Privacy Policy

Last updated: November 10, 2026

At Aurone, a web agency specializing in website design, search engine optimization (SEO), Google Ads, website maintenance and web security, protecting your personal data is a priority. This privacy policy explains, simply and transparently, what data we collect on www.aurone.com, why we use it, how long we keep it and how to exercise your rights.

It applies to all visitors, prospects and clients of the website, wherever you are located. We wrote it in accordance with the EU General Data Protection Regulation (GDPR), the UK General Data Protection Regulation (UK GDPR) and the UK Data Protection Act 2018 as amended by the Data (Use and Access) Act 2025, the Swiss Federal Act on Data Protection (nFADP), Quebec’s Law 25 and Tunisian Organic Law No. 2004-63 on the protection of personal data. Residents of the United States will find specific information in section 10.

1. Who is responsible for processing your data?

The data controller is Aurone Sarl, registered with the Tunisian National Business Register (RNE) under number 1011623V, with its registered office at 27 Avenue Taieb Mhiri, Immeuble Yasmina, 2080 Ariana, Tunisia.

For any question about your personal data, you can write to us at [email protected].

2. What data do we collect?

We only collect the data needed for the services you request:

Contact and quote request forms: last name, first name, email address, phone number, company, website, country and the content of your message.
Shop orders and customer account: identity, billing details, order history and login credentials. Payments are processed by a secure payment provider: we never receive or store your credit card numbers.
Live chat: the information you choose to share during a conversation with our team.
Browsing data: IP address, browser and device type, pages viewed, traffic source and interactions with the website, collected through cookies and trackers (see section 7).
Client relationship: correspondence, proposals, contracts and invoices related to your project.

3. Why do we use your data?

Purpose	Legal basis
Answering your contact and quote requests	Pre-contractual steps taken at your request
Delivering our services (website design, SEO, Google Ads, maintenance, security) and managing the client relationship	Performance of a contract
Processing orders, invoicing and accounting	Performance of a contract and legal obligations
Sending you information about our services (B2B marketing)	Legitimate interest, with the right to object at any time
Measuring traffic and improving the website	Legitimate interest, with the right to object at any time (see section 7)
Securing the website and preventing spam and fraud	Legitimate interest

Your data is never sold or rented to third parties.

4. Who has access to your data?

Your data is only accessible to authorized members of the Aurone team and, strictly within the limits of their tasks, to our technical service providers:

Google (Google Analytics, Google Tag Manager, reCAPTCHA): traffic measurement and protection of forms against spam;
Crisp: live chat;
Pipedrive: customer relationship management (CRM);
Trustindex: display of client reviews;
Cloudflare: security, protection against attacks and website performance;
our hosting provider (see our legal notice).

These providers are contractually required to guarantee the security and confidentiality of your data. We may also disclose your data to the competent authorities where required by law.

5. Is your data transferred outside your country?

Aurone is an agency based in Tunisia that works with clients in several countries. Your data may therefore be processed in Tunisia by our team, and in the United States or other countries by some of our service providers.

For every transfer outside the European Economic Area or Switzerland, we rely on appropriate safeguards: adequacy decisions (including the EU–US Data Privacy Framework for certified providers) or the European Commission’s standard contractual clauses.

For personal data from the United Kingdom, we rely on the UK’s adequacy regulations, the UK Extension to the EU–US Data Privacy Framework (the “UK–US data bridge”) for certified US providers, or the UK International Data Transfer Agreement or UK Addendum to the European Commission’s standard contractual clauses. You can get more information about these safeguards by writing to us.

6. How long do we keep your data?

Prospects (contact or quote requests with no follow-up): 3 years from your last contact;
Clients: for the whole duration of the contractual relationship, then 3 years after it ends for marketing purposes;
Invoices and accounting records: 10 years, in accordance with legal obligations;
Shop customer account: until you ask us to delete it, or after 3 years of inactivity;
Cookies and trackers: 13 months maximum; your consent choice is kept for 6 months.

At the end of these periods, your data is deleted or anonymized.

7. Cookies and trackers

When you visit the website, cookies may be stored on your device:

Strictly necessary cookies: shop cart and checkout, account login, choice of currency, protection of forms against spam (reCAPTCHA).
Analytics cookies: Google Analytics (via Google Tag Manager) and Matomo produce traffic statistics to help us improve the website; first-party cookies also record where your visit came from, so we know which channels generate contact requests and orders.
Third-party service cookies: live chat, display of client reviews, social media content and buttons (Facebook, LinkedIn, X).

The detailed list, with the purpose and retention period of each cookie, is available in our cookie policy. You can object to these cookies at any time by blocking or deleting them in your browser settings, or by installing the Google Analytics opt-out browser add-on. Refusing these cookies does not prevent you from using the website.

8. What are your rights?

You have the following rights over your data:

the right of access and to obtain a copy of your data;
the right to rectify inaccurate data;
the right to erasure;
the right to restrict processing;
the right to object, in particular to direct marketing;
the right to data portability;
the right to withdraw your consent at any time;
the right to set instructions regarding your data after your death (France).

To exercise these rights, write to us at [email protected] or use our contact form. We will reply within one month. We may ask for proof of identity if we have reasonable doubts about your identity.

If you believe your rights have not been respected, you can first send us a complaint at [email protected], with the subject “Data protection complaint”. We acknowledge every complaint within 30 days, investigate it and tell you the outcome without undue delay.

You can also lodge a complaint with the competent supervisory authority: the CNIL (France), the Data Protection Authority (Belgium), the Information Commissioner’s Office, ICO (United Kingdom, ico.org.uk), the Federal Data Protection and Information Commissioner (Switzerland), the Commission d’accès à l’information (Quebec) or the National Authority for the Protection of Personal Data (Tunisia).

9. How do we protect your data?

Web security is one of our core services. We apply to our own website the measures we recommend to our clients: encrypted connection (HTTPS), web application firewall and protection against attacks, regular updates, backups, access control and strong authentication for administration.

10. Information for residents of the United States

Aurone is a small business based outside the United States, and comprehensive US state privacy laws, such as the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), may not apply to us. We nevertheless apply the following principles to all visitors and clients located in the United States.

Categories of personal information: identifiers and contact details (name, email address, phone number), professional information (company, website), commercial information (orders and invoices) and internet activity (pages viewed, traffic source, device), as described in section 2. We do not knowingly collect sensitive personal information.
Sources and purposes: this information comes from you directly or from your use of the website, and is used only for the purposes listed in section 3.
No sale, no sharing for targeted advertising: we do not sell your personal information and do not share it for cross-context behavioral advertising.
Your rights: you can ask us to tell you what personal information we hold about you, to give you a copy, to correct it or to delete it. You can also opt out of marketing emails at any time.
No discrimination: exercising your rights will never lead to different prices or a different quality of service.
How to make a request: write to [email protected]. You may also use an authorized agent. We may need to verify your identity before answering, and we reply within 45 days.
Children: our services are intended for businesses. We do not knowingly collect personal information from children under 16.

11. Changes to this policy

We may update this privacy policy to reflect changes to our services or to regulations. The date of the last update appears at the top of this page. To learn more about the website publisher, see our legal notice.

Currency Switcher