1. Who we are
Alta is an online store for skincare, hair care, cosmetics, body care, wellness and men's grooming, operated by [Alta's legal company name], [registered business address] (“Alta”, “we”, “us”).
This policy explains what personal information we collect when you visit or shop with us, how we use it, who we share it with, and the choices you have. It applies to our website and to any of our apps that link to it.
2. Information we collect
We collect only what we need to run your account, deliver your orders and look after you as a customer:
- Account details — your name, email address, username and password. Your password is stored only as a secure one-way hash; we never see or store it in plain text. You can also add a profile picture and phone number.
- Sign-in with Google or Apple — if you choose it, we receive your name and email address from that provider to create or sign in to your account.
- Delivery addresses — recipient name, street, city, state, postcode, country, phone number and any delivery note you add.
- Orders and payments — what you buy, order totals, delivery and return history. Card payments are handled by our payment provider; we do not receive or store your full card number or security code. For saved payment methods we keep only a reference token from the provider together with the card brand, expiry date and cardholder name, so we can show you which card is which.
- Things you send us — product reviews and ratings, “helpful” votes, support tickets and messages, return requests, and your email address if you join our newsletter.
- Shopping activity — your cart, wishlist, recently viewed products, coupons used, and your notification preferences.
- Device information — if you allow push notifications, a notification token for your device. Like most websites, our servers also record technical details such as your IP address, browser type and the pages requested, which we use for security and troubleshooting.
3. How we use your information
- To create and secure your account, including email verification and optional two-step sign-in codes.
- To process, deliver and support your orders, payments, returns and refunds.
- To send you order updates, account and security emails, and — where you've allowed them — push notifications.
- To send our newsletter if you subscribe. You can unsubscribe at any time.
- To show your reviews, keep your cart and wishlist, and remember what you've recently viewed.
- To answer your questions and resolve support tickets.
- To prevent fraud, abuse and security incidents, and to meet our legal, tax and accounting obligations.
Where the law requires a legal basis for using your information, we rely on performing our contract with you (your orders and account), our legitimate interests in running and protecting the store, your consent (for the newsletter and push notifications, which you can withdraw), and our legal obligations.
4. Who we share it with
We do not sell your personal information, and we don't share it for other companies' advertising. We share it only with service providers who help us run Alta, and only what they need:
- Payment processing — SSLCommerz handles card, mobile-banking and other online payments.
- Email delivery — Resend sends our account, order and newsletter emails.
- Push notifications — Google Firebase Cloud Messaging delivers notifications to devices that have allowed them.
- Sign-in providers — Google and Apple, when you choose to sign in with them.
- Delivery partners — couriers receive your name, delivery address and phone number to deliver your order.
- Hosting and infrastructure — the providers that host our website and databases.
We may also disclose information if required by law, to protect the rights and safety of our customers or of Alta, or as part of a merger, acquisition or sale of the business, in which case this policy will continue to apply to your information.
5. Cookies and local storage
We use a single essential cookie to keep you signed in and to keep your session secure. It cannot be read by scripts on the page, and the site cannot work properly without it.
We also use your browser's local storage to remember your sign-in and a few display preferences, such as the name shown in the navigation bar, so pages load faster.
We do not use advertising cookies or third-party analytics or tracking tools. If that changes, we'll update this policy first.
6. How long we keep it
We keep your account information for as long as your account is open. Order, payment and invoice records are kept for as long as tax and accounting law requires, even after an account is closed. Support tickets, reviews and other content are kept while they're needed for the purpose they were collected for. Short-lived items such as verification codes expire within minutes.
When information is no longer needed, we delete it or make it anonymous.
7. How we protect it
We use encrypted connections, store passwords only as strong one-way hashes, and offer optional two-step sign-in. Access to customer information inside Alta is limited to the staff who need it to do their jobs.
No system can be guaranteed completely secure. If we become aware of a breach that affects your information, we'll let you know as the law requires.
8. Your choices and rights
- Access and update — you can view and edit your profile, addresses and notification settings at any time in your account.
- Delete your account — you can request deletion from your account settings. We'll delete or anonymise your information, except what we must keep for legal reasons such as order records.
- Marketing — unsubscribe from the newsletter using the link in any email, and turn push notifications off in your account or browser settings.
- Other requests — depending on where you live, you may have the right to a copy of your information, to correct it, to restrict or object to how we use it, or to complain to a data-protection authority. Contact us at [privacy / support email] and we'll respond within the time the law allows.
9. Children
Alta is not intended for children under 13, and we don't knowingly collect personal information from them. Customers under 18 should use Alta with the involvement of a parent or guardian. If you believe a child has given us personal information, please contact us and we'll delete it.
10. International transfers
Our service providers may process information in countries other than the one you live in. Where they do, we take steps to make sure your information remains protected as described in this policy.
11. Changes to this policy
We may update this policy from time to time. When we do, we'll change the “Last updated” date above, and if the changes are significant we'll let you know by email or with a notice on the site.
12. Contact us
Questions about this policy or your information? Contact us at [privacy / support email], by writing to [Alta's legal company name], [registered business address], or through the Help Center in your account.