PRIVACY POLICY
Last updated 6 October 2026
1. Who we are
Ryssandra operates the web shop at ryssandra.com. For questions about your personal data, contact us at [email protected]. We are the controller of the personal data collected through this site.
2. What we collect and why
| Data | When | Why | Legal basis |
|---|---|---|---|
| Name, delivery and billing address, email, phone, order contents | When you place an order | Processing and delivering your order, handling returns | Performance of a contract |
| Payment reference (transaction ID, status) | When you pay | Bookkeeping and refunds. Full card details are handled by the payment provider and never reach us | Contract, legal obligation |
| Name and email | When you write to us | Answering your question, sending order updates | Contract, legitimate interest |
| Order history and browsing statistics | Only with your consent | Improving the shop and measuring our marketing | Consent |
| Server log data (IP address, time, page requested) | Every visit | Keeping the site secure and available | Legitimate interest |
3. Who we share data with
We only share what is needed to run the shop: the payment provider that processes your payment, the shipping partner that delivers your parcel, and our hosting and email providers. We never sell your data. Each partner processes data only to deliver its service.
4. International transfers
Our shop is hosted in the United States. Order and fulfilment data may also be processed by partners located outside the European Economic Area. Where that happens, we rely on the safeguards required by European data protection law, such as the European Commission’s standard contractual clauses.
5. How long we keep it
Order records are kept for as long as tax and accounting law requires, after which they are deleted. Contact messages are deleted after one year. Server logs are kept for a short period for security purposes. Your cookie preferences are stored for six months.
6. Your rights
You may ask us for a copy of your data, have it corrected or deleted, restrict or object to its use, or receive it in a portable format. If you are in the EU, you can also lodge a complaint with your national data protection authority. Write to [email protected] and we will respond within 30 days.
7. Cookies
Details of every cookie we use, and how to change your consent, are in our Cookie Policy.
8. Changes
If this policy changes materially, we will update the date above and, where required, notify you before the change takes effect.