Privacy notice
This notice explains what Aura Diamonds does with the details you give us through this website or when you contact us: why we use them, who else handles them, how long we keep them and your rights under UK data protection law. If anything here is unclear, please ask us.
Last updated 3 October 2026
1. Who we are
Aura Diamonds is responsible for the personal details you give us through this website. In data protection law this makes us the controller of those details.
You can contact us about this notice or about your details:
- By email: info@auradiamonds.co.uk
- By phone or WhatsApp: +44 7436 370388
- By post: Aura Diamonds, Castlemead, Lower Castle Street, Bristol BS1 3AG
2. What we collect and why
We only collect the details you choose to give us, and what is needed to run the website safely. You do not have to give us any details, but we need a way to contact you so we can reply.
| Form or situation | What we collect | Why |
|---|---|---|
| Contact form | Your name, email address, phone number if you add one, the subject you choose and your message. | To reply to you. |
| Ring enquiries and viewing requests on our ring pages | Your name, email address or phone number, your message, which ring you asked about and, for a viewing, your preferred day and time. | To reply to you and arrange your viewing. |
| Booking form | The type of appointment, including whether it is in person or by video call, your preferred day and time, your name, email address or phone number, and any notes you add. | To arrange your appointment. |
| Ring builder | Your design choices (shape, setting, metal, band and stone), budget, notes, whether you would like to meet in the showroom or by video call, your preferred day and time, your name, email address and phone number if you add one. If you started from one of our rings, which ring. | To prepare for your design session. |
| The pop-up on your first visit | Your ring idea, if you type one. If you choose WhatsApp, we note that you opened WhatsApp from the pop-up, and your number reaches us only if you send the message. If you choose email, your email address. | To reply with guidance and a quote. |
| Contacting us directly by phone, WhatsApp, email or Instagram | Your name, number or email address and whatever you choose to tell us. | To reply and help with what you asked. |
| Visiting the website | Your internet (IP) address and technical details such as your browser and device, which our host processes as you load pages. We count how often each ring is viewed without storing your IP address. | To deliver the website, keep it secure and stop spam. |
With every form we also record the date and time you sent it, and which page of our website you sent it from.
We do not use your details for marketing, and we do not sell them. We do not make decisions about you by automated means, and we do not build profiles of you for advertising.
3. Our lawful basis
Data protection law only allows us to use your details when we have a lawful basis. Ours are:
- Steps you ask us to take before a possible purchase, such as answering your questions about a ring, preparing a quote or arranging an appointment (UK GDPR Article 6(1)(b)).
- Our legitimate interests in answering enquiries and keeping this website secure and free of spam (Article 6(1)(f)). We only use your details in ways you would reasonably expect.
- Our legal obligations, if you go on to order from us, such as keeping sales records for tax (Article 6(1)(c)).
4. WhatsApp
On the booking page, in the ring builder, when you ask to view a ring and in the first-visit pop-up, WhatsApp opens on your device with your message already filled in. Nothing is sent until you press send in WhatsApp. We also save your request on our website system, so we still have it if the message is not sent.
Once you send a message on WhatsApp, WhatsApp (part of Meta) handles it under its own terms and privacy policy, and the conversation is kept in our WhatsApp account.
Our other forms send your details straight to us and only offer an optional WhatsApp link afterwards. The WhatsApp buttons around the site work the same way: nothing is shared with WhatsApp unless you choose to use them.
5. Who else handles your details
- Aura Diamonds. Your details are seen only by the people who run the business and look after this website.
- Cloudflare hosts this website and stores the details you send through our forms. Like any website host, it processes your IP address and basic technical details as you load pages, and protects the site from attacks.
- Microsoft 365, which we use through GoDaddy, runs our info@auradiamonds.co.uk mailbox. Your emails to us arrive there.
- Resend, an email delivery service. When it is switched on, it forwards each new website enquiry to our mailbox, so it handles the details in that enquiry.
- Google, only if you press Show map on our contact page. The map then loads from Google, which receives your IP address and acts under its own privacy policy. Everything else on this website, including its typefaces, is served from our own site.
- WhatsApp (Meta), only if you choose to use it, as explained in section 4.
- Instagram (Meta), only if you message us there. Instagram handles those messages under its own terms and privacy policy, and the conversation is kept in our Instagram account.
- Professional advisers, such as our accountant or solicitor, where they need it to advise us. Authorities such as HMRC or the police, where the law requires it.
Cloudflare, Microsoft and Resend handle your details on our behalf, as our service providers, under their data processing terms. Links to Instagram, Trustpilot and Google Maps take you to those sites, which have their own privacy policies.
6. Outside the UK
Cloudflare, Microsoft and Resend may process your details outside the UK. Where they do, they rely on safeguards recognised by UK law, such as UK adequacy regulations or approved contract terms. Google, WhatsApp (Meta) and Instagram (Meta) explain their own arrangements in their privacy policies.
7. Keeping the site safe
To stop automated spam we keep a scrambled, one-way version of your internet address for about a day. We never store the address itself. We use the scrambled version only to limit how many forms or sign-in attempts can be sent in a short time, not to identify you, and it is then deleted automatically.
The details you send through our forms are stored with Cloudflare and can be viewed only by us, through a protected admin area.
8. Cookies and storage
We do not use advertising, analytics or tracking cookies, so there is nothing for you to accept.
To make the site work, it keeps a few small notes in your browser, on your own device. We cannot see them, and they are not sent to anyone:
- auraPopup remembers that you closed or answered the pop-up, so it does not appear again.
- aura.builder.v1 keeps your ring builder choices, budget and notes, so you can come back to your design. It never holds your name, email address or phone number. A saved design is brought back for up to 60 days, and pressing Start again in the ring builder clears it.
- For the current visit only, a note of which rings you have viewed, so we count each view once.
If you copy a link to your design, the link holds only your design choices. Cloudflare may set a strictly necessary security cookie to protect the site. If you press Show map on our contact page, Google may set its own cookies.
You can clear these notes at any time in your browser settings. The site still works without them; it just will not remember these choices.
9. How long we keep details
We keep enquiry details for up to 24 months after our last contact with you, unless they become part of an order, when we keep order records for as long as the law requires.
- Messages by WhatsApp, email or phone are kept on the same basis as the enquiry or order they relate to.
- The scrambled internet address used for spam protection is deleted after about a day.
- Notes in your browser stay on your device until you clear them, as described in section 8.
10. Your rights
Under UK data protection law you have the right to:
- access the details we hold about you and receive a copy;
- correct anything that is wrong or incomplete;
- delete your details, where we no longer have a good reason to keep them;
- restrict how we use them, for example while we check a correction;
- object to us using them on the basis of our legitimate interests;
- data portability: receive the details you gave us in a common format, or have them sent to someone else.
To use any of these rights, email info@auradiamonds.co.uk, or contact us by phone, WhatsApp or post using the details in section 1. There is normally no charge. We may need to confirm who you are before we act. We reply within one month, and if a request is complex we will tell you within that month if we need up to two more.
11. Complaints
If you are unhappy with how we have handled your details, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection: ico.org.uk/make-a-complaint, or by phone on 0303 123 1113.
12. Changes to this notice
We will update this notice when we change how we use your details, and show the date of the latest version at the top of this page.
See also our delivery and returns page.
A question about your details?
Email info@auradiamonds.co.uk or message Francesca, and we will help.