Privacy policy.
Who we are.
Aurum Direct Limited is a company registered in England and Wales, company number 17076355. Our registered address is 103 High Street, Waltham Cross, EN8 7AN.
We operate an eBay store selling refurbished mesh Wi‑Fi hardware in the United Kingdom.
What data we collect and how.
We collect the minimum data required to fulfil your order. When you purchase from our eBay store, eBay shares the following information with us to enable delivery.
Your name. Your delivery address. Your eBay username. Details of the item purchased, the date, and the transaction value.
We do not independently collect payment card data. All payment processing is handled by eBay.
We do not collect your email address directly. Any communication between us takes place through eBay’s secure messaging system.
This website does not collect any personal data through forms, analytics tools, or tracking pixels. See our Cookie Notice for details.
Why we use your data.
We use your name and delivery address to dispatch your order via Royal Mail. We process delivery details under contract performance (UK GDPR Article 6(1)(b)).
We retain transaction records to comply with our legal and tax obligations under HMRC requirements (Companies Act 2006 and applicable tax legislation). We retain tax records under legal obligation (UK GDPR Article 6(1)(c)).
We respond to messages and resolve order queries via eBay under legitimate interest (UK GDPR Article 6(1)(f)).
Who we share your data with.
Royal Mail receives your name and delivery address to deliver your parcel. Royal Mail is subject to its own privacy policy and UK GDPR obligations.
eBay processes your payment and provides buyer protection. eBay is subject to its own privacy policy.
We do not sell, rent, or share your personal data with any other third party.
How long we keep your data.
Transaction records are retained for six years from the end of the financial year in which the transaction took place, in accordance with HMRC requirements.
Royal Mail tracking records are retained for as long as necessary to resolve any delivery queries, typically no longer than six months after the transaction.
Your rights.
Under the UK GDPR, you have the right to access the personal data we hold about you, request that we correct inaccurate data, request that we delete your data subject to our legal retention obligations, restrict or object to how we process your data, and receive your data in a portable format.
To exercise any of these rights, write to us at Aurum Direct Limited, 103 High Street, Waltham Cross, EN8 7AN.
We will respond within one calendar month of receiving your request.
If you are not satisfied with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
Changes to this policy.
If we make material changes to this policy, we will update this page. The date at the bottom of the page reflects when it was last revised.
Last updated, May 2026.