Privacy policy
PRIVACY POLICY
Last updated: October 10, 2026
ASTRA Layered operates https://astralayered.com and provides the related online store, products, content, customer accounts, communications, and other services described in this Privacy Policy (collectively, the “Services”).
This Privacy Policy explains how ASTRA Layered (“ASTRA Layered,” “we,” “us,” or “our”) collects, uses, stores, and discloses personal information when you visit or use the Services, place an order, create an account, submit personalization information, subscribe to marketing communications, post a review, or otherwise communicate with us.
Our online store is hosted by Shopify, which provides the e-commerce platform that enables us to offer the Services.
Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read and understood how we handle personal information as described below.
1. PERSONAL INFORMATION WE COLLECT
“Personal information” means information that identifies you or can reasonably be linked to you. It does not include information that has been anonymized or de-identified so that it can no longer reasonably identify you.
Depending on how you interact with the Services, we may collect the following categories of personal information.
Contact Information
This may include:
- Name
- Email address
- Telephone number
- Billing address
- Shipping address
- Other delivery or contact details
Order and Transaction Information
This may include:
- Products viewed or purchased
- Shopping cart and wishlist activity
- Order number and order history
- Returns, exchanges, refunds, cancellations, and customer-service history
- Discounts and promotional codes used
- Shipping status and tracking information
- Transaction date, amount, currency, and payment status
Payment Information
Payment information may include your selected payment method, billing details, payment status, transaction identifiers, and limited payment information provided by our payment processors.
Complete payment card information is submitted directly to Shopify or another authorized payment provider. ASTRA Layered generally does not receive or store your complete credit card or debit card number.
Account Information
If you create a customer account, we may collect:
- Username or email address
- Encrypted account credentials
- Account preferences
- Saved addresses
- Order history
- Privacy and communication settings
Personalization and Custom-Order Information
When you purchase a personalized, engraved, custom-made, photo-based, or made-to-order product, we may collect:
- Names, initials, dates, words, messages, and engraving instructions
- Birth months, zodiac signs, birthstones, and other selected product attributes
- Uploaded photographs, images, artwork, or files
- Size, finish, color, material, and design preferences
- Other instructions submitted for production
We use this information to prepare and fulfill your personalized order.
If you submit an image or information relating to another person, you confirm that you have the necessary permission to provide it to us for the requested product.
We do not use customer-uploaded personalization images for unrelated advertising or promotional purposes without permission.
Communications
We may collect information contained in communications with us, including:
- Customer-support inquiries
- Emails and messages
- Return or refund requests
- Product questions
- Complaints and dispute information
- Photographs submitted to document damage, defects, or incorrect products
Reviews and User Content
If you submit a product review or other content, we may collect:
- Your name or chosen display name
- Email address
- Review text
- Ratings
- Photographs or videos
- Product and order information
- Information about incentives or compensation associated with the review
Your display name, review, rating, and submitted media may be displayed publicly when you choose to publish a review.
Device and Technical Information
We may automatically collect:
- IP address
- Browser type and version
- Device type
- Operating system
- Language and time-zone settings
- Cookie and device identifiers
- Network and approximate location information
- Referring URLs
- Website error and security information
Usage Information
We may collect information about how you interact with the Services, including:
- Pages and products viewed
- Links and buttons selected
- Searches performed
- Time spent on pages
- Cart and checkout activity
- Referral source
- Advertising interactions
- Website navigation and session information
Marketing Information
We may collect:
- Email-subscription status
- Marketing preferences
- Email opens and link clicks
- Advertising audiences and campaign interactions
- Consent and opt-out records
2. SOURCES OF PERSONAL INFORMATION
We may collect personal information from:
- You directly, when you place an order, create an account, contact us, upload customization files, submit a review, or subscribe to marketing.
- Your device or browser through cookies, pixels, tags, server logs, and similar technologies.
- Shopify and payment providers used to operate our store and process transactions.
- Shipping, fulfillment, tracking, production, and logistics providers.
- Customer-support, email-marketing, review, fraud-prevention, analytics, and advertising providers.
- Social media platforms and advertising partners.
- Other parties when permitted or required by applicable law.
3. HOW WE USE PERSONAL INFORMATION
We may use personal information for the following purposes.
Providing and Fulfilling the Services
We use personal information to:
- Process and confirm orders
- Process authorized payments
- Produce personalized and custom products
- Arrange fulfillment and delivery
- Provide tracking information
- Manage accounts
- Process returns, exchanges, refunds, and cancellations
- Respond to product and order questions
- Provide customer support
- Display customer reviews
- Remember preferences and shopping-cart contents
Personalization and Service Improvement
We may use information to:
- Recommend relevant products
- Understand customer interests
- Improve website navigation and performance
- Develop products and services
- Measure customer experience
- Diagnose technical issues
- Conduct internal reporting and analytics
Marketing and Advertising
Subject to applicable law and your choices, we may use personal information to:
- Send promotional emails
- Provide abandoned-cart or browse-reminder communications
- Inform you about products, offers, and promotions
- Measure marketing performance
- Create advertising audiences
- Display more relevant advertising on third-party platforms
Security and Fraud Prevention
We may use personal information to:
- Verify orders and payments
- Detect fraudulent or unauthorized transactions
- Protect customer accounts
- Secure the website
- Prevent misuse, malicious activity, and violations of our terms
- Investigate suspicious activity
Legal and Business Purposes
We may use personal information to:
- Comply with tax, accounting, regulatory, and legal obligations
- Respond to valid legal processes
- Establish, exercise, or defend legal claims
- Enforce our policies and agreements
- Maintain business and transaction records
- Protect our rights, customers, business partners, and other persons
4. LEGAL BASES FOR PROCESSING
Where applicable law requires us to identify a legal basis, we rely on one or more of the following:
Performance of a Contract
We process information when necessary to accept, produce, fulfill, deliver, return, exchange, or refund an order, or otherwise provide requested Services.
Consent
We may rely on your consent for activities such as promotional marketing, non-essential cookies, targeted advertising technologies, or other processing where consent is required.
You may withdraw consent at any time. Withdrawal does not affect processing that occurred before consent was withdrawn.
Legitimate Interests
We may process information for legitimate business interests such as:
- Providing customer service
- Improving our website and products
- Understanding business performance
- Preventing fraud
- Protecting the Services
- Measuring marketing effectiveness
- Maintaining business records
We rely on legitimate interests only where those interests are not overridden by your rights and interests.
Legal Obligations
We may process and retain information to comply with applicable tax, accounting, consumer-protection, regulatory, and legal requirements.
5. COOKIES AND SIMILAR TECHNOLOGIES
We use cookies, pixels, tags, local storage, and similar technologies to operate the Services, remember preferences, understand website usage, prevent fraud, measure performance, and support advertising.
These technologies may include:
Strictly Necessary Technologies
These are required for functions such as:
- Shopping cart and checkout
- Payment and fraud prevention
- Customer accounts
- Security
- Privacy settings
- Core website operation
Functional Technologies
These help remember your preferences and improve website functionality.
Analytics Technologies
These help us understand website traffic, visitor activity, conversions, and performance. These may include technologies provided by Google Analytics and Shopify.
Advertising Technologies
These may be used to measure advertising campaigns, create advertising audiences, and show more relevant advertising. These may include technologies provided by Google and Meta Platforms.
Where required by law, we request consent before using non-essential analytics or advertising technologies.
You can manage applicable choices through the cookie banner or privacy settings displayed on our website. You may also manage cookies through your browser settings, although disabling certain cookies may affect the operation of the Services.
Where supported and legally required, we process recognized Global Privacy Control signals as requests to opt out of certain sale, sharing, or targeted-advertising activities.
For more information about Global Privacy Control, visit:
https://globalprivacycontrol.org/
6. EMAIL MARKETING AND COMMUNICATION PREFERENCES
If you subscribe to marketing communications, we may send emails about products, promotions, collections, abandoned carts, browsed products, and other ASTRA Layered updates.
We may use Klaviyo or another authorized provider to deliver and measure marketing communications.
You can unsubscribe from promotional emails at any time by selecting the unsubscribe link included in the email.
After unsubscribing, we may still send non-promotional communications necessary to:
- Confirm or fulfill an order
- Provide shipping updates
- Respond to customer-service requests
- Process a return or refund
- Provide security or account notices
- Comply with legal obligations
7. HOW WE DISCLOSE PERSONAL INFORMATION
We may disclose personal information when reasonably necessary for the purposes described in this Privacy Policy.
Shopify
Our online store is hosted by Shopify. Shopify processes information to operate the store, provide checkout and account features, support fraud prevention, improve its services, and provide certain advertising and analytics features.
For more information, review the Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/app-users
You can access Shopify’s privacy portal at:
https://privacy.shopify.com/en
Payment Providers
We disclose necessary transaction and billing information to authorized payment processors, card networks, banks, and fraud-prevention providers.
Production and Fulfillment Providers
We may disclose order details, product selections, customization instructions, uploaded personalization files, and delivery information to manufacturers, production partners, fulfillment providers, and warehouses that help prepare your order.
Shipping and Tracking Providers
We may disclose delivery information to shipping carriers, logistics providers, customs agents, tracking platforms, and other delivery partners.
Email and Customer-Communication Providers
We may disclose necessary contact, order, shopping, consent, and engagement information to Klaviyo or other authorized communication providers.
Review Providers
We may disclose relevant order and customer information to Judge.me or another review provider so that review requests can be sent and verified reviews can be displayed.
Analytics and Advertising Partners
Subject to applicable law and your privacy choices, we may disclose identifiers, device information, usage information, and commercial information to providers such as:
- Google Analytics
- Google Ads
- Google Merchant Center
- Meta Platforms, including Facebook and Instagram
- Shopify analytics and advertising services
These providers may process information under their own privacy notices.
Professional and Technical Providers
We may disclose information to providers of:
- Website hosting and infrastructure
- Information technology
- Cloud storage
- Security and fraud prevention
- Customer support
- Accounting
- Legal and compliance services
Business Transactions and Legal Disclosures
We may disclose information:
- In connection with a merger, acquisition, financing, restructuring, sale, or transfer of business assets
- To comply with applicable law, court orders, subpoenas, warrants, or other valid legal processes
- To investigate fraud, security incidents, or policy violations
- To protect the rights, safety, and property of ASTRA Layered, our customers, and others
With Your Direction or Consent
We may disclose information when you request, direct, or consent to the disclosure.
8. TARGETED ADVERTISING, SALE, AND SHARING
ASTRA Layered does not sell personal information for monetary consideration.
However, depending on the technologies enabled on our website and the laws where you reside, disclosure of identifiers, device information, usage information, or commercial information to advertising and analytics partners may be considered a “sale,” “sharing,” or processing for targeted advertising.
You may also use the privacy settings or cookie banner available on our website.
If you visit with a legally recognized Global Privacy Control signal enabled, we will process the signal as required by applicable law for the browser or device sending it.
We do not knowingly sell or share for targeted advertising the personal information of individuals under 16 years of age.
9. SENSITIVE PERSONAL INFORMATION
Certain information, such as account credentials, payment information, or precise customization details, may be considered sensitive personal information under some laws.
We use sensitive personal information only as reasonably necessary to:
- Provide requested products and Services
- Complete authorized transactions
- Maintain account and website security
- Prevent fraud
- Comply with applicable law
We do not use sensitive personal information to infer characteristics about you for unrelated purposes.
10. THIRD-PARTY WEBSITES AND SERVICES
The Services may contain links to websites, platforms, or services operated by third parties.
We do not control and are not responsible for the privacy, security, content, or practices of third-party services. Please review their privacy policies before providing personal information.
The inclusion of a third-party link does not necessarily mean that ASTRA Layered endorses that third party.
11. CHILDREN’S PRIVACY
The Services are not directed to children under 13 years of age or any higher minimum age required by applicable local law.
We do not knowingly collect personal information directly from children in violation of applicable law.
If you are a parent or guardian and believe a child has provided personal information to us without appropriate authorization, contact us at support@astralayered.com so that we can review and, where appropriate, delete the information.
We do not knowingly sell or share for targeted advertising the personal information of individuals under 16 years of age.
12. SECURITY
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information.
However, no method of transmission over the internet or electronic-storage system is completely secure. We cannot guarantee absolute security.
Please do not send complete payment-card details, passwords, or other highly sensitive information through ordinary email or other unsecured communication channels.
You are responsible for maintaining the confidentiality of your customer-account credentials.
13. DATA RETENTION
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:
- Fulfill orders and provide customer support
- Maintain accounts
- Complete returns and refunds
- Comply with tax, accounting, and legal obligations
- Prevent fraud
- Resolve disputes
- Enforce agreements
- Maintain business records
The retention period depends on the type of information, the reason it was collected, legal requirements, and whether the information is needed to establish or defend legal claims.
When information is no longer reasonably required, we may delete, anonymize, or securely dispose of it, subject to applicable law and technical limitations.
14. INTERNATIONAL DATA TRANSFERS
ASTRA Layered, Shopify, and our service providers may process personal information in countries other than the country where you live.
These countries may have different data-protection laws.
Where required, we use recognized safeguards for international transfers, such as:
- Adequacy decisions
- Standard Contractual Clauses approved by the European Commission
- Applicable United Kingdom transfer mechanisms
- Other legally recognized transfer safeguards
Information necessary for personalized production, fulfillment, delivery, support, or other Services may be processed by providers located in different countries.
15. YOUR PRIVACY RIGHTS
Depending on where you live and subject to applicable exceptions, you may have the right to:
- Request access to personal information held about you
- Request information about the categories, sources, purposes, and recipients of your personal information
- Request correction of inaccurate personal information
- Request deletion of personal information
- Request a portable copy of certain personal information
- Object to or restrict certain processing
- Withdraw consent
- Opt out of sale, sharing, or targeted advertising
- Opt out of promotional communications
- Appeal a decision made regarding a privacy request
- Lodge a complaint with an applicable data-protection authority
These rights are not absolute. We may retain or continue processing information where permitted or required by law.
We will not unlawfully discriminate against you for exercising an applicable privacy right.
16. EXERCISING YOUR RIGHTS
You may submit a privacy request by contacting:
To protect personal information, we may need to verify your identity before completing a request.
Verification may require confirmation of information reasonably related to your account, communications, or transactions. We will not request more information than reasonably necessary for verification.
Where permitted by law, you may authorize an agent to submit a request on your behalf. We may request evidence of authorization and may ask you to verify your identity directly.
We will respond within the period required by applicable law.
If we deny a request, we will provide an explanation where required. Where an appeal right applies, you may appeal by emailing support@astralayered.com with “Privacy Request Appeal” in the subject line.
17. PRIVACY RIGHTS FOR EEA AND UK RESIDENTS
If you are located in the European Economic Area or the United Kingdom, you may have rights to:
- Access your personal information
- Correct inaccurate information
- Request deletion
- Restrict processing
- Object to processing based on legitimate interests
- Receive certain information in a portable format
- Withdraw consent
- Lodge a complaint with your local supervisory authority
Withdrawal of consent does not affect the lawfulness of processing performed before withdrawal.
Nothing in this Privacy Policy limits rights that cannot be waived under applicable law.
18. COMPLAINTS
If you have a complaint about our handling of personal information, contact us first at:
We will review the complaint and respond as required by applicable law.
Depending on where you live, you may also have the right to contact or lodge a complaint with your local privacy, consumer-protection, or data-protection authority.
19. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy to reflect changes to our Services, technologies, business practices, or legal obligations.
When we update the policy, we will post the revised version on this page and update the “Last updated” date.
Where required by law, we will provide additional notice or request consent before applying a material change.
20. CONTACT INFORMATION
If you have questions about this Privacy Policy, our privacy practices, or would like to exercise an applicable privacy right, contact us at:
ASTRA Layered
Email:
support@astralayered.com
Website:
https://astralayered.com