Legal

Privacy Policy

Last updated: 30 August 2026

This policy explains what personal information Aura Technologies collects when you use our website, live chat and client portal, how we use it, and the choices and rights you have.

This is a plain-English summary written for a small business and should be reviewed by a qualified professional before you rely on it — particularly for GDPR (EU/UK) and Australian Privacy Act obligations. Items in highlighted mono are placeholders for you to complete.

1. Who we are

Aura Technologies (“we”, “us”, “our”) provides managed technical and product support and IT consulting to small and medium businesses. For the purposes of data protection law, the data controller is [registered legal entity / trading name], [registered address].

If you have any questions about this policy or your data, contact us at [email protected].

2. Information we collect

Information you give us

Contact / enquiry form: your name, company, email address and the contents of your message.
Live chat: your name, email (if provided) and the messages you send us through the chat widget.
Client portal account: if you are a customer, your login email and account details, plus the billing, systems, tickets and usage data associated with your account.

Information collected automatically

Technical & usage data: IP address, browser type, device and operating system, pages viewed and referring URLs, collected by our hosting and chat providers to keep the service secure and working.
Preferences: a small amount of data stored in your browser (e.g. your light/dark theme choice) using local storage.

3. How we use your information

To respond to your enquiries and provide the support and services you request.
To operate, secure and improve our website and client portal.
To manage customer accounts, billing and service delivery.
To send you service-related communications (we do not send marketing without your consent).
To meet legal, tax and regulatory obligations.

Where the law requires a legal basis (EU/UK), we rely on your consent (e.g. chat and enquiries), performance of a contract (providing support to customers), our legitimate interests (running and securing the site), and legal obligation where applicable.

4. Cookies & similar technologies

We keep tracking to a minimum. We do not use advertising cookies or sell your data. The technologies in use are:

Essential local storage — remembers your theme preference. This never leaves your browser.
Live chat (Tawk.to) — sets cookies needed to run the chat conversation and remember you between messages.

You can block or delete cookies in your browser settings; if you do, the live chat may not work correctly.

5. Third parties who process data for us

We use a small number of trusted providers to run the service. Each only processes data as needed to provide their function:

Provider	Purpose	Data involved
Cloudflare	Website hosting & security	Technical/usage data, IP address
Tawk.to	Live chat widget	Name, email, chat messages, technical data
Formspree	Delivering contact-form submissions to us	Name, company, email, message
Supabase	Client portal database & login	Account, billing and service data

We do not sell your personal information to anyone.

6. International transfers

Some of our providers process data outside your country (for example in the United States or the EU). Where personal data is transferred internationally, we rely on the providers’ safeguards (such as Standard Contractual Clauses) to protect it.

7. How long we keep it

We keep enquiry and chat records only as long as needed to deal with your request and for a reasonable period afterwards. Customer account data is kept for the life of the account and as required for legal and tax purposes, then deleted or anonymised.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent at any time. To exercise any of these, email [email protected] and we will respond within the timeframe required by law.

EU/UK residents may also complain to their local data protection authority; Australian residents may contact the Office of the Australian Information Commissioner (OAIC).

9. Security

We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls and row-level security in the client portal so each customer can only see their own data. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

10. Children

Our services are intended for businesses and are not directed at children under 16. We do not knowingly collect data from children.

11. Changes to this policy

We may update this policy from time to time. When we do, we will change the “Last updated” date above, and significant changes will be highlighted on this page.

12. Contact

Questions about this policy or your data? Email [email protected].