Effective Date: 02 November 2025

1. Introduction

This Privacy Policy describes how Astromidnight website collects, uses, processes, and discloses your information when you visit and use our website, www.astomidnight.pt.

By using the Service, you agree to the collection and use of information in accordance with this policy.

Contact Information:

• Name: David Bernardo da Cruz
• Email: davidbernardocruz@gmail.com
• Address: Rua Aristides de Sousa Mendes N16, 3Dir - 2670-545 Loures, Portugal

2. Information We Collect

We collect several different types of information for various purposes to provide and improve our Service to you.

A. Personal Data You Provide Directly

We collect Personal Data when you voluntarily provide it to us, such as when you:

• Make a purchase.

Categories of Personal Data Collected:

• Identifiers (for purchanses): Names, Email addresses, Phone numbers
• Financial Data (for purchases): Payment card information, Billing address - Note: If a third-party processor like PayPal or Stripe handles payments, you must state that they handle it.]
• Communications Data: [Content of emails or support messages]

B. Data Collected Automatically (Usage Data)

We automatically collect certain information about your device and usage behavior when you access the Service.

• Identifiers & Network Activity: [IP address, Browser type, Operating system, Internet Service Provider (ISP)]
• Usage Details: [Pages visited, Time spent on those pages, Date and time of your visit, Referring website address]

3. How We Use Your Data (Purposes and Legal Basis)

We use the collected data for various purposes based on the following legal grounds (where required by law, such as GDPR):

Purpose of ProcessingType of Data UsedLegal Basis (GDPR Example)To Provide & Maintain ServiceIdentifiers, Usage DataContractual NecessityTo Process TransactionsIdentifiers, Financial DataContractual NecessityTo Send Marketing CommunicationsIdentifiers (Email)Consent (Opt-in)To Improve Website FunctionalityUsage Data, CookiesLegitimate InterestTo Respond to Support RequestsIdentifiers, Communications DataLegitimate Interest

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (e.g., web beacons, pixels) to track the activity on our Service and hold certain information.

• What are Cookies? Cookies are files with a small amount of data which may include an anonymous unique identifier.
• Types Used: [Example: Functional (for site operation), Analytical (for traffic analysis like Google Analytics), Advertising (for targeted ads)]
• You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

5. Disclosure and Sharing of Your Personal Data

We may share your personal data with the following categories of third parties:

• Service Providers: [E.g., Website Hosting providers, Payment Processors (Stripe, PayPal), Email Marketing Services (Mailchimp)]
• Analytics Providers: [E.g., Google Analytics, which helps us understand website traffic]
• Law Enforcement: When required to do so by law or in response to valid requests by public authorities.

[Crucial CCPA Clause (If applicable):]

• We DO NOT SELL or SHARE your Personal Information (as defined under CCPA) to third parties for monetary or other valuable consideration. [Or state how you do and include a 'Do Not Sell or Share' link/method.]

6. Data Security and Retention

• Security: We use reasonable organizational and technical measures to protect your Personal Data. However, no method of transmission over the Internet is 100% secure.
• Retention: We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy, including retaining information to comply with our legal obligations (e.g., tax and accounting).

7. Your Data Protection Rights

Depending on your location (e.g., EU/EEA under GDPR, California under CCPA), you have certain rights regarding your personal data.

Right (GDPR/CCPA)DescriptionRight to AccessThe right to request copies of the personal data we hold about you.Right to RectificationThe right to have any inaccurate or incomplete data corrected.Right to Erasure/DeleteThe right to request that we delete your personal data (the "right to be forgotten").Right to Object/Opt-outThe right to object to our processing of your personal data or opt-out of the "sale or sharing" of your data.Right to Withdraw ConsentThe right to withdraw consent at any time where we relied on your consent to process your personal data.

How to Exercise Your Rights:

• To exercise any of these rights, please contact us at [Your Privacy Contact Email]. We will respond to your request within the legally required timeframe.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. We encourage you to review this Privacy Policy periodically