FREE TRACKED SHIPPING ON ORDERS OVER $299 $150

Last updated: September 13, 2026

AURAPEP (“AURAPEP,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard personal information when you visit www.aurapep.ca, create an account, place an order, contact us, subscribe for updates, or otherwise interact with our website and services.

This policy applies to personal information under our control. It does not apply to information that does not identify an individual or that has been aggregated or anonymized so it can no longer reasonably be associated with an individual.

1. Accountability and contact information

AURAPEP is responsible for personal information under its control. Questions, access or correction requests, consent withdrawals, and privacy complaints may be directed to:

Privacy Officer — AURAPEP
Contact: Contact AURAPEP

2. Personal information we collect

Depending on how you interact with AURAPEP, we may collect:

  • Contact and identity information, such as your name, email address, telephone number, billing address, shipping address, and account username.
  • Order and transaction information, such as products ordered, order number, order status, shipping method, order notes, payment status, refund information, and related customer-service communications.
  • Payment-related information. For Interac e-Transfer orders, we may receive information contained in the transfer or transfer notification, including the sender’s name, email address, transfer reference, message, and order number. AURAPEP does not request online-banking passwords or security credentials.
  • Account information, including login and account-management data. Passwords are stored in protected, non-readable form by the website platform; we do not have access to your plain-text password.
  • Communications, including information submitted through contact forms, support requests, product or documentation inquiries, and correspondence with us.
  • Newsletter information, including your email address, consent record, subscription status, confirmation status, and engagement or delivery information associated with AURAPEP launch and catalogue updates.
  • Technical and usage information, such as IP address, browser and device information, pages requested, referring pages, timestamps, cookie identifiers, security events, and diagnostic information.
  • Information you voluntarily provide, including photographs or documents supplied to support an order or delivery claim.

Please do not submit sensitive personal information that is not necessary for your order, account, inquiry, or support request.

3. How we collect information

We collect personal information directly from you when you create an account, place an order, subscribe, complete a form, send an e-Transfer, or communicate with us; automatically through cookies, server logs, and website technologies; from providers involved in hosting, website operation, email delivery, shipping, security, and order administration; and from other lawful sources where permitted or required by law.

4. Why we use personal information

We may use personal information to:

  • create and administer customer accounts;
  • receive, verify, process, fulfil, ship, cancel, and refund orders;
  • match Interac e-Transfers with orders and maintain payment records;
  • send transactional messages such as new-order, payment, processing, completion, cancellation, refund, account-verification, and password-reset notices;
  • provide order, catalogue, documentation, and customer support;
  • respond to contact-form submissions and other inquiries;
  • administer the AURAPEP newsletter and send launch, pre-order, restock, product, and catalogue updates where we have the required consent or other lawful authority;
  • maintain product, batch, and Certificate of Analysis documentation;
  • protect the website, customers, and AURAPEP from fraud, abuse, unauthorized access, security incidents, and unlawful activity;
  • operate, troubleshoot, measure, and improve the website and customer experience;
  • enforce our terms and policies; and
  • comply with legal, tax, accounting, regulatory, recordkeeping, and dispute-resolution obligations.

We will not use personal information for a materially different new purpose without appropriate notice and consent where required.

5. Consent and choices

We obtain consent in a form appropriate to the nature and sensitivity of the information and the circumstances. Some collection, use, and disclosure is necessary to provide requested products or services—for example, using an address to ship an order or an email address to send order information.

Newsletter and promotional messages are separate from transactional order or account messages. When you subscribe to AURAPEP marketing updates, we record your consent and may use a confirmation process before activating the subscription. You may unsubscribe at any time using the unsubscribe link in a marketing email or by contacting the AURAPEP Contact page. Unsubscribing from marketing does not prevent necessary transactional or service messages relating to an account, order, security matter, or inquiry.

You may withdraw consent to optional uses, subject to reasonable notice and legal or contractual restrictions. Withdrawal may limit features or services that require the information.

6. Cookies and similar technologies

AURAPEP uses cookies and similar technologies that may be necessary to keep the website and WooCommerce store functioning; maintain carts, checkout sessions, account logins, and security controls; remember choices such as dismissal of the newsletter popup; prevent abuse and diagnose errors; and, with the applicable consent, measure website performance or usage through services such as Cloudflare Web Analytics and support optional marketing or web-push functionality provided through Brevo and WonderPush.

You can manage cookies through your browser and, where available, the website’s consent controls. Blocking necessary cookies may prevent the cart, checkout, account, or other website features from working correctly.

Website analytics, attribution, and fraud prevention

AURAPEP uses first-party analytics to understand and improve website operation, customer journeys, catalogue performance, checkout reliability, referral attribution, and fraud prevention. Depending on the interaction, this may include pseudonymous visitor and session identifiers; page and landing-page paths; page titles and types; referring website or source; campaign parameters such as UTM source, medium, campaign, term, and content; general device type, browser, and operating system; country and, when reliably supplied by website infrastructure, region or city; whether a visitor appears new or returning; page-view and engaged-time information; clicks on calls to action and outbound links; form identifier and submission outcome; internal funnel events such as product view, cart, checkout, order, and payment-status events; payment-method category; referral code and associated partner identifier; and automated-traffic, abuse, security, or quality signals.

Analytics reports may connect these events into privacy-minimized session journeys and cross-report breakdowns for pages, products, sources, campaigns, geography, technology, referrals, and e-commerce performance. AURAPEP does not use this analytics system to record keystrokes, form-field contents, passwords, full payment-card details, banking credentials, or session-replay video. Raw IP addresses and customer contact details are not stored in the AURAPEP first-party analytics event table.

Analytics and referral-attribution information may be used to detect duplicate, manipulated, automated, self-referred, or otherwise suspicious activity. Analytics alone does not approve a referral reward, release a payment, or make a final fraud decision; protected business rules and authorized review remain applicable.

7. When we disclose personal information

We may disclose personal information only as reasonably necessary for the purposes described in this policy, including to:

  • website, analytics, and infrastructure providers that host, secure, back up, maintain, measure, or support the WordPress/WooCommerce website, including Cloudflare;
  • email and marketing providers, including providers used for transactional email, Brevo for consent-based newsletter subscriptions and communications, and WonderPush for optional web-push services;
  • shipping and fulfilment providers, including postal or courier services used to prepare, track, and deliver shipments;
  • professional advisers and providers such as accounting, legal, security, fraud-prevention, technical-support, and records-management providers;
  • government, regulatory, law-enforcement, or other parties where disclosure is required or permitted by law or necessary to protect rights, safety, security, and property; and
  • a successor or prospective successor in connection with a proposed or completed business transaction, subject to appropriate confidentiality and legal requirements.

Providers are authorized to use personal information only for the services they provide to us or as otherwise permitted by law. AURAPEP does not sell personal information.

Canadian address validation. Canadian billing and shipping address information may be sent securely to Google solely to validate and correct the address. Names, email addresses, phone numbers, products, payment details, and order notes are not included in that request.

8. Processing outside British Columbia or Canada

Some providers may store or process personal information in another province, the United States, the European Economic Area, or another jurisdiction. Information processed elsewhere may be subject to that jurisdiction’s laws and may be accessible to courts, law-enforcement agencies, or government authorities in accordance with those laws. We use contractual, organizational, and technical measures appropriate to the circumstances to protect information handled by providers.

9. Retention

We retain personal information only as long as reasonably necessary for the purposes described in this policy and to meet legal, accounting, tax, security, warranty, dispute-resolution, and recordkeeping requirements. Retention periods vary by record type.

  • Order, payment, shipping, refund, and accounting records may be retained for the period required for business and legal recordkeeping.
  • Account information is generally retained while an account remains active and for a reasonable period afterward.
  • Support and contact records are retained as needed to resolve the inquiry and maintain an appropriate business record.
  • Newsletter subscription and consent records may be retained while the subscription is active and afterward as needed to demonstrate consent or honour an unsubscribe request.
  • Security and technical logs are retained for limited periods appropriate to security, troubleshooting, and legal requirements.

When information is no longer required, we delete, destroy, or anonymize it using measures appropriate to its sensitivity, subject to backup cycles and legal restrictions.

10. Safeguards

We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information. These may include access restrictions, authentication controls, encrypted connections, system updates, backups, monitoring, and limiting access to people and providers who need the information for authorized purposes.

No internet transmission or storage system can be guaranteed completely secure. Customers should use a unique password, protect account credentials and e-Transfer information, and contact us promptly if they suspect unauthorized activity.

11. Access, correction, and privacy rights

Subject to applicable law, you may request information about whether we hold personal information about you and how it has been used or disclosed; access to personal information under our control; correction of inaccurate or incomplete information; withdrawal of consent for optional uses; deletion where applicable; or information about our privacy practices and complaint process.

Send requests to the AURAPEP Contact page with enough information for us to understand and verify the request. We may need to verify identity before providing access or making changes. Legal exceptions may limit access, correction, or deletion, and we may retain information where required or permitted by law. If we cannot fulfil a request, we will explain the reason where required.

12. Children and eligibility

The AURAPEP website and research catalogue are not directed to children. We do not knowingly collect personal information from children for the purpose of selling research products. If you believe a child has submitted personal information, contact the AURAPEP Contact page so we can review the matter.

13. Third-party links

The website may link to websites or services operated by third parties. Their privacy practices are governed by their own policies, and AURAPEP is not responsible for third-party websites that we do not control. Review their privacy information before submitting personal information.

14. Changes to this policy

We may update this Privacy Policy to reflect changes to our practices, services, providers, or legal requirements. The “Last updated” date identifies the current version. Material changes will be communicated appropriately, and consent will be obtained where required.

15. Questions and complaints

Questions, concerns, requests, or complaints may be sent to:

Privacy Officer — AURAPEP
Contact: Contact AURAPEP

We will review and respond to privacy concerns in accordance with applicable law. If a concern is not resolved, you may have the right to contact the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada, depending on the circumstances.