We consider the privacy of our visitors and clients to be crucial to our relationship with you. To provide transparency and accountability, this page sets out how we handle any data we may collect through the use of our website, how or what we may use it for, and the circumstances under which this may be shared.
Who we are
Our website address is: https://auroraarttherapies.com.
User entered data
When visitors leave comments on the site or use any contact forms, we collect the data shown in the comments or contact form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies
“First Party Cookies”
First Party cookies are cookies which relate only to this website. These cookies are limited to interacting with this sites domain name and not third parties. As such, data stored in these cookies are not shared with anyone else, they are only used for interacting with this site.
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
“Third-party cookies”
Third party cookies are cookies created by other websites which pass data to the cookie creator, often for analytics purposes. These analytics cookies can be used to track your internet usage, and in some cases may also contain personal information which can be used to target advertising to you (for example, Google). As we hold our clients privacy at the forefront of our operations, we do not make use of third party cookies. We do not provide access to our site to external services, and do not use any third-party cookies.
Embedded content from other websites
Articles linked from this site to other sites on the internet may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies (“third party cookies”), embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Where we provide links to outside content, we will endeavour to identify that the link will take you to a third party website. These will always open in a new browser tab or window. We have no way to prevent the external site from knowing you arrived from the Aurora Therapies website, however we will not transfer any information on your use of this site to the third party. Cookies set by these external websites may log that you arrived from Aurora, but no details of your use of the Aurora site will be available to these providers.
Who we share your data with
If you request a password reset, your IP address will be included in the reset email. Whilst we maintain high standards of security and “in transit” encryption for our inbound messaging, we do not control the security policies for external e-mail providers. As such, it is possible for your e-mail provider to view any messages you recieve. We will always attempt to deliver e-mail messages over an “end-to-end” encrypted connection (SMTP/TLS, or SMTPS if SMTP/TLS is unavailable) to ensure that the contents of any e-mail cannot be viewed, however this may not be possible if your e-mail provider does not accept e-mail over an encrypted connection (SMTP only).
In limited circumstances, we may be compelled to provide any data we hold about you to law enforcement or governmental authorities. Any information we provide will be wiothin the limits of the General Data Protection Regulations (GDPR) / the Data Protection Act 2018, the Regulation of Investigatory Powers Act 2000, and the Investigatory Powers Act 2016.
In very specific circumstances, we may have an obligation to pass on data to relevant authorities should we feel that there is an imminent danger of harm to yourself or others based on information you divulge. This is known as Mandatory Reporting responsibility, and forms an integral part of our duty of care.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where your data is sent
Visitor comments may be checked through an automated spam detection service.
Policy Version: Changelog
This is Version 1 of our privacy policy, created on 31 August 2024.
- Version 1: Initial Creation.