PRIVACY POLICY

Last updated: 21 August 2026

This Privacy Policy explains how ASTREAL collects, uses, stores and shares personal information when you visit astrealstudio.com, place an order, contact us or otherwise interact with our services. Details of the person legally responsible for your information are provided in Section 14.

1. Information we collect

Depending on how you use our website, we may collect:

• Your name, email address, telephone number and billing or delivery address.

• Order information, including products, sizes, quantities and delivery details.

• Payment status and limited transaction information. Full payment-card information is handled by our payment providers and is not stored directly by ASTREAL.

• Customer-account information, if you create or use an account.

• Messages, support requests, order numbers and other information you send to us.

• Reviews, ratings or other content you choose to submit.

• Marketing preferences, including whether you have subscribed or unsubscribed.

• Device and browsing information, such as your IP address, browser, device type, pages viewed, cart activity and cookie identifiers.

• Information used to detect fraud, secure transactions and protect the website.

We generally receive this information directly from you, automatically through the website, or from service providers involved in operating the store and fulfilling your order.

2. How we use your information

We may use personal information to:

• Process, fulfil, deliver and manage orders.

• Provide order confirmations, delivery updates and customer support.

• Process payments, refunds, replacements or cancellations.

• Maintain customer accounts and saved preferences.

• Detect fraud, misuse or security threats.

• Operate, analyse and improve our website and services.

• Remember cart contents and website preferences.

• Comply with tax, accounting and other legal obligations.

• Establish, exercise or defend legal claims.

• Send marketing communications where you have consented or where otherwise permitted by law.

• Display reviews or other content that you voluntarily submit.

• Personalise content, measure advertising or perform analytics where permitted and, where required, after obtaining consent.

3. Legal grounds for processing

Where the GDPR applies, we process personal information on the following grounds:

• Contract: Processing your order, payment, delivery, return or customer-service request.

• Legal obligation: Maintaining tax and accounting records, responding to lawful requests and meeting legal responsibilities.

• Legitimate interests: Operating and improving the store, preventing fraud, securing transactions and responding to customers, provided those interests do not override your rights.

• Consent: Sending optional marketing communications or using non-essential cookies where consent is required.

You may withdraw your consent at any time. This will not affect processing that occurred before consent was withdrawn.

4. How we share information

We only share personal information where reasonably necessary to operate the store, fulfil orders or comply with the law. Recipients may include:

• Shopify, which hosts and operates our online store and checkout.

• Printify and its production partners, which manufacture and fulfil made-to-order products.

• Payment processors and payment methods selected at checkout.

• Delivery companies, postal services and couriers.

• Email, customer-support and communication providers.

• Website analytics, security, fraud-prevention and review-service providers.

• Advertising or marketing providers where enabled and legally permitted.

• Accountants, professional advisers, insurers or legal representatives.

• Courts, regulators, law-enforcement bodies or public authorities where legally required.

• A prospective buyer or successor if the business or its assets are sold, reorganised or transferred.

These providers may process only the information needed to perform their services and are subject to their own legal and contractual obligations.

We do not sell personal information for money. Certain privacy laws may classify some advertising or analytics activities as the “sale” or “sharing” of personal information. Where applicable, you can manage these activities through our cookie preferences or data-sharing opt-out controls.

Shopify also processes customer information in connection with its platform and consumer services. Further information is available in the Shopify Consumer Privacy Policy:

https://www.shopify.com/legal/privacy/consumers

Shopify privacy requests can also be submitted through:

https://privacy.shopify.com/

5. International transfers

ASTREAL operates from Ireland and uses service providers that may process information in Ireland, the European Economic Area, the United States, Canada or other countries.

Where personal information is transferred outside the European Economic Area, appropriate safeguards may be used where required, including adequacy decisions, approved contractual protections or other legally recognised transfer mechanisms.

6. Cookies and similar technologies

Our website and service providers, including Shopify, use cookies and similar technologies to:

• Keep the website and checkout functioning.

• Remember cart contents and preferences.

• Protect accounts and transactions.

• Understand website traffic and performance.

• Provide analytics, personalisation or advertising where enabled.

Essential cookies are required for the website to function. Where required, non-essential cookies will not be used unless you provide consent.

You can manage available choices through the cookie banner or the Cookie Preferences link in the website footer. You may also restrict cookies through your browser, although this may prevent parts of the website from working correctly.

7. Marketing communications

If you subscribe to marketing, we may send you information about products, launches, offers or store updates.

You can unsubscribe at any time by using the unsubscribe link in a marketing message or by contacting support@astrealstudio.com.

Unsubscribing from marketing will not stop essential messages concerning an order, payment, delivery or customer-service request.

8. Data retention

We keep personal information only for as long as reasonably necessary for the purposes described in this policy.

Order, payment and transaction records may be retained for up to six years or longer where required for Irish tax, accounting, dispute or legal purposes. Other information is retained according to factors including:

• The length of our relationship with you.

• Whether your account or order remains active.

• The time needed to answer a support request.

• Legal, tax and accounting obligations.

• Fraud-prevention and security requirements.

• Applicable limitation periods or disputes.

Marketing information is retained until you unsubscribe or object, subject to any limited information required to record your preference.

9. Your privacy rights

Depending on your location and subject to applicable exceptions, you may have the right to:

• Request access to your personal information.

• Request correction of inaccurate or incomplete information.

• Request deletion of your information.

• Restrict or object to certain processing.

• Receive certain information in a portable format.

• Withdraw consent where processing is based on consent.

• Object to direct marketing.

• Opt out of certain targeted advertising or data-sharing activities.

• Submit a complaint to a data-protection authority.

To exercise these rights, email support@astrealstudio.com. We may need to verify your identity before completing a request.

If you are located in Ireland or believe your information has been handled contrary to the GDPR, you may contact the Irish Data Protection Commission:

https://www.dataprotection.ie/en/contact/how-contact-us

10. Automated processing

We and our providers may use automated systems to help identify fraud, suspicious activity or security threats.

ASTREAL does not intend to make decisions based solely on automated processing that produce legal or similarly significant effects without appropriate safeguards where required by law.

11. Children’s information

Our website is not directed at children under the age of 16, and we do not knowingly collect personal information directly from children without appropriate authorisation.

If you believe a child has provided personal information to us, contact support@astrealstudio.com.

12. Security

We use reasonable administrative, technical and organisational measures to protect personal information. However, no website, transmission method or storage system can be guaranteed to be completely secure.

Customers are responsible for protecting their account credentials and should contact us if they suspect unauthorised account activity.

13. Changes to this policy

We may update this Privacy Policy when our services, providers, legal obligations or data practices change. The updated version will be published on this page with a revised “Last updated” date.

Where required, we will provide additional notice of significant changes.

14. Controller and contact details

The legal proprietor operating ASTREAL is responsible for the personal information processed through this website.

For the operator’s registered identity, business address and other required business information, please refer to our Legal Notice.

For privacy requests, customer support or questions about this Privacy Policy, email support@astrealstudio.com.