Informativa sulla privacy

Privacy Policy

Last updated: October 16, 2026

This policy explains how Ostenso LLC processes your personal data when you visit our store or buy from us. It is written to meet the EU General Data Protection Regulation (GDPR) and applicable US privacy laws.

1. Data controller

Ostenso LLC
30 N Gould St, Ste R
Sheridan, WY 82801, United States
Email: support@ostenso.com

For any privacy question or request, email support@ostenso.com.

2. Data we process

  • Identity and contact data: name, email address, phone number (if you give it), billing and shipping address.
  • Order and payment data: products bought, order value, order history. Card details are handled by our payment providers; we do not store full card numbers.
  • Communications: messages you send us, including withdrawal and refund requests.
  • Device and usage data: IP address, browser and device type, pages viewed, referring site, and cookie or pixel identifiers.

3. Purposes and legal bases

  • Processing and delivering your order, payments, refunds and withdrawals — performance of a contract (Art. 6(1)(b) GDPR).
  • Customer support and handling complaints — performance of a contract and our legitimate interest in answering you (Art. 6(1)(b) and (f)).
  • Keeping invoices and accounting records — legal obligation (Art. 6(1)(c)).
  • Fraud prevention and site security — legitimate interest (Art. 6(1)(f)).
  • Marketing emails — your consent (Art. 6(1)(a)), which you can withdraw at any time via the unsubscribe link.
  • Analytics and advertising cookies and pixels (including the Meta Pixel) — your consent given through our cookie banner (Art. 6(1)(a)). Strictly necessary cookies (cart, checkout, security) are used on the basis of our legitimate interest in running the store.

4. Who we share data with

  • Shopify — our e-commerce platform, which hosts the store and processes order and payment data on our behalf. See Shopify's Privacy Policy.
  • Payment providers — to process your payment.
  • Our fulfilment partner warehouse and delivery carriers — to pack and deliver your order (name, address, phone, order contents).
  • Meta Platforms (Facebook/Instagram) — if you consent, the Meta Pixel and related tools send page-view and purchase events so we can measure and target our ads. Meta Platforms Ireland Ltd. and Ostenso LLC act as joint controllers for the collection and transmission of this data.
  • Email and customer-support tools — to send order emails and answer you.
  • Authorities and advisers — where required by law, or to establish or defend legal claims.

We do not sell your personal data.

5. International transfers

Ostenso LLC is based in the United States, and some of our providers process data outside the European Economic Area. Where personal data is transferred from the EEA to a country without an adequacy decision, we rely on the EU–US Data Privacy Framework (for certified recipients) or the European Commission's Standard Contractual Clauses, together with additional safeguards where needed. You can ask us for a copy of the relevant safeguards.

6. How long we keep data

  • Order, invoice and accounting records: for as long as tax and accounting law requires (in Poland, 5 years from the end of the calendar year in which the tax obligation arose).
  • Data needed to handle claims: until the limitation period for claims under the contract expires.
  • Support messages: up to 3 years after the case is closed.
  • Marketing data: until you withdraw consent or unsubscribe.
  • Cookies and pixels: for the lifetime shown in the cookie banner, or until you withdraw consent.

7. Your rights

Under the GDPR you have the right to access your data, to rectification, to erasure, to restriction of processing, to data portability, and to object to processing based on legitimate interest (including profiling for direct marketing). Where processing is based on consent, you can withdraw consent at any time without affecting earlier processing. To exercise any right, email support@ostenso.com. We reply within one month.

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU country where you live. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).

US residents may have similar rights under the privacy laws of their state, including the right to know, delete and correct personal information. We will not discriminate against you for exercising them.

8. Providing data

Giving us your name, address and email is necessary to conclude and deliver the contract; without it we cannot fulfil your order. Everything else is voluntary.

9. Automated decisions

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing.

10. Children

Our store is not directed at children under 16, and we do not knowingly collect their data.

11. Security

We use technical and organisational measures appropriate to the risk to protect your data. No method of transmission over the internet is completely secure.

12. Changes

We may update this policy. The current version is always published on this page with its "Last updated" date.