01
Who is responsible
[Company name], [Registered address], decides how your personal data is used. Write to privacy@ostra.example about anything on this page.
01
[Company name], [Registered address], decides how your personal data is used. Write to privacy@ostra.example about anything on this page.
02
When you order: your name, delivery and billing address, email, phone number and what you bought. When you sign up for the newsletter: your email. When you write to us: what you write.
When you browse: the pages you visit and the device you use, and only if you accept analytics cookies. Card numbers never reach us; the payment processor of [Shop platform] handles them.
03
To deliver your order and handle returns, because that is the contract between us. To keep invoices, because tax law requires it. To send the newsletter, because you asked for it; every email has a link to stop it. To see which pages work, only with your consent.
We do not sell your data, and we make no automated decisions about you.
04
Only those who need it to do a job for us: [Shop platform] for the shop and checkout, the payment processor, the carrier delivering your parcel, our email service for the newsletter, and our accountant.
Some of them are based outside the EU. Where they are, the transfer runs under the European Commission’s standard contractual clauses.
05
Orders and invoices: 10 years, because Portuguese tax law says so. Newsletter: until you unsubscribe. Emails with us: 2 years after the last message. Analytics: 14 months.
06
You can ask to see the data we hold on you, correct it, delete it, take it elsewhere, or object to how we use it. Where we rely on your consent, you can withdraw it at any time. We answer within one month.
If you think we got it wrong, you can complain to the Portuguese data protection authority at cnpd.pt.
07
We use the cookies the shop needs to run. If we add analytics, we ask before setting any analytics cookie. The full list is on the Cookies page.
08
If this policy changes in a way that affects you, newsletter subscribers hear about it by email before it applies. Nothing changes quietly.