Last Updated: 26/02/2025
Welcome to Tropical Astral (“we,” “us,” or “our”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and protect your information in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and other applicable laws.
1. Data Controller
The data controller responsible for your personal data is:
Tropical Astral
R. da Suécia, Vilamoura, 8125-406 Quarteira
veronica.gelgren@gmail.com
If you have any questions about this policy or how we handle your data, you can contact us using the details above.
2. Data We Collect
We collect different types of personal data, including but not limited to:
-
Identity Information: Name, username, and other identifiers.
-
Contact Information: Email address, phone number, mailing address.
-
Transaction Information: Details about purchases and payments (processed securely through third-party payment processors).
-
Technical Data: IP address, browser type, device information, and cookies (see Section 7).
-
Usage Data: How you interact with our website.
-
Marketing Preferences: Your preferences regarding receiving marketing communications from us.
We do not collect special categories of personal data (such as health data or biometric information) unless required by law.
3. How We Use Your Data
We use your personal data for the following purposes:
-
To provide and manage our services.
-
To process orders, payments, and deliveries.
-
To communicate with you (customer support, updates, and marketing if you opt in).
-
To improve our website, services, and user experience.
-
To comply with legal obligations (tax, anti-fraud, and regulatory requirements).
-
To enforce our terms and conditions.
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
-
Contractual necessity (e.g., fulfilling an order you placed).
-
Legitimate interests (e.g., improving our website and services).
-
Consent (e.g., when you subscribe to marketing emails).
-
Legal obligation (e.g., tax compliance and fraud prevention).
5. Data Sharing and Third Parties
We may share your data with:
-
Service providers (e.g., payment processors, hosting services, and analytics tools).
-
Legal and regulatory authorities if required by law.
-
Business partners (e.g., shipping providers for order fulfillment).
-
Marketing platforms (if you have consented to receive promotional communications).
We do not sell or rent your personal data.
6. International Data Transfers
If your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:
-
EU-approved standard contractual clauses.
-
Privacy Shield Framework (if applicable).
-
Other GDPR-compliant transfer mechanisms.
7. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience. You can control cookies through your browser settings. For more details, see our Cookie Policy.
8. Data Retention
We retain your personal data only as long as necessary for the purposes described in this policy, or as required by law. Once data is no longer needed, we securely delete or anonymize it.
9. Your Rights Under GDPR
You have the following rights regarding your personal data:
-
Access: Request a copy of your data.
-
Rectification: Correct inaccurate or incomplete data.
-
Erasure: Request deletion of your data (subject to legal exceptions).
-
Restriction: Limit how we process your data.
-
Objection: Object to certain processing activities.
-
Data Portability: Request transfer of your data to another service provider.
-
Withdraw Consent: If processing is based on consent, you can withdraw it at any time.
To exercise your rights, contact us at veronica.gelgren@gmail.com.
If you believe we have not handled your data properly, you have the right to file a complaint with your local Data Protection Authority.
10. Security Measures
We implement technical and organizational measures to protect your data from unauthorized access, loss, misuse, or disclosure. However, no system is completely secure, and we encourage you to take appropriate precautions when sharing personal data online.
11. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for their privacy policies or practices. We encourage you to review their policies before providing personal data.
12. Changes to This Privacy Policy
We may update this policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date. Significant changes may be communicated via email or other means.
13. Contact Us
For any questions regarding this Privacy Policy, contact us at:
Email: veronica.gelgren@gmail.com
Phone: 938 439 900
Address: R. da Suécia, Vilamoura, 8125-406 Quarteira