Privacy policy

Last Updated: March 14, 2026

This Privacy Policy describes how Ostro (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from the Site (the "Services") or otherwise communicate with us. For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy.

1. Information We Collect

We collect personal information—information that identifies, relates to, describes, or can be associated with you—from various sources as described below.

Categories of Personal Information We Collect:

Contact Details: Name, billing address, shipping address, phone number, and email address.
Financial Information: Credit card, debit card, or other payment card information, bank account details, and transaction payment details.
Account Information: Username, password, security questions, and account preferences.
Transaction Information: Items viewed, cart contents, wishlists, purchase history, returns, and exchanges.
Customer Support Information: Information you choose to include in communications with us, such as inquiries sent through the Services.
Device & Usage Information: IP address, device identifiers, browser type, and information about how you interact with our website (collected via cookies and similar technologies).

2. How We Use Your Personal Information

We use your personal information for the following purposes:

Providing Services: To fulfill orders, process payments, manage your account, and arrange for shipping and returns.
Marketing & Advertising: To send promotional communications and show you targeted advertisements for products we think you’ll like.
Security & Fraud Prevention: To verify accounts, monitor for malicious activity, and protect our users and business.
Communication: To provide customer support and respond to your requests.
Legal Compliance: To comply with applicable laws and respond to legal processes.

3. Disclosure of Personal Information

We may share your personal information with third parties in the following circumstances:

Service Providers: With vendors who help us run our business, such as Shopify (our hosting provider), payment processors, and delivery companies.
Marketing Partners: To provide personalized advertising and marketing services.
Business Transfers: In connection with a merger, sale, or bankruptcy.
Legal Obligations: To comply with the law or protect the rights and safety of Ostro or others.

4. Your Rights and Choices

Depending on where you live, you may have the following rights regarding your personal information:

Right to Access/Know: Request a copy of the personal information we hold about you.
Right to Deletion: Request that we delete your personal information.
Right to Correction: Request that we fix inaccurate information.
Right to Portability: Request a transfer of your data to a third party.
Opt-out of Targeted Advertising: You can opt-out of "sales" or "sharing" of information for targeted ads. We also recognize the Global Privacy Control (GPC) signal.
Manage Communication: You can unsubscribe from marketing emails at any time.

5. International Data Transfers

Your personal information may be transferred to, stored, and processed outside of your country of residence, including in the United States. When we transfer data from the EEA or UK, we rely on recognized legal mechanisms such as Standard Contractual Clauses (SCCs).

6. Security and Retention

We implement security measures to protect your data, but please note that no system is 100% secure. We retain your information for as long as necessary to provide Services, resolve disputes, and comply with legal obligations.