Privacy Policy

The controller responsible for your personal data is:

• NOSTRADOVUS SRL
• Sole registration code (CUI): 51754637
• Trade Register no.: J2025032771003
• Registered office: Str. Cerbului 39, 545300 Reghin, jud. Mureș, România
• Email: contact@nostradovus.com

We only collect the data we need to respond to you and fulfil orders:

• Contact form: your name, email address, the subject you select and your message.
• Orders: your name, email address, shipping address and (optionally) your phone number.
• Payment: card payments are handled directly by Stripe. We do not receive or store your full card number.
• Usage data: aggregated, privacy-friendly analytics about how the site is used and how it performs.

We use your data on the following legal bases under the GDPR:

• To process and deliver your order, and to communicate with you about it — necessary for the performance of our contract with you (Art. 6(1)(b)).
• To respond to enquiries you send through the contact form — based on your request and our legitimate interest in answering you (Art. 6(1)(f)).
• To keep records of transactions and comply with accounting and tax obligations — necessary for compliance with a legal obligation (Art. 6(1)(c)).
• To maintain, secure and improve the website — based on our legitimate interest in running a reliable service (Art. 6(1)(f)).

We do not sell your personal data. We share it only with the providers we rely on to operate the storefront, and only as far as necessary:

• Stripe — payment processing. Order and payment details are stored in Stripe; see Stripe’s privacy policy.
• Resend — delivery of contact-form messages to our inbox.
• Vercel — website hosting and privacy-friendly, cookieless analytics.
• Shipping couriers — to deliver your order to the address you provide.

We do not operate our own customer database. Order records are kept in Stripe rather than on a separate server.

We do not use advertising or third-party tracking cookies. Your shopping bag is stored locally in your own browser (local storage) so that its contents persist between visits; this information stays on your device. Our analytics are designed to be cookieless. Stripe may set cookies that are strictly necessary to process payments securely.

Some of our service providers may process data outside the European Economic Area. Where this happens, appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) are applied to protect your data.

We keep order and transaction records for as long as required to fulfil the order and to meet our legal, accounting and tax obligations. Contact-form messages are kept only for as long as needed to handle your enquiry. After that, data is deleted or anonymised.

Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to processing, and to data portability. To exercise any of these rights, contact us at contact@nostradovus.com.

You also have the right to lodge a complaint with the Romanian data protection authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), dataprotection.ro.

This website is not directed at children, and we do not knowingly collect personal data from anyone under 16 years of age.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

For any privacy-related questions, please reach us through our contact page or by email at contact@nostradovus.com.