Privacy & Security Policy

Last updated: April 8th, 2025.

At Aster Lacuna, we are committed to protecting and respecting your privacy. This Privacy & Security Policy aims to inform you about how we collect, use, and protect your personal information in accordance with the General Data Protection Regulation (GDPR) of the European Union and Spanish privacy laws.

1. Information We Collect

We collect and process the following types of information:

  • Personal Information: Includes your name, email address, billing and shipping address, phone number, and other details necessary to process your order.

  • Payment Information: We collect payment-related information through Shopify Payments, a secure payment processing platform. Shopify Payments processes your payment details securely, and we do not store your payment information directly.

  • Usage Information: Shopify collects data related to your use of our website, including IP addresses, browser type, referring page, pages visited, and duration of visits. This data is used for fraud prevention, security, and to enhance the functionality of our website.

2. How We Use Your Information

We use your personal information to:

  • Process and ship orders.

  • Communicate with you regarding your order (order confirmations, shipping updates, etc.).

  • Improve your user experience on our website.

  • Comply with legal obligations.

3. How We Share Your Information

We do not sell or rent your personal information to third parties. However, we may share your information with:

  • Shopify Payments: To securely process your payments.

  • Shipping providers: To manage the delivery of your order.

  • Web analytics services: To understand how users interact with our site.

In all cases, we ensure that these providers comply with applicable data protection regulations.

4. Information Security

We take security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. We use SSL encryption to protect data transmission and other security protocols.

5. Your Rights

Under the GDPR, you have the following rights regarding your personal information:

  • Access: You may request a copy of the personal information we hold about you.

  • Rectification: You may correct any incorrect or incomplete data.

  • Erasure: You may request the deletion of your personal data, under certain conditions.

  • Objection: You may object to the processing of your data, especially in relation to direct marketing.

  • Data Portability: You may request the transfer of your data to another service.

  • Withdrawal of Consent: You may withdraw your consent at any time.

To exercise these rights, please contact us at: [contact email address].

6. Cookies

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device. You can control and manage cookies through your browser settings. By continuing to browse our website, you consent to the use of cookies in accordance with this policy. For more detailed information about the cookies we use, please refer to our Cookie Policy.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements.

8. Changes to This Privacy Policy

We may update this Privacy & Security Policy from time to time. Any changes will be posted on this page with the updated date. Please review this page periodically for the latest information.