Privacy policy

Last updated: September 23, 2026

This policy explains what personal information Astraea Relics ("we", "us") collects when you visit astraearelics.com or buy from us, how we use it, who we share it with, and the choices you have. If anything here is unclear, email info@astraearelics.com.

1. Who we are

Astraea Relics is an online jewelry shop based in Ontario, Canada. We are responsible for the personal information described in this policy. You can reach us at info@astraearelics.com.

2. What we collect

  • Order and contact details: your name, email, phone number (if you give it), shipping and billing address, and what you ordered.
  • Payment details: payments are handled by our payment providers (such as Shopify Payments). We see confirmation that you paid and limited card details such as the card type and last four digits. We never see or store your full card number.
  • Messages: anything you send us by email or through our contact form.
  • Device and browsing information: your IP address, browser and device type, the pages you view and how you found us. This is collected with cookies and similar tools (see section 5).
  • Marketing preferences: whether you have signed up for our emails.

3. How we use it

  • To process, ship and track your order, handle returns and refunds, and send order updates.
  • To answer your questions and give you customer support.
  • To prevent fraud and keep our shop secure.
  • To send you marketing emails, only if you signed up. Every email has an unsubscribe link.
  • To understand how people use our shop and to show our ads to people who may be interested, for example on Facebook and Instagram.
  • To meet our legal, tax and accounting obligations.

If you are in the EU or UK, our legal bases are: carrying out our contract with you (orders), our legitimate interests (running and improving the shop, preventing fraud), your consent (marketing emails and non-essential cookies), and legal obligations.

4. Who we share it with

We do not sell your personal information for money. We share it only with companies that help us run the shop, and only as much as they need:

  • Shopify, which hosts our store and checkout. Shopify's own privacy practices are described at shopify.com/legal/privacy.
  • Payment providers that process your payment.
  • Fulfillment partners and shipping carriers that pack and deliver your order. They receive your name, address, and sometimes your phone number or email for delivery updates.
  • Order tracking and email tools that send you shipping updates and, if you agreed, marketing emails.
  • Advertising and analytics partners such as Meta (Facebook and Instagram) and Google, which help us measure and show our ads. Some privacy laws treat this as "sharing" or "selling". You can opt out on our Your Privacy Choices page.
  • Authorities, when the law requires it, or to protect our rights and prevent fraud.

5. Cookies

We use cookies that the shop needs to work, such as keeping items in your bag. With your consent where the law requires it, we also use analytics and advertising cookies, including the Meta Pixel. You can manage cookies through the cookie banner, your browser settings, or the Your Privacy Choices page. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of targeted advertising for that browser.

6. How long we keep it

We keep order records for as long as tax and accounting laws require, usually up to 7 years. We keep marketing data until you unsubscribe, and support messages for as long as we need them to help you. After that we delete or anonymize the information.

7. Your rights

Depending on where you live, you may have the right to:

  • ask for a copy of the personal information we hold about you;
  • ask us to correct or delete it;
  • ask us to move it to another company;
  • object to or limit how we use it, or withdraw your consent at any time;
  • opt out of targeted advertising or the "sale" or "sharing" of your information.

To use any of these rights, email info@astraearelics.com. We may need to confirm your identity first. We won't treat you differently for using your rights. You can also complain to your local data protection authority. In Canada that is the Office of the Privacy Commissioner, in the UK the ICO, and in the EU your national supervisory authority.

8. International transfers

We are based in Canada and our service providers may process your information in other countries, including the United States. When we transfer information out of the EU or UK, we rely on the safeguards the law allows, such as the European Commission's Standard Contractual Clauses.

9. Security

We use reputable providers and reasonable safeguards to protect your information. No method of sending or storing data is completely secure, so please don't email us sensitive information such as full card numbers.

10. Children

Our shop is not meant for children, and we don't knowingly collect personal information from anyone under 16. If you think a child has given us their information, email us and we'll delete it.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. If we make important changes, we will let you know on this page.

12. Contact

Questions about your privacy or this policy? Email info@astraearelics.com.