Privacy Policy

Last Updated: August 4, 2025

Asteria Creative Group (“we,” “our,” or “us”) operates the website https://worldasteria.com and is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, your rights, and how to exercise them. This policy applies to all visitors, customers, and users of our website and services.

1. Who We Are

We are an independent publisher and creative studio focused on original fantasy storytelling. We operate from Utah, United States, and sell globally through our ecommerce platform powered by WooCommerce.

2. What Data We Collect

a. Orders and Checkout

When you place an order, we collect the following data:

• Full name
• Email address
• Phone number 
• Order notes (if provided)
• Payment details (via Stripe or PayPal — we do not store card data)

This data is used solely to process and fulfill your order, handle customer support, and comply with legal and tax obligations.

b. Newsletter Signups

If you sign up for our email list, we collect your email address with explicit consent. You may unsubscribe at any time using the link in each email or by contacting us.

c. Account Registration

Users who create an account have their name, email, address, and order history stored in our system. You can edit or delete your information at any time through your account dashboard, except for your username.

d. Comments and Reviews

If you leave a comment or product review, we collect:

• The content of your comment
• Your name or username
• Your email address
• Your IP address and browser user agent (for spam protection)
• An anonymized email hash used by Gravatar (if applicable)

Your profile image and comment may be publicly visible on our site.

e. Uploaded Media

If you upload images (e.g., review photos), avoid including location metadata (EXIF GPS) as site visitors may download and extract that information.

f. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain site functionality and session data
• Allow secure login/logout and cart behavior
• Measure traffic with Google Analytics (if consented)
• Retarget visitors with ads via Facebook Pixel (if consented)

You may control cookies via your browser or via the cookie banner provided on our site (if accessing from the EU or similar jurisdictions).

3. Legal Bases for Processing (GDPR)

We process personal data on the following legal bases:

• Contractual necessity: to fulfill your order or provide a service
• Legitimate interest: to improve our site and protect against fraud
• Consent: for email marketing or non-essential cookies
• Legal obligation: to maintain tax and transaction records

4. Who We Share Data With

We do not sell your personal data. We only share information with trusted third-party providers to operate our business:

• Stripe & PayPal: secure payment processing
• Google Analytics: site traffic analysis (if enabled)
• Meta (Facebook Pixel): advertising retargeting (with consent)
• Mailchimp: for email communications
• Hosting providers: for server and performance infrastructure

All third-party services we use are GDPR-compliant and governed by their own privacy policies.

5. Data Retention

We retain personal data only as long as necessary:

• Order records: kept for 7 years (tax compliance)
• User accounts: retained until you delete or request deletion
• Comments/reviews: retained indefinitely unless removed by user or admin
• Newsletter subscriptions: retained until unsubscribed or removed

6. Your Data Rights

Under GDPR and similar laws, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion (“right to be forgotten”)
• Withdraw consent at any time (e.g., for emails or cookies)
• Request data portability (export)
• Object to or restrict data processing

To make any of these requests, contact support@worldasteria.com with the subject line “Information Request.” We will respond within 30 days.

7. International Data Transfers

Your data may be processed in the United States. By using our site, you agree to this transfer. All data is processed using services that apply standard contractual clauses or equivalent protections under EU/UK laws.

8. Children’s Privacy

Our website is not intended for children under the age of 18, and we do not knowingly collect personal data from minors. If we become aware of such data, we will delete it immediately.

9. Data Security

We take data protection seriously and implement measures including:

• SSL encryption for all data transfers
• Secure PCI-compliant payment processing
• Limited access to sensitive information
• Regular security updates and audits

However, no method of online transmission is 100% secure, and you acknowledge this risk by using our site.

10. Automated Decision Making

We do not use your data for any automated decision-making or profiling that produces legal effects or significantly affects you.

11. External Links

Our website may contain links to third-party sites. We are not responsible for their content or data practices. Please review their privacy policies before submitting information.

12. Policy Updates

This Privacy Policy may be updated periodically. All changes will be posted on this page with an updated effective date. Continued use of the site after changes are posted constitutes acceptance of the new terms.

13. Contact Information

For all privacy-related inquiries, you may contact us at:

Email: support@worldasteria.com
Business: Asteria Creative Group
Location: Utah, United States