Privacy Policy

1. Who we are

Aura Academy operates this website and provides online educational, wellbeing and personal-development resources, including guided practices, free downloadable resources, the Aura quiz and membership content.

For the purposes of UK data protection law, Aura Academy is the data controller for the personal information described in this policy.

2. Information we collect

Depending on how you use the website, we may collect:

• Your name, where you provide it
• Your email address
• Your answers to the Aura quiz
• Your quiz result and the Aura category it places you in
• Your marketing preferences and whether you have given consent
• Information you submit through contact forms
• Information you submit when requesting a free resource
• Information you enter when using the Aura AI chat feature
• Website usage information, cookies and analytics information, where applicable
• Technical information such as IP address, browser and device information and approximate location, where this is collected automatically by the services that run this website

We only collect information that is necessary for the relevant purpose.

3. The Aura quiz

When you complete the Aura quiz and enter your email address, your quiz answers and email address may be processed so that we can:

• Calculate your personalised quiz result
• Send your result to you by email
• Record where your sign-up came from
• Add you to the Aura Academy marketing email list, where you have separately opted in

Entering your email address to receive your quiz result does not automatically mean you have consented to receive marketing emails. You will only receive marketing emails if you have separately ticked the marketing consent option.

4. Free resources

When you request a free Aura Academy resource, such as the 7-Day Mindset Reset, your name (where provided) and email address are processed so that the resource you asked for can be delivered to you.

If you separately opt in to marketing communications, your email address may also be added to the Aura Academy marketing list.

5. Marketing emails

We may send marketing emails to people who have given appropriate consent. Every marketing email includes an unsubscribe option.

You can withdraw your marketing consent at any time, either by using the unsubscribe link in an email or by contacting us using the details in the contact section below. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Aura AI chat

The website may offer an AI-powered chat feature. Information you enter into the chat may be processed in order to generate a response.

The AI chat provides general educational and wellbeing information only. It is not a substitute for medical, psychological, therapeutic, financial or other professional advice. Please do not enter sensitive personal information into the chat.

Where a third-party AI provider is used to power this feature, the provider is Lovable AI Gateway, operated by Lovable. Please refer to Lovable's privacy policy for details of how they handle data processed through their AI services.

7. How we use personal information

• Providing the website and its services
• Delivering resources you have requested
• Sending quiz results you have requested
• Managing email subscriptions and preferences
• Sending marketing communications where you have given consent
• Responding to enquiries and messages
• Improving the website and user experience
• Maintaining the security of the website
• Preventing fraud, abuse or misuse
• Meeting our legal and regulatory obligations

8. Lawful bases for processing

Under the UK GDPR we must have a lawful basis for processing your personal information. Depending on the activity, we may rely on:

• Consent — for example, sending marketing emails and setting non-essential cookies.
• Contract, or steps requested by you before entering into a contract — for example, delivering a resource or membership content you have asked for.
• Legitimate interests — for example, keeping the website secure, preventing misuse, and understanding how the website is used, so long as your rights and interests do not override those interests.
• Legal obligation — for example, where we must keep records for accounting or regulatory reasons.

9. Third-party services

We use trusted third-party providers to help us operate this website and deliver our services. These may include:

• Lovable, which is used to build and run the website
• Email delivery services: Lovable Emails (notify.auraacademy.uk)
• Hosting and infrastructure providers: Lovable Cloud, Cloudflare and Supabase
• Analytics providers: we do not currently use analytics cookies or trackers
• Payment providers: Stan Store, for membership and product purchases
• AI service providers: Lovable AI Gateway
• Other services required to operate the website: Supabase (database, authentication and file storage)

These providers only process personal information in line with our instructions and their own legal obligations.

10. Data retention

We keep personal information only for as long as is reasonably necessary for the purpose it was collected for, including to meet any legal, accounting or regulatory requirements that apply. When information is no longer needed, it is deleted or anonymised.

Specific retention periods:

• Email subscribers and marketing consents: retained until you withdraw consent or unsubscribe, and reviewed at least every three years
• Quiz submissions and free-resource sign-ups: retained for up to three years from the date of submission, or until you ask us to delete your information
• Contact form submissions and enquiries: retained for up to two years
• Aura AI chat messages: not stored persistently beyond the live session unless you choose to share them through another channel

11. Data security

We use reasonable technical and organisational measures designed to protect personal information against loss, misuse and unauthorised access. No website or online service can be guaranteed to be completely secure, so we cannot promise absolute security.

12. International data transfers

Some of the third-party providers we use may process personal information outside the UK. Where that happens, we will take steps to ensure appropriate safeguards required under applicable UK data protection law are in place, such as UK adequacy regulations or the International Data Transfer Agreement or Addendum.

Confirmed transfer arrangements: Lovable, Cloudflare and Supabase may process data in the United States, the European Union and other locations where they operate. We rely on the provider's standard contractual clauses, UK International Data Transfer Addendum, or UK adequacy regulations (as applicable) to protect these transfers.

13. Your rights

Under UK data protection law you may have the right to:

• Be informed about how your personal information is used
• Access the personal information we hold about you
• Have inaccurate information corrected
• Ask for your information to be erased
• Ask us to restrict how we process your information
• Ask for your information to be transferred to you or another provider
• Object to certain processing, including direct marketing
• Rights relating to automated decision-making and profiling, where this applies
• Withdraw your consent where our processing is based on consent

Some of these rights are subject to legal exceptions and do not apply in every situation. To exercise a right, please use the contact details below.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk.

14. Cookies

This website uses only essential cookies and similar technologies needed for the website to function. We do not currently use analytics, advertising or other non-essential cookies. If we add non-essential cookies in future, we will ask for your consent in line with UK cookie requirements.

15. Children's privacy

Aura Academy is not specifically directed at children. We do not knowingly collect personal information from children in circumstances where parental or other consent is legally required. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The most current version will always be published on this page, with the date it was last updated shown at the top.

17. Contact us

For any privacy questions or to exercise your rights, please contact:

• Privacy enquiries email: auraacademy7878@gmail.com

You can also reach us through our contact page.