Cookie Notice

Version 1.0 · Prepared 20 September 2026 · Effective on publication

Cookies, local storage, analytics and advertising choices on Aurelua.

1. What these technologies are

Cookies are small text files stored by a browser. Similar technologies include local storage, pixels, software-development kits and server-side event tools. They can remember a session, protect an account, measure use or connect an ad interaction with a later visit.

2. Categories used

• Strictly necessary. Security, fraud prevention, login and session, checkout, load balancing, consent choices and core site functions. Always active where genuinely necessary, and not used for unrelated advertising.
• Preferences. Remember optional interface, language or display choices. Used only when needed for a requested choice, or with consent where required.
• Analytics. Understand pages, actions, errors and performance so the Platform can improve. PostHog is the currently disclosed provider. Off until consent, unless an event is strictly necessary and configured without non-essential tracking.
• Advertising. Measure campaigns, limit and reach ads, and create permitted audiences. Meta technologies are currently disclosed. Off until consent. Withdrawal stops future non-essential collection from that browser.

3. Providers currently disclosed

• Aurelua and its hosting and security providers may set necessary session, security and preference technologies.
• PostHog may receive consent-based page and product-usage events. Session replay is not used unless it is specifically enabled following an impact assessment. If used, sensitive fields are masked and checkout, identity and private-message content are excluded.
• Meta Pixel or related Meta tools may receive consent-based browser events, cookie and device information, and advertising identifiers. If server-side events are enabled, Aurelua must document the exact fields and apply the same consent choice.

Aurelua keeps a current production inventory of cookie and storage names, hosts, purposes and lifetimes, and reviews it at least quarterly and after material code or campaign changes.

4. Managing consent

On the first visit, the consent tool offers “Accept all”, “Reject non-essential” and granular settings with equal prominence. No box is pre-ticked. Aurelua records the user’s choice and the applicable notice version, which is shown at the top of this page.

A user can reopen “Cookie settings” in the website footer and withdraw or change consent. Withdrawal does not invalidate earlier lawful processing. Browser controls can also block or delete cookies, but doing so may affect login, checkout or saved choices.

5. Information and transfers

Depending on the chosen category, these technologies may process IP address, device and browser, timestamps, page and referrer, interaction, account role, cookie identifiers and campaign data. Aurelua does not send identity documents, full payment credentials, private messages or unnecessary Product details to analytics or advertising providers.

A provider may process information outside South Africa. Aurelua must use a lawful POPIA section 72 transfer basis and appropriate contracts, as described in the Privacy Policy.

6. Retention

Session technologies expire when the session ends or shortly afterwards. Persistent technology remains only for its stated period. Aurelua uses the shortest useful duration and retains consent evidence only as long as needed to demonstrate and respect the choice.

7. Updates and contact

Aurelua may update this Notice when technologies, providers or purposes change. A material new non-essential purpose requires a fresh choice. Questions or rights requests may be sent to info@aurelua.com.