Privacy Policy

In shortWe collect the minimum data needed to generate your report and deliver your purchase, including your birth data. Payments are handled by Stripe. We never sell your data. You have full GDPR rights.

This Privacy Policy describes how Dmitrii Bosiachenko, autónomo registered in Spain (NIF: Z3795401S) ("we," "us," or "Astrelo") collects, uses, and protects your personal information when you visit https://astrelo.net or purchase our digital product.

This policy is provided in compliance with the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and the Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).

01 Data controller

02 What data we collect

Birth data (to generate your report)

To create your personalized astrocartography report, we collect the date, time, and place of your birth, and your selected focus area (e.g. love, career, peace). This birth data is used solely to compute your chart and generate your report. We may also collect a current city and an optional "dream" city if you provide them.

Purchase data

When you buy Astrelo, our payment processor Stripe collects and forwards to us:

• Your name and email address
• Country of residence (for tax purposes)
• Order ID and purchase amount
• The last 4 digits of your payment card (for support purposes)

We do not collect or store full payment card data. Payment information is handled exclusively by Stripe.

Website usage data

When you visit our Website, we may collect IP address, browser type and operating system, pages visited and time spent, and referrer URL. This is collected via standard analytics and advertising tools (e.g. Google Analytics, Google Ads, Meta Pixel). See our Cookie Policy for details.

Communication data

If you email us at support@astrelo.net, we retain the content of your message for support and quality assurance.

03 Why we process your data

Your birth data is not "special category" data under GDPR, but we treat it as sensitive and use it only to generate your report. We do not use it for advertising or profiling.

04 How long we keep your data

• Purchase records: 6 years (Spanish tax law requires retention of invoices)
• Birth data & reports: retained to let you re-access your report; deleted on request
• Email correspondence: 2 years after last contact
• Analytics data: 14 months
• Marketing list: until you unsubscribe

05 Who we share data with

We share your data only with the processors strictly necessary to deliver our service:

We never sell your personal data. We never share your birth data with advertising networks or data brokers.

06 International data transfers

Some processors (e.g. Stripe, Google) may process data in the United States. All such transfers rely on GDPR Chapter V safeguards (EU-US Data Privacy Framework and/or Standard Contractual Clauses).

07 Your rights

Under GDPR and Spanish law, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten"), subject to legal retention obligations
• Restrict processing of your data
• Portability — receive your data in a structured, machine-readable format
• Object to processing based on legitimate interest
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with the Spanish Data Protection Authority (AEPD) at aepd.es

To exercise any of these rights, email us at support@astrelo.net. We respond within 30 days as required by GDPR.

08 Security

We apply industry-standard security measures: TLS encryption in transit, encrypted storage at rest, and limited access on a need-to-know basis. Our payment processor Stripe is PCI-DSS Level 1 certified.

Despite reasonable precautions, no method of transmission over the internet is 100% secure. If a data breach occurs that affects your data, we will notify you and the AEPD within 72 hours as required by GDPR Article 33.

09 Children

Astrelo is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

10 Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Material changes affecting your rights will be communicated by email where we have your address.

11 Contact

For any privacy question or to exercise your rights, contact:

Dmitrii Bosiachenko
Autónomo (registered in Spain)
support@astrelo.net

Postal address, NIF and full legal details: see our Terms of Service.

See also: Terms of Service · Cookie Policy · Refund Policy