Privacy notice

Controller

Cortx EOOD, a company established in Bulgaria with registered office at Bul. Tsar Boris III n. 165A, piano 4, uff. 11, 1618 Sofia (rione Krasno selo), Bulgaria, Bulgarian EIK/UIC 208805445 and Bulgarian VAT identification number BG208805445. Contact: email hello@astarforyou.com.

Data we collect

• Order data: name, email address and the billing details entered at checkout, including the state and ZIP code used to determine the sales-tax location of the order.
• Dedication details you enter and approve, such as names, dates, messages and observation location.
• Contact data supplied through support forms or email.
• Technical navigation data, security logs and cookie choices, as described in the Cookie Policy.
• For Google Ads enhanced conversions, and only after Marketing consent, the order email address is normalized and converted on our server into a SHA-256 hash before transmission; Google uses it to associate the purchase with attributable advertising interactions.
• Payment references processed by the payment provider; we do not receive or store complete card details.

Physical products and shipping are not available in the United States at launch, so no shipping address is collected for a United States order.

Purposes and legal bases

We use personal information for the purposes below. Where the GDPR applies to the controller established in Bulgaria, the basis shown next to each purpose is the legal basis relied on.

• handling orders and producing personalized content — steps requested before entering into a contract and performance of the contract;
• calculating and documenting sales tax and meeting accounting and other statutory duties — compliance with legal obligations;
• customer support and complaint handling — performance of the contract and legitimate interests;
• site security, fraud prevention and the establishment, exercise or defense of legal claims — legitimate interests;
• non-necessary cookies and any promotional communications — consent only.
• campaign measurement using Google Ads enhanced conversions — Marketing consent; advertising personalization remains disabled.

Nothing in the preference, analytics or marketing categories is preselected: without an explicit choice those purposes stay disabled, whatever law applies to you.

Retention

We keep personal information only for as long as the stated purposes require. Accounting and tax records are kept for ten years under the record-keeping laws that apply to the seller; consent evidence and legal-version records are kept for as long as needed to show how an order was placed; support correspondence is kept for the time needed to handle the request and any related legal claims.

At the end of the applicable period, data is deleted or anonymized unless a further legal obligation requires it to be kept.

Recipients and service providers

Authorized staff and providers needed to deliver the service—including hosting, payments, email, document storage, Google Analytics for consented statistics, Google Ads for consented campaign measurement and professional advisers—receive only the data needed for their role and act on our instructions where required. For enhanced conversions, Google Ads receives only the normalized SHA-256 hash of the email address together with conversion data; the tag does not transmit the plain-text email, name, postal address or dedication content.

To generate the astronomical sky cutout, the CDS/Aladin service receives only the selected star’s sky coordinates and technical image parameters, not customer identifiers or customer-entered dedication text.

We do not disclose personal information to third parties in exchange for money. Some United States state privacy laws define ‘sale’ or ‘sharing’ broadly, and consented campaign measurement of the kind described above may fall within those definitions. You can stop it at any time by turning off the Marketing category in ‘Manage cookie preferences’ in the footer.

The seller is established in Bulgaria, so personal information about United States customers is processed in the European Economic Area, and providers acting for the seller may process it in the United States or elsewhere. Where the GDPR applies to a transfer out of the European Economic Area, the transfer uses the safeguards that regulation requires.

Your rights and choices

Whatever law applies to you, you can ask us for a copy of the personal information we hold about you, ask us to correct or delete it, or ask us to stop a particular use, and you can withdraw consent at any time without affecting processing already carried out. Analytics and Marketing consent can be withdrawn directly through ‘Manage cookie preferences’ in the footer.

Where the GDPR applies, Articles 15–22 provide rights of access, rectification, erasure, restriction, portability and objection, and you may lodge a complaint with the supervisory authority of the member state where the controller is established or with the authority competent for your habitual residence or place of work.

If a United States state privacy law applies to you, it may give further rights—for example to know what is collected, to have it deleted or corrected, or to opt out of targeted advertising or of the sharing of personal information—and may set its own identity-verification and appeal steps. This notice does not determine which state law applies to you.

To exercise any of these, contact hello@astarforyou.com. We confirm receipt and explain what we need in order to act on the request.

Security

Technical and organizational measures include access controls, scoped links, encryption in transit, logging, backups and minimization. No system can promise absolute security.

Cookies and tracking choices

The site uses necessary cookies and—only with consent—preference, analytics and marketing cookies. Non-necessary categories are never preselected.

Marketing consent is what enables Google Ads campaign measurement, including the hashed-email enhanced conversion; advertising personalization stays disabled. Where a United States state law treats that measurement as targeted advertising or as the sharing of personal information, turning the Marketing category off in ‘Manage cookie preferences’ is how you opt out. Full details and controls are provided in the Cookie Policy.

Data protection officer

Where a data protection officer is appointed, current contact details are published here. Otherwise contact the controller at hello@astarforyou.com.

Changes to this notice

Material changes are versioned and published with an updated date. The notice and consent evidence applicable to an order remain frozen by locale.