Privacy Policy
Last updated: September 2026
ASTERO SHOP ("we," "us," "our") respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains what data we collect, why we collect it, how it is used and shared, and the rights available to you.
6.1 Who We Are
ASTERO SHOP is operated by ASTERO SHOP, registered in Italy. For privacy-related requests, contact us at support@asteroshop.com.
6.2 Information We Collect
Identity & contact data: name, billing/shipping address, email, phone number.
Order & transaction data: items purchased, order value, order history.
Payment data: processed directly by our PCI-DSS-compliant payment providers; we do not store full card numbers.
Technical data: IP address, browser type, device identifiers, and cookies (see our Cookie Policy).
Communications: messages sent through our contact form or customer support email.
6.3 How We Use Your Data
We use your data to: process and fulfil orders; communicate order status and support requests; prevent and investigate fraud; comply with legal and tax obligations; and, where you have consented, send marketing communications and personalise your shopping experience.
6.4 Legal Bases (GDPR)
Where the EU General Data Protection Regulation ("GDPR") applies, we process personal data on the following bases: performance of a contract (order fulfilment), legal obligation (tax, accounting, fraud prevention), legitimate interest (fraud prevention, service improvement), and consent (marketing communications, non-essential cookies).
6.5 Sharing With Third Parties
We share personal data only where necessary, with: payment gateway providers (to process transactions); logistics and fulfillment partners, including our Overseas Logistics Hub (to deliver and process returns); IT and hosting providers; and marketing/analytics platforms (where you have consented to related cookies). We do not sell your personal data. Where required by the California Consumer Privacy Act as amended by the CPRA ("CCPA/CPRA"), certain data-sharing arrangements with advertising partners may be considered a "share" for cross-context behavioural advertising purposes; you may opt out as described in Section 6.8.
6.6 International Data Transfers
As we operate through international logistics and payment partners, your data may be transferred outside your country of residence, including to jurisdictions with different data-protection standards. Where required, such transfers are protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses.
6.7 Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this policy, including any legally mandated retention periods for tax and accounting records.
6.8 Your Rights
Under the GDPR (EU/UK residents), you have the right to: access, rectify, or erase your data; restrict or object to processing; data portability; and to lodge a complaint with your local data protection authority.
Under the CCPA/CPRA (California/U.S. residents), you have the right to: know what personal information is collected; request deletion; correct inaccurate information; opt out of the sale or sharing of personal information; and not be discriminated against for exercising these rights. To submit a request, contact us at support@asteroshop.com or use our Contact page.
6.9 Children's Privacy
Our store is not directed at children, and we do not knowingly collect personal data from individuals below the applicable age of digital consent in their jurisdiction.
6.10 Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date above reflects the most recent revision. Continued use of the store after changes are posted constitutes acceptance of the updated policy.