What we collect.
Name, contact details (phone, email), delivery address, order and payment details (processed directly through our payment processor - we don't store full card details), and website usage/cookie data based on your preferences.
Why we collect it.
To fulfil and deliver your order, provide customer service, billing and invoicing, and, with your separate consent, send you offers and content. The legal basis is performance of our contract with you, a legal obligation (e.g. bookkeeping), and/or your explicit marketing consent.
How long we keep it.
Order and payment data is retained as required for bookkeeping and tax purposes (7 years by default); marketing contact details are kept until you withdraw consent.
Who we share it with.
Our payment processor, our courier, and the analytics/marketing tools we use - only as needed to provide the service. We do not sell personal data to third parties.
Your rights.
To access, correct, delete, or request a portable copy of your personal data, and to withdraw marketing consent at any time. For any request: privacy@aspastry.com - we'll respond within 30 days.
Data security.
We take reasonable technical and organizational security measures in line with the Privacy Protection (Data Security) Regulations, 5777-2017 (תקנות הגנת הפרטיות (אבטחת מידע), התשע"ז-2017).