This policy explains how ANDYCUSTOM SRL (“we”, “us”, “our”) handles your personal data when you use AURA DIGITAL VAULT. We follow the EU General Data Protection Regulation (GDPR) and Romanian data protection law. Questions? Email [email protected].
1. Who is responsible for your data
The data controller is ANDYCUSTOM SRL, based in Bistrita, BN, Romania. You can reach us about anything privacy-related at [email protected].
2. What data we collect
- Details you give us: your name and email address when you buy or sign up.
- Order information: what you purchased, the amount, and your order reference.
- Payment information: handled directly by Stripe. We receive confirmation of payment and limited details (such as the last 4 digits of your card), but never your full card number.
- Technical & usage data: basic information like your device, browser, and how you use the site, collected through cookies and similar tools.
3. How and why we use your data
We use your data only for clear reasons, each with a legal basis under the GDPR:
- To deliver your order and give you access to your products — to perform our contract with you.
- To send order confirmations and support — to perform our contract and for our legitimate interest in helping customers.
- To process payments and prevent fraud — to perform our contract and meet legal obligations.
- To keep records for accounting and tax — to comply with legal obligations.
- To understand and improve the site — based on your consent (cookies) or our legitimate interest.
4. Cookies
Cookies are small files stored on your device. We use essential cookies that keep the site working and secure (for example, remembering your session and your cookie choice), and, with your consent, analytics cookies that help us see how the site is used so we can improve it.
When you first visit, our cookie banner lets you accept all cookies or keep only the essential ones. You can change your mind any time by clearing your browser cookies, which will make the banner appear again.
5. Who we share data with
We don't sell your data. We share it only with trusted providers that help us run the business:
- Stripe — to process payments securely.
- Our hosting and email providers — to run the website and send you order and support emails.
- Authorities — only if we are legally required to.
These providers act as our processors and may only use your data to provide their service to us.
6. International transfers
Some of our providers may process data outside the European Economic Area. When they do, we rely on safeguards recognized under the GDPR (such as the European Commission's Standard Contractual Clauses) to keep your data protected.
7. How long we keep your data
We keep your data only as long as needed. Order and billing records are kept for the periods required by accounting and tax law. Other data is deleted or anonymized when it's no longer needed.
8. Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you.
- Correct data that is wrong or incomplete.
- Ask us to delete your data (“right to be forgotten”), where applicable.
- Restrict or object to how we use your data.
- Receive your data in a portable format.
- Withdraw your consent at any time, where we rely on consent.
To use any of these rights, just email [email protected]. We'll respond within the time limits set by law.
9. Complaints
If you believe we've mishandled your data, please contact us first so we can put it right. You also have the right to complain to the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), at www.dataprotection.ro.
10. Security
We use appropriate technical and organizational measures to protect your data. Payments are encrypted and handled by Stripe. While no online service can be 100% secure, we work to keep your information safe.
11. Children
Our products are meant for adults. We don't knowingly collect data from children under 16. If you believe a child has given us their data, contact us and we'll remove it.
12. Changes to this policy
We may update this policy from time to time. The latest version will always appear here with the “Last updated” date at the top.
13. Contact
ANDYCUSTOM SRL · Bistrita, BN, Romania · Email: [email protected]