Privacy Policy

Last updated: 25 July 2026

This Privacy Policy explains how Auréa Gifts LLP collects, uses, shares and protects your personal data when you use the Auréa mobile app and aureagifts.com, and the choices you have.

1. Who we are

Auréa Gifts LLP (“Auréa”, “we”, “us”) is the data fiduciary for personal data collected through the Auréa app and aureagifts.com. This policy explains what we collect, why, who we share it with and your choices. We follow India’s Digital Personal Data Protection (DPDP) Act, 2023, and apply similar principles for users elsewhere.

2. Information we collect

Information you give us: your name, mobile number, email, date of birth, city, interests and occasion preferences, billing/delivery details, a gift recipient’s name and mobile number, reviews and support messages. Transaction data: the experiences you buy, gift, book and redeem, and payment references (we do not store full card/UPI/bank details). Automatic data: device model, OS, app version, language, approximate location from your IP address, and usage/diagnostic data. From partners: your booking and redemption status.

3. Device permissions

We ask for permissions only when needed, and you can decline or change them in your device settings. Camera — used by partners to scan a voucher’s QR code at the venue. Contacts — optional, only so you can pick a gift recipient’s number; contacts are not uploaded in bulk. Photos/Media — to upload images (used by partners/admins for listings and campaigns). Approximate location — we infer your city from your IP to show nearby experiences; we do not track precise GPS location. Notifications — for order, booking and voucher updates.

4. How we use your information

To create and secure your account; process orders and payments; deliver, gift, book and validate vouchers; send OTPs and transactional updates; provide support; personalise recommendations and city-first content; run and measure marketing you are eligible for; prevent fraud and abuse; and meet legal obligations. We do not sell your personal data.

5. WhatsApp & SMS messages

By providing your mobile number you agree to receive service messages — login OTPs, voucher and booking confirmations, and gift notifications — by SMS (via MSG91) and/or WhatsApp (via the WhatsApp Business Platform from Meta). We may also send offers you are eligible for; you can opt out of marketing at any time (e.g. reply STOP or contact us) while still receiving essential transactional messages.

6. Payments

Payments are processed by Razorpay, our payment gateway, under its own privacy policy. Auréa receives only a transaction reference and status — not your full card, UPI or bank credentials.

7. Sharing & third parties

We share data only as needed: with experience partners to fulfil and validate your booking; with service providers — Razorpay (payments), MSG91 (SMS), Meta/WhatsApp Business (messaging), and our hosting and IT providers, all bound to protect your data; and with authorities where required by law or to protect rights and safety. We do not sell or rent your data or share it for third-party advertising.

8. Retention & security

We keep personal data only as long as needed to provide the service, honour valid vouchers, meet legal/tax obligations and resolve disputes, then delete or anonymise it. We protect data with encryption in transit, access controls and reputable providers. No system is perfectly secure, but we will notify you and the authorities of a significant breach as required by law.

9. Your rights

Subject to law, you may access and correct your data, withdraw consent, request deletion, ask how your data is processed, and nominate someone to act for you. To exercise these rights, contact our Grievance Officer below. You may also complain to the Data Protection Board of India.

10. Deleting your account & data

You can request deletion of your account and personal data using our account deletion form, or by emailing support@aureagifts.com from your registered address. We verify your identity and delete your data within 30 days, except records we must keep by law (e.g. transaction records for tax) or to resolve disputes.

11. Children

Auréa is intended for users aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has given us data, contact us and we will delete it.

12. Cookies & analytics

Our website uses cookies for sign-in, functionality, analytics and personalisation, which you can manage in your browser. The app uses limited on-device storage and diagnostic data to keep you signed in and improve reliability.

13. Changes & contact

We may update this policy; material changes will be notified in the app or by other reasonable means and the “last updated” date will change. Grievance Officer: Surojit Ghosh, Auréa Gifts LLP · support@aureagifts.com. We aim to respond within the timelines required by the DPDP Act.