Privacy Policy

Your Privacy Matters to Us

When you shop with EASTSTARGENERAL, you trust us with your information. That trust means more to us than anything. We built this brand on honesty and transparency, and that carries through to how we handle your personal data.

This Privacy Policy explains what information we collect, why we collect it, and how we protect it. It also covers your rights under laws like the GDPR in Europe and the CCPA in California. We keep things simple on purpose—no confusing legal jargon, just clear facts about how we operate.

Our store is based at 101 Montgomery St, Suite 200, San Francisco, CA 94104. If you have any questions about your data, you can reach our privacy team anytime at [email protected].

What Information We Collect

We only collect what we need to serve you well. Here is exactly what that looks like:

• Your name and contact details. This includes your email address, phone number, and billing information so we can process your orders and keep you updated.
• Your shipping address. We need this to get your order to your door.
• Payment information. We process payments through trusted partners like Stripe and PayPal. Your full payment details go directly to them, not to us. We only receive confirmation that your payment was successful.
• Browsing data and cookies. When you visit our site, we collect information like which pages you view, how you navigate, and what you add to your cart. This helps us improve your shopping experience.

We collect this information when you place an order, sign up for our newsletter, contact our support team, or simply browse our store.

Why We Collect Your Data

Every piece of information we collect has a purpose. Here is how we use it:

• Order processing. Your name, address, and payment info help us fulfill your orders, handle returns, and send you tracking updates.
• Customer service. When you reach out with a question or concern, your data helps us respond quickly and accurately.
• Marketing. If you have given us consent, we may send you emails about new arrivals, special offers, or stories from our brand. You can opt out anytime.
• Analytics. We study browsing patterns to understand what our customers love and how we can make our site better for everyone.

Our Legal Basis for Processing

Under the GDPR, we need a valid reason to process your data. Here is how that works:

• Consent. When you sign up for our newsletter or accept cookies, you give us clear permission to use your data for those specific purposes.
• Contract. When you place an order, we need your data to fulfill that contract with you.
• Legitimate interest. We use browsing data to improve our site. This benefits you and us, and we always balance this against your privacy rights.

How Long We Keep Your Data

We do not hold onto your information forever. Here is our retention schedule:

• Order data. We keep order-related information for seven years to comply with tax laws. After that, we delete or anonymize it.
• Marketing data. We keep your email and preferences until you tell us to stop. You can unsubscribe from any marketing email, and we will remove you from our list right away.
• Browsing data. Analytics data is retained for up to 26 months, after which it is anonymized.

Who We Share Your Data With

We never sell your personal information. That is a promise. We do work with trusted third-party partners who help us run our business:

• Payment processors. Stripe and PayPal handle your payment securely. They have their own strict privacy policies.
• Shipping carriers. We share your name and address with carriers so they can deliver your package.
• Email service providers. If you have opted into marketing, we use email services to send you messages. They cannot use your data for any other purpose.

These partners are carefully chosen. They are contractually obligated to protect your data and use it only for the specific services they provide to us.

Your Rights Under GDPR

If you are in the European Union, you have important rights regarding your personal data:

• Right to access. You can ask us for a copy of the data we hold about you.
• Right to rectification. If your information is incorrect, you can ask us to fix it.
• Right to erasure. You can ask us to delete your data, subject to certain legal exceptions.
• Right to restrict processing. You can ask us to limit how we use your data.
• Right to data portability. You can request your data in a machine-readable format.
• Right to object. You can object to processing for marketing or analytics purposes.

To exercise any of these rights, just email us at [email protected]. We will respond within 30 days.

Your Rights Under CCPA

If you are a California resident, the CCPA gives you additional protections:

• Right to know. You can request details about the personal information we have collected about you in the past 12 months.
• Right to delete. You can ask us to delete your personal information, with some exceptions.
• Right to opt-out. We do not sell your personal information, so there is nothing to opt out of. But if that ever changes, we will let you know and give you a clear way to say no.
• Right to non-discrimination. Exercising your privacy rights will never affect the quality of service you receive from us.

California residents can exercise these rights by emailing [email protected]. We will verify your identity and respond within 45 days.

Cookie Policy

Our website uses cookies to make your experience smoother and more personalized. Here is what you need to know:

• Essential cookies. These keep our site running. They remember what is in your cart and help you log in securely.
• Analytics cookies. These help us understand how people use our site so we can improve it.
• Marketing cookies. These help us show you relevant offers. We only use these if you give us consent.

When you first visit our site, you will see a cookie banner that asks for your consent. You can change your preferences anytime by adjusting your browser settings or contacting us.

How We Protect Your Data

Security is built into everything we do. Here are the measures we take:

• SSL encryption. Your data is encrypted when it travels between your browser and our servers. Look for the padlock in your address bar.
• Access controls. Only team members who need your data to do their jobs can access it. Everyone is trained on privacy best practices.
• Regular audits. We review our systems and processes regularly to catch any potential issues before they become problems.

Children’s Privacy

We do not knowingly collect personal information from anyone under the age of 16. Our website and services are designed for adults. If we learn that we have collected data from a child, we will delete it immediately. If you believe a child has given us their information, please tell us right away at [email protected].

Cross-Border Data Transfers

We are based in the United States. If you are in the European Union or the United Kingdom, your data may be transferred to and processed in the US. We have safeguards in place, including Standard Contractual Clauses approved by the European Commission, to ensure your data remains protected wherever it is processed.

Updates to This Policy

We may update this Privacy Policy from time to time as our business evolves or as laws change. When we do, we will post the updated version here and change the date at the top. If the changes are significant, we will also notify you by email.

We encourage you to check back occasionally so you always know how your data is being handled.

Get in Touch

Your privacy is personal to us. If you have any questions, concerns, or requests about your data, please reach out to our privacy team:

• Email: [email protected]
• Mail: 101 Montgomery St, Suite 200, San Francisco, CA 94104

We aim to respond to all inquiries within 48 hours. For requests related to your legal rights, we will respond within the timeframe required by applicable law.

Thank you for trusting EASTSTARGENERAL. We take that responsibility seriously, and we are here to answer any questions you have.