basta. ("we", "our", "us") is committed to protecting and respecting your privacy. this Privacy Policy explains how we collect, use, and protect your personal data when you visit our website bastadot.com, make a purchase, or otherwise interact with us.
information we collect
we may collect and process the following data about you:
personal identification information: name, address, email address, phone number, and payment information.
technical data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
marketing and communications data: your preferences in receiving marketing from us and your communication preferences.
how we use your information
we use your personal data to:process your orders and manage your account, improve our website and services, send you marketing communications (where you have consented to receive such communications), provide customer support, comply with legal obligations.
legal basis for processing
we process your personal data on the following legal bases: contractual necessity: to fulfill our contract with you when you make a purchase, consent: when you have given us consent to process your data, for example, to receive marketing emails, legal obligation: to comply with legal requirements, legitimate Interests: for our legitimate business interests, such as improving our services and website functionality.
sharing your information
we do not sell your personal data to third parties. however, we may share your information with: service providers who assist in the operation of our business (e.g., payment processors, delivery companies), legal and regulatory authorities if required by law, other third parties with your consent.
data security
we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk of processing your personal data. This includes encryption, secure servers, and access controls.
​
data retention
we retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
​
your rights
under the GDPR, you have the right to: access your personal data, rectify inaccurate or incomplete data, erase your personal data, restrict the processing of your data, object to the processing of your data, data portability, withdraw consent at any time (where processing is based on consent), to exercise these rights, please contact us at hello@bastadot.com.
​
changes to this privacy policy
we may update this Privacy Policy from time to time. we will notify you of any changes by posting the new Privacy Policy on our website. we recommend you review this policy periodically for any changes.