Privacy Policy

This policy explains how Aura Vodka ("we", "us") collects, uses and shares personal information through auravodka.com, including our online store, wholesale pages, store locator, newsletter and contact form.

For any question or request about your personal information, please reach us through our contact form.

• Contact form. Your name, email address, phone number (optional) and message, so we can reply. Submissions are saved in our website database and emailed to our team, and our team receives a text message with your name, email, phone and the first 100 characters of your message. We also send you an automatic confirmation email.
• Spam screening. Contact form submissions are checked automatically, for example for disposable email addresses or random-looking text. If a submission is flagged, the reason is saved with it and written to our server log; the reason can quote up to 25 characters of the name or message.
• Online orders. Your name, email address, phone number, shipping address and the products you order, so we can take payment, fulfil and deliver the order and send you a confirmation email. Card details are entered into Square's payment form and go directly to Square; we keep Square's payment reference, not your card number. If you check out as a guest, we still keep a customer record under your email address, linked to your order.
• Wholesale orders and enquiries. For licensed businesses: business name, liquor licence number, LCBO licensee customer number, contact name, email, phone, business or delivery address, province, the products requested and any message, so we can verify the licence, respond and fulfil the order. We check the customer number and business name against a list of licensees we hold. Enquiries are saved in our website database, emailed to our team and summarised in a text message to our team, and we send you an automatic confirmation email.
• Customer accounts. If you create an account: your name, email address and password (stored only as a one-way hash), so you can sign in and see your order history. If you choose "Sign in with Google", Google shares your name and email address with us.
• Newsletter. Your email address, so we can send you news and offers. We send a welcome email when you subscribe.
• Province and store locator. On your first visit your browser may ask whether to share your location. If you allow it, your coordinates are sent from your browser to OpenStreetMap's Nominatim service to work out your province; only the province is kept, on your device. On the store locator, a place you search for is sent to Nominatim to find it on the map, and if you choose "Use my location", your coordinates are sent to our server to list nearby stores. They are not saved in our database, but like any page address they appear in our server logs.
• Server logs. Like most websites, our web server records each request, including your IP address, browser type and the address requested. We use these logs for security and troubleshooting.

• Age check. When you confirm you are of legal drinking age, your answer is saved in your browser's session storage so the question is not repeated as you browse. It is not a cookie and is cleared when you close the browser tab.
• Cart and province. Your cart and chosen province are saved in your browser's local storage so they are still there when you come back. They stay until you empty the cart or clear your browser data.
• Sign-in cookie. If you sign in or create an account, we set one cookie (customer_token) to keep you signed in. It expires after 30 days or when you sign out.
• Google Analytics cookies. Set by Google; see Analytics below.

We do not use advertising cookies or social media pixels on this site.

Google Analytics. We use Google Analytics to understand how the site is used, such as which pages are viewed, the device and browser used and the general area visitors come from. Google Analytics sets its own cookies, and Google processes this information for us. You can block these cookies in your browser settings or install Google's Google Analytics opt-out browser add-on.

Klimb. We also use Klimb, our analytics service at autana.ca, to measure how pages are read. When you hide or close a page, it sends the page's address (never the query string), how far you scrolled, how long the page was visible, whether you came from a Google search results page and, if so, whether you left within 10 seconds without opening another page on the site. It sets no cookies, stores nothing on your device and uses a random ID that is new for every page view. It does not store your IP address or browser details. Raw page views are kept for 90 days. It does nothing if your browser sends a Do Not Track or Global Privacy Control signal.

We share personal information only with the service providers that help us run the site and fill orders, and only what they need:

• Square processes payments and receives your name, email, phone, shipping address, order details and card details.
• Resend delivers our emails: contact and wholesale replies, order confirmations and newsletter emails.
• Twilio delivers the text-message alerts about contact forms and wholesale enquiries to our team.
• Google provides Google Analytics, "Sign in with Google" if you use it, and Google Fonts, which loads the site's typefaces from Google's servers and so receives your IP address and browser details.
• Cloudflare delivers auravodka.com and protects it from attacks; every request to the site, including your IP address, passes through Cloudflare.
• OpenStreetMap Nominatim, CARTO and unpkg provide the location lookups, map images and map software used by the province finder and store locator. Your browser contacts them directly, so they receive your IP address.
• Provincial liquor distributors. For licensee orders, the licence or customer number and the products ordered are entered into the distributor's ordering system (the LCBO in Ontario, Container World in British Columbia).
• Klimb (autana.ca) provides the page analytics described above.

Some of these providers are based outside Canada, so your information may be processed and stored in other countries, such as the United States, where it may be accessible to authorities under local law.

We do not sell personal information.

• Server logs: deleted after 14 days.
• Klimb raw page views: 90 days.
• Sign-in cookie: 30 days, or until you sign out.
• Age check: until you close the browser tab.
• Everything else, including contact messages, orders, accounts and newsletter subscriptions: as long as needed for the purpose it was collected for.

You can ask us to:

• tell you what personal information we hold about you and give you access to it;
• correct information that is inaccurate or incomplete;
• withdraw your consent, for example to stop receiving our newsletter or to close your account, subject to legal or contractual limits such as records of past orders.

Send requests through our contact form. We may need to confirm your identity before acting on a request.

You can also decline the browser's location request, block cookies in your browser settings, or turn on Do Not Track or Global Privacy Control.

If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada.

We will update this page when our practices change. The date below shows when it was last revised.

Last updated: 14 September 2026