Last updated: 4 November 2026
This policy explains how Sheerwell (sheerwell.com), run by AURORAZUX, S.L.U., protects your payments and your data, and what to do if you notice a security problem. For everything else about your personal data, see our privacy policy.
Encrypted connection
Our whole website uses HTTPS. The connection between your browser and our website is encrypted, including on the cart and checkout pages.
Card payments
- You pay on a payment page hosted by SumUp, our payment provider. You enter your card details only on that page.
- Your card details do not pass through our servers and are not stored on them. We do not see your full card number. SumUp tells us whether the payment was completed and gives us a transaction reference.
- SumUp Limited is an authorised electronic money institution regulated by the Central Bank of Ireland.
- SumUp supports 3-D Secure, the authentication used for online card payments, and starts it when it is required for the payment. Your card issuer makes the final decision on whether you need to confirm the payment.
- Section 7 of our terms of sale explains which cards you can use and whether Apple Pay or Google Pay is offered.
We never ask for your card details
We never ask for your card details by email, by phone or in any other message. If you receive a message like this that claims to come from Sheerwell, do not reply or click any link in it, and please tell us.
If you think your card has been used without your permission, contact your card issuer straight away.
How to report a security problem
If you notice a security problem on our website, please write to hello@sheerwell.com and describe what you found. Please do not include card details or passwords in your message.
Personal data breaches
If a personal data breach occurs, we handle it under articles 33 and 34 of the General Data Protection Regulation (GDPR):
- we notify the Spanish Data Protection Agency (AEPD) without undue delay and, where feasible, no later than 72 hours after we become aware of the breach, unless the breach is unlikely to result in a risk to people’s rights and freedoms;
- if the breach is likely to result in a high risk to your rights and freedoms, we inform you without undue delay;
- we document every breach: what happened, its effects and the measures we take.
Contact
Questions about security? Write to hello@sheerwell.com or use our contact page. All our contact details are on our contact information page.