GDPR Notice
Last updated: 2 November 2026
Who this is for
This notice is for people in the European Union, the European Economic Area and the United Kingdom. It adds to our Privacy Policy. "GDPR" here means the EU General Data Protection Regulation and the UK GDPR.
Who is responsible for your data
Earth Rain Media LLC, trading as Aurum Aurora, is the controller of your personal data. Our address is 10440 Paramount Blvd, E247, Downey, CA 90241, USA. Write to [email protected] about any data protection matter.
Our legal bases
| What we do with your data | Legal basis |
|---|---|
| Taking your order, delivering your purchase, handling order problems | Contract |
| Answering your questions and giving support | Contract, or legitimate interests where you are not a customer |
| Sending marketing email and text messages | Consent |
| Measuring SMS and email engagement | Legitimate interests in knowing that messages arrive and honoring opt-outs |
| Keeping order and tax records | Legitimate interests in meeting our legal and tax duties |
| Using AI agents in support and messaging | Legitimate interests in answering people quickly |
| Running and securing the website, including loading fonts and scripts | Legitimate interests in a working, secure website |
Where we rely on consent, you can withdraw it at any time. Reply STOP to a text message, or write to [email protected]. Withdrawing does not affect what we did before.
Your rights
You have the right to:
- get a copy of your personal data
- have wrong data corrected
- have your data erased
- restrict how we use your data
- receive your data in a portable format
- object to our use of your data based on legitimate interests
- object to direct marketing at any time
- not be subject to a decision based only on automated processing that has a legal or similarly significant effect on you
To use a right, write to [email protected]. We respond within one month.
Complaints
You can complain to a supervisory authority. In the UK this is the Information Commissioner's Office (ICO). In the EU, it is the data protection authority in the country where you live or work, or where you believe the problem happened.
International transfers
We are based in the United States, and our providers process data there. When you buy from us or write to us, your data goes to the United States. US law may give your data less protection than the law where you live. To ask how a transfer is handled, write to [email protected].
How long we keep data
We keep personal data for as long as we need it to deliver your purchases, meet our legal and tax duties and handle support. After that we delete it.
Do you have to give us your data?
We need your name, email and order details to fill an order. Text messages and marketing email are your choice.