioural information, all of which must be clearly disclosed and justified.
4. How We Collect Data
We collect data when you:
- Place an order
- Create an account
- Contact us via email or forms
- Subscribe to communications
- Use our website (via cookies and tracking tools)
5. Legal Basis for Processing
We process personal data only where legally permitted under GDPR:
- Contractual necessity – to process orders, payments, and deliveries
- Legal compliance – tax, accounting, and regulatory obligations
- Legitimate interest – fraud prevention, security, and business operations
- Consent – marketing communications and non-essential cookies
GDPR requires a clear legal basis for each data processing activity. [termly.io]
6. Purpose of Data Processing
We use your data solely for:
- Order fulfilment and delivery
- Payment processing
- Customer support
- Compliance with legal obligations
- Fraud prevention and security
- Improving our webshop and services
- Marketing communications (if consented)
7. Data Sharing
We only share personal data where necessary:
- Payment providers (e.g. Stripe, banks)
- Logistics and shipping providers
- IT and hosting providers
- Accounting and compliance services
All third parties are required to process data securely and in accordance with GDPR.
8. International Data Transfers
Where data is transferred outside the European Economic Area (EEA), we ensure:
- Use of approved safeguards (e.g. Standard Contractual Clauses)
- Secure processing by trusted providers
9. Data Retention
We retain personal data only as long as necessary:
- Order and financial data: in line with legal obligations (e.g. accounting requirements)
- Customer account data: until account deletion
- Marketing data: until consent is withdrawn
GDPR requires clear retention periods or defined criteria.
10. Your Rights Under GDPR
You have the following rights:
- Right to access your data
- Right to rectification
- Right to erasure (“right to be forgotten”)
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent at any time
You may exercise these rights by contacting us directly.
11. Cookies & Tracking
Our webshop uses cookies and similar technologies to:
- Enable core website functionality
- Analyse website performance
- Improve user experience
Non-essential cookies are only used with your consent.
You can manage cookie preferences via your browser settings.
12. Data Security
We implement appropriate technical and organisational measures to protect your data, including:
- Secure servers and encryption
- Restricted access to sensitive data
- Monitoring for unauthorised activity
13. Data Breaches
In the event of a data breach, we will:
- Assess and contain the incident
- Notify relevant authorities where required
- Inform affected users if there is a risk to their rights
14. Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be published on our website with a revised effective date.
15. Contact
For any privacy-related questions or requests:
Email: info@aurexgold.eu
If you are not satisfied, you have the right to lodge a complaint with your local data protection authority.
