Privacy Policy
Privacy Policy
Last updated: 9 October 2026
Aura Healing ("we", "us") is the trading name of Ahsan Mustafa, a sole trader, and operates aurahealing.uk. This notice explains what personal data we collect, why, and what you can do about it. We are the data controller. Our contact address for privacy questions is info@aurahealing.uk.
What we collect, and when
When you use the Direction Finder. Nothing. The tool runs in your browser. Your floor plan is read locally to draw the preview and is never uploaded. Address searches are sent to a geocoding service through our server, so that service sees our address rather than yours.
When you download the overlay. Before the image downloads we ask for your name, email address, country, whether the property is your home, your business or a client's, and — only if you choose to give it — a phone number. Your floor plan is still not uploaded; the overlay is drawn and saved in your own browser. If you tick the newsletter box we also record that you did, when, and the exact wording you agreed to. The download does not depend on ticking it.
We use a phone number only to reply to you. It is never used for marketing and never passed to our email provider.
When you order a money box placement. The name and date of birth of each person in your household, which of them earn, and the time and place of birth of those who earn (and of anyone else, if you give them) — and, if you came from the Direction Finder, the floor plan details you marked there. We use these for that one reading and nothing else. Some of the people you list may be children; you are giving us their birth details on their behalf, and the private details form we send you after your quote is paid asks you to confirm you may. These details reach us by email and are not stored on the website.
When you buy something. Name, email, billing and delivery address, and what you ordered. Payment card details go directly to Stripe or PayPal — they never reach our server and we never see them.
When you send the Book an audit form. Your name, email address, WhatsApp number if you give it, country, town or postcode if you give it, the service you ask about, your message, and the floor plans and photographs you attach. We use them only to prepare a quote and reply to you. The files are stored privately, not on any public address. If no order follows, the enquiry and its files are deleted automatically 90 days after they arrive.
When you take a book membership. Lemon Squeezy (Lemon Squeezy LLC, United States) sells the membership to you as our reseller: it takes the payment, handles the tax, and holds your card details. It tells us your name, your email address, which book and plan you chose, and until when it is paid. We use that to open an account on this site for you, if you do not have one, and to let you read. We keep it while the membership lasts and for six years after the last payment, as tax law requires of the records behind a sale.
When you buy a Vastu report. The bearing you set, the name you gave the property, and — if you marked them in the Direction Finder — your floor's name, the door, the rooms you named and the plot details, so the report can be written for your home. If you choose a language other than English, we prepare that version with the help of Google's Gemini translation service: only the report's standard wording is sent to it, never your name, address, floor plan or anything you typed, and the translation is kept on our site.
When you contact us. Whatever you put in the message, plus any file you attach.
When you browse. Our host keeps standard server logs, including IP address, for security and troubleshooting. The journal, the free Direction Finder and the opening chapters of the book carry advertising from Google; what that sets in your browser, and the choice you are given first, are in the Cookie Policy. We use no analytics.
Why we are allowed to
| What | Lawful basis |
|---|---|
| Fulfilling an order | Performance of a contract |
| Keeping accounting records | Legal obligation |
| Answering an enquiry | Legitimate interests |
| Keeping a record of overlay downloads | Legitimate interests — knowing who uses the free tool, and being able to answer if you write to us about it |
| Preparing a money box placement from your household's birth details | Performance of a contract — it is the service you ordered |
| Marketing email | Consent, which you can withdraw at any time |
| Advertising cookies and personalised ads | Consent, asked before any is set, and withdrawable at any time |
How long we keep it
Order records for seven years, because tax law requires it. The property name and floor plan details on a report order are deleted automatically ninety days after the report is delivered — at payment for English and Roman Urdu, or when we send it for another language; the bearing stays, so the report can still be opened. Household birth details (dates, times and places) are deleted from the order automatically ninety days after it is completed — time enough to answer any question about your reading — and sooner if you ask. Enquiries and overlay download records for two years. Marketing consent until you withdraw it — every newsletter has a one-click unsubscribe link. Server logs as our host keeps them, typically thirty days.
Who else sees it
Only those who have to: our host Hostinger, our payment providers Stripe and PayPal, Lemon Squeezy for book memberships, and Google for advertising. If you tick the newsletter box, your name, email address, country and the kind of property you named go to Mailchimp (Intuit Inc., United States), which sends the newsletter for us — the last two so that a mailing can be addressed to, say, professionals only. Nobody who leaves the box unticked is sent there. Google (Gemini) translates the standard wording of reports bought in another language; it receives no personal data from us.
Advertising. Some free pages show ads served by Google AdSense (Google Ireland Limited for visitors in the UK and Europe). Third-party vendors, including Google, use cookies to serve ads based on your previous visits to this and other websites. Google's use of advertising cookies lets it and its partners show you ads based on those visits. Google asks for your consent before any of this happens; if you decline, you may still see ads, but not ones chosen from your browsing. You can turn off personalised advertising at any time in Google's Ads Settings, and read how Google uses information from sites that use its services. No ads appear on pages where you pay for something, on the booking form, or to members reading the book.
We do not sell personal data. We have never been asked to disclose data to law enforcement.
Some of these are outside the UK. Transfers rely on the UK International Data Transfer Agreement or an adequacy decision.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, object to processing, or ask us to restrict it. Write to info@aurahealing.uk and we will answer within one month.
If you are not satisfied you can complain to the Information Commissioner's Office at ico.org.uk, or to your own supervisory authority if you are in the EU.