AURA CREATORS · YOUR DATA
Privacy Policy
Last updated: 25 October 2026
1. Controller
IQON GROUP ADVISORY LIMITED
Lordou Vyronos 61–63, 6th Floor, Flat/Office 602
6023 Larnaca, Cyprus
Company No. HE 490472
Email: info@auracreaotors.com
2. Website access and hosting
When you access this website, the hosting service processes technical information needed to provide it, including your IP address, access time, requested page, browser and operating system information, referrer and response status. This supports delivery, reliability and security, based on our legitimate interests under Article 6(1)(f) GDPR.
Hosting is provided through DomainFactory and its infrastructure providers. Relevant providers process data to deliver the contracted hosting service. The retention of technical logs is governed by the hosting configuration and operational security requirements.
3. Enquiries
When you submit the contact form, we process your name or studio name, email address, selected setup, creator count, requested features and optional message. We use this information to respond and discuss a possible collaboration, based on Article 6(1)(b) GDPR for pre-contractual steps and Article 6(1)(f) GDPR for other business enquiries.
The form does not accept uploads. Please do not send identity documents, passwords, intimate images or other sensitive information with an initial enquiry. The message is optional; the fields marked as required are necessary to respond to your demo request.
Enquiries are sent to our business mailbox. Microsoft 365 is used for business email. Receipt by the website’s mail server does not itself confirm delivery to the mailbox.
4. Session protection and cookies
The contact form uses a temporary, technically necessary session cookie for request verification and abuse protection. It is marked Secure, HttpOnly and SameSite=Strict. Session data may include a random verification token and the time of the last successful submission. The form also checks a hidden spam field and elapsed time. These measures support secure operation under Article 6(1)(f) GDPR.
Fonts and images are served locally. Social platforms are not embedded as external widgets. English and German pages do not need a language preference cookie. When you follow an external link, that provider’s privacy notice applies.
Google Analytics and your consent
Only after you choose “Allow statistics” in the consent dialog do we load Google Analytics 4, a Google service. We measure page views, confirmed software demo requests. Google processes technical device and connection information and a pseudonymous browser identifier; IP addresses are processed to establish the connection. We pass cleaned page addresses without arbitrary query parameters or fragments, and only the origin domain of a referring page. Names, email addresses, messages, profile links, age declarations and specific appointment details are not passed as Analytics events. Advertising personalisation, Google Signals and automatic form measurement are not used.
Analytics processing is based on your consent under Article 6(1)(a) GDPR. Without consent, we do not load the Google tag or send Analytics measurements or denial pings. Demo requests work independently of your choice. Use “Privacy settings” in the footer at any time to decline or withdraw consent for future measurement. Withdrawal disables measurement and removes the Analytics cookies set by this integration; it does not automatically erase data already lawfully processed.
Your choice is stored in your browser under aura_studio_analytics_consent_v1 for no more than 180 days so we can respect it. Only after consent, _ga and _ga_ZVR05F22MZ cookies are used, with a maximum lifetime of 60 days each time they are set. If you clear browser data or your choice expires, we ask again. If browser storage is blocked, your consent applies only to the current page.
Google may process data in the USA or other countries outside the EEA. The international transfer requirements described in this notice and applicable Google contractual terms apply. See Google’s privacy policy and Google Analytics data practices. Contact us at the address above to exercise your rights.
5. Recipients and international processing
Information is accessed only where necessary by the responsible business team and contracted technical providers. Depending on the service, providers may process data outside the EEA. Applicable safeguards, such as adequacy decisions or standard contractual clauses, are used where required. We do not publish your enquiry.
6. Retention
We retain enquiries for as long as needed to handle them and related follow-up. Where no collaboration follows, our intended retention period is up to six months after the final exchange, unless a longer legal obligation or a need to establish, exercise or defend claims applies. Contract and accounting records may require longer statutory retention.
7. Your rights
Subject to applicable conditions, you may request access, rectification, erasure, restriction and data portability under Articles 15–20 GDPR. You may object to processing based on legitimate interests under Article 21 GDPR. If processing is based on consent, you may withdraw it for the future. Contact us using the email address above.
You also have the right to complain to a competent data protection authority, including the Commissioner for Personal Data Protection in Cyprus or the authority where you live or work.
8. External links
If you follow an external link, the destination provider’s privacy terms apply. No social-platform data is loaded merely because a platform is named on this website.
9. Updates
We may update this notice when the website or its processing changes.
AURA Creators Studio demo requests
The Studio product form processes your name or studio name, email address, creator count, selected setup, requested features and optional message to respond to your request. These details are sent to info@auracreaotors.com through our existing business mail service. A successful response means handoff to the website mail server, not confirmed inbox delivery or a booked demo. A temporary session token, timing check and hidden spam field protect submissions and retries. No form contents are sent to Analytics. Only with statistics consent do we measure product page views, the form start, technical submission errors and confirmed request handoffs by page edition and country. Page edition does not identify your location. Requests work without statistics consent. The enquiry retention and rights described above apply.