Privacy Policy

• Account information — name, email address, password credentials managed by our authentication provider, and your role on the platform (traveller, vendor, admin).
• Booking information — rental dates, party size, chosen wardrobe, pickup point, and your acceptance of the Rental Agreement.
• Payment information — handled by Stripe. Aurorent does not store full card numbers; we retain payment status, amounts, deposit values, and transaction references.
• Location data — the destination and pickup point you select, used to show nearby availability and map links.
• Uploaded photos — handover and return condition photographs supplied by vendors or travellers to evidence item condition.
• Technical data — device, browser, and usage information collected via cookies and similar technologies.

• To create and secure your account and authenticate you.
• To process bookings, payments, deposits, refunds, and damage disputes.
• To connect you with the vendor fulfilling your rental and to send service messages.
• To operate, debug, and improve the platform, and to measure aggregate impact metrics.
• To meet legal, tax, and fraud-prevention obligations.

Vendors receive only what is needed to fulfil a booking: your first name, booking dates, party size, chosen wardrobe, pickup point, and any note you add. Vendors do not receive your payment details or your full account record. Vendors act as independent controllers of the data they receive and must handle it lawfully.

We also share data with service providers who operate parts of the platform on our behalf — our hosting and database provider, our authentication provider, and Stripe for payments.

• Account data — for as long as your account is active.
• Booking, payment, and agreement-acceptance records — [X years] after the rental ends, to satisfy accounting, tax, and dispute-resolution obligations.
• Condition photographs — [X months] after deposit release, unless a dispute is open.
• Marketing contacts — until you unsubscribe.

You can request a copy of your personal data, correction of inaccurate data, or deletion of your account and associated personal data by writing to [privacy@aurorent.com] or via our contact form. We respond within [30 days]. Some records — such as transaction and agreement-acceptance logs — may be retained where we have a legal obligation to keep them.

We use strictly necessary cookies for session and authentication, cookies set by Stripe during payment, and — only with your consent — analytics cookies. You can accept, reject, or manage non-essential cookies from the banner shown on your first visit and at any time on the Cookie Policy page.

Privacy questions and data requests: [privacy@aurorent.com]. See also our Terms of Service.