Privacy Policy

The controller of your personal data is Друштво за трговија и услуги ПДС 2026 ДОО Скопје (PDS 2026 DOO Skopje, "AURA", "we").

• Registered office: Tasino Cheshmiche no. 29, Skopje – Centar, Republic of North Macedonia
• Company registration number: 7958420
• Tax number: 4080026641983
• Privacy contact: auramk.app@gmail.com · +389 73 800 700

Data you provide

• Account: first and last name, email, phone number (verified), password and, optionally, profile photo, date of birth and city.
• Bookings: the Businesses, services, professionals, dates and times you book, notes you add, and cancellations, reschedules and no-shows.
• Payments: amount, date, status and transaction number, as well as vouchers and promo codes used. You enter your card details on the bank's payment system; AURA does not receive or store your full card number.
• Reviews and reports: ratings and reviews you post and reviews you report.
• Support: messages and forms you send us.

Data collected automatically

• Location: only with your permission, to show you Businesses nearby.
• Device and usage: device type, operating system, app version, IP address, push-notification token, and information about how you use the Platform.
• Cookies and similar technologies on the website (see Section 10).

• To create and manage your account.
• To process your bookings and connect you with the Business you book.
• To process payments, deposits, vouchers and refunds.
• To send you service messages: booking confirmations, reminders, changes and cancellations.
• To show you Businesses nearby, when you have allowed location access.
• To apply the cancellation and no-show rules, including restrictions on accounts with repeated no-shows.
• To moderate reviews and prevent fraud and abuse.
• For rewards, loyalty and referrals, when you use them.
• For marketing messages, only if you have given consent.
• To maintain, secure and improve the Platform and to meet our legal obligations.

• Contract – for your account, bookings, payments and service messages.
• Consent – for location, marketing messages, push notifications and non-essential cookies. You can withdraw consent at any time.
• Legitimate interest – for security, fraud prevention, review moderation, recording no-shows and improving the Platform, where this does not override your rights.
• Legal obligation – for accounting and tax records and requests from competent authorities.

We share data only as far as necessary:

• The Business you book with – your name, phone number, the service, the appointment time, your note and the payment status, so it can serve you.
• CaSys / Stopanska Banka AD Skopje – to process card payments and refunds.
• Technical service providers acting on our behalf under contract: server hosting, SMS and email delivery, push notifications (Apple and Google) and analytics.
• Competent authorities – where required by law or to protect the rights of users, Businesses or AURA.

We do not sell your personal data.

Our hosting provider's servers are located in the European Union. Some technical providers (for example for push notifications) may process data outside Europe. In those cases we apply the safeguards required by law, such as standard contractual clauses.

We use your device location only to show you nearby Businesses and better search results. You can grant or withdraw permission in your device settings. Without permission, the Platform works with a city you select manually.

Card payments are processed by CaSys, the payment system of Stopanska Banka AD Skopje, with 3-D Secure protection. AURA does not receive or store your full card number. When you save a card for faster checkout, we keep only a reference (token) and the last four digits; the card itself is stored by the payment system.

We send offers and news only if you have given consent. You can opt out at any time in your notification settings or via the link in the message. Service messages about your bookings continue after you opt out of marketing.

The website uses essential cookies needed for login and for the Platform to work. We use non-essential cookies (for example for analytics) only with your consent, which you can change at any time.

• Account: while your account is active. After an account is deleted, we delete or anonymise the personal data within 30 days.
• Bookings and payments: as long as accounting and tax regulations require, and for the duration of any dispute.
• Reviews: after an account is deleted, reviews remain without your name or are deleted.
• Support messages: up to 2 years after the request is closed.

You have the right to:

• access the data we hold about you;
• request correction of inaccurate data;
• request deletion of your data;
• request restriction of, or object to, certain processing;
• receive a copy of your data in a portable format;
• withdraw consent at any time, without affecting processing carried out before that.

You can delete your account yourself in the app: Profile → Settings → Delete account. For other requests, write to auramk.app@gmail.com. We respond within 30 days. You also have the right to lodge a request with the Personal Data Protection Agency of North Macedonia (azlp.mk).

We apply technical and organisational measures to protect your data, including encrypted connections (HTTPS), restricted access to data and password protection. No system is completely secure, but if an incident puts your data at risk, we will notify you and act as the law requires.

The Platform is not intended for people under 16 and we do not knowingly collect their data. If you believe a child has provided us with data, write to us and we will delete it.

We may update this Policy from time to time. We will publish the new version with a new "Last updated" date and, where the change is significant, notify you through the Platform.

PDS 2026 DOO Skopje, Tasino Cheshmiche no. 29, Skopje – Centar, North Macedonia
Email: auramk.app@gmail.com
Phone: +389 73 800 700