Privacy

Last updated: 23 October 2026

The data controller is 嵐珀一人有限公司, trading as AURA BLOOM 嵐珀. This notice explains processing through our shop and customer service with reference to Macau Law No. 8/2005.

1. Data and your choices

We process names, phone numbers, email, delivery region, address or pickup point, purchases, order references, payment proof and messages you choose to send. Required checkout fields support payment checks, order handling, delivery and notifications; without them we may be unable to accept or deliver an order. Notes and unrelated supplementary information are optional.

Keep the amount, date and transaction reference needed for payment checks visible in screenshots; unrelated balances or transactions may be masked. Do not send banking passwords, verification codes or full identity-document copies. When ordering for another person, ensure you may provide their information and inform them of this notice.

2. Purposes and lawful grounds

We use data to enter into and perform orders, verify payment, arrange delivery, send transaction notices, provide support and returns, resolve disputes and meet legal obligations. Processing relies on contractual necessity, legal obligations or another applicable lawful ground. Other uses requiring consent will be separately explained and consent obtained; unrelated marketing is not a condition of ordering. We do not sell or rent your data.

3. Providers and recipients

Necessary recipient details are shared with the relevant courier, such as eBuy or SF Express. Cloudflare hosts the shop and processes order submissions; Resend sends notifications. Orders and payment screenshots are sent to our Gmail mailbox for verification and follow-up. These services transmit or store data; information is not held solely on your device.

Necessary information may also be shared with competent authorities or professional advisers where legally required or needed for lawful claims. If you contact us through WhatsApp, WeChat, Instagram or Facebook, those platforms also process data under their own policies.

4. Browser storage and external connections

The cart uses local browser storage; order references use session storage. Hosting and network services may process IP addresses, requests and security records. Loading external Google Fonts connects to its provider. Social links open the relevant external platform, subject to its privacy policy. Clearing browser storage may remove your cart or order reference.

5. Overseas processing and security

These network, email and platform services may process or store information outside Macau. Transfers must meet applicable legal conditions; any separately required notice or consent will be handled separately. Access is limited to people needing data for the relevant work, with protection proportionate to its nature and risks. Internet transmission is not absolutely secure; avoid posting payment or order details publicly.

6. Retention and deletion

Data is retained only as needed for transactions, after-sales service, disputes and accounting or other legal obligations. Periods vary by purpose and statutory requirements. Data no longer needed should be deleted or anonymised. Deletion requests do not remove duties to retain necessary transaction records or immediately erase independent records lawfully retained by providers.

7. Your rights and requests

You may request access and correction under the law, and deletion or blocking of incomplete, inaccurate or unlawfully processed data, and object where statutory conditions apply. Consent-based processing may be withdrawn without affecting earlier lawful processing or other lawful retention grounds. You may request an end to direct marketing.

Contact aurabloom.mo@gmail.com, WhatsApp +853 6356 9411, or WeChat aurabloommo, explaining your request and identifying the relevant transaction. We may verify identity proportionately; do not send excessive identity documents. You may also contact the Macau Personal Data Protection Bureau.

8. Updates

Updates are dated on this page. Any new purpose requiring a separate notice or consent will be handled separately; changing this notice does not replace those procedures.