Privacy Policy

This Privacy Policy explains how Ordely collects, uses, shares, and protects information when you use the Ordely mobile applications for iOS and Android and related website content shown inside the app (including embedded web views).

1) Who we are

Data Controller (the entity responsible for your personal data)

Astera Logistics GmbH
Am Kielsgarben 8
40789 Monheim am Rhein, Germany
Contact: info@ordely.org

App Publisher and Operational Partner (Processor / Service Provider)

FOP Taranets I I (Ukraine)
Address: Ukraine, Kirovohrad region, Petrivsky district, Novy Starodub village, Chkalova street, building 283
Contact: info@sande-it.com
Note: “S&E IT” is a trade name used by the partner (FOP Taranets I I) for branding/communication purposes only and is not a separately registered legal entity.

2) What this Policy covers

This Policy applies to:

• the Ordely mobile applications (iOS and Android);
• the web pages and services accessed through the app;
• customer support communications.

3) Information we collect

A. Information you provide

Depending on how you use the Service, we may collect:

• Account data: name, email, phone, password (hashed), login identifiers.
• Order & delivery data: shipping address, recipient name, delivery notes, order history.
• Customer support: messages, attachments you send, and related metadata.

B. Content you upload (Camera/Photos)

If you choose to upload images (e.g., profile images, product-related photos, support attachments), we may process:

• photos/images you select from your library;
• photos you take using the camera.

C. Location data (When In Use)

If you grant permission, we may process approximate or precise location while the app is in use to:

• help calculate delivery options;
• show nearby pickup/delivery context (if available);
• improve your shopping experience.

You can use the app without sharing location (some features may be limited).

D. Device & usage data (automatic)

We may collect:

• device type, OS version, app version;
• approximate region (based on IP), language;
• interaction and diagnostic data (e.g., crashes, performance, logs).

E. Payments

Payments are typically processed by third-party payment providers on the website. We do not store full payment card numbers in our systems. Payment providers may collect payment details directly.

F. Third-party product data (Rainforest API / Amazon content)

We display product information (such as titles, images, prices, ratings) obtained via Rainforest API, which may reflect content from Amazon domains (e.g., amazon.de / amazon.com). This data may be updated and cached to improve performance.

4) How we use your information

We use information to:

• provide and operate the Service (catalog, cart, orders, account);
• enable uploads and features you request (camera/photo access, location);
• prevent fraud, protect security, and comply with legal obligations;
• maintain and improve performance, reliability, and user experience.

5) Legal bases (EEA/UK users)

Where applicable (GDPR), we rely on:

• Contract: to provide the Service and fulfill orders.
• Consent: for permissions like camera/photos/location (you can withdraw at any time).
• Legitimate interests: security, fraud prevention, service improvement.
• Legal obligation: compliance with applicable laws.

6) Sharing and disclosure

We may share information with:

• Service providers that help operate the Service (hosting, analytics, crash reporting, customer support tools).
• Payment providers to process transactions (payment data handled by them).
• Delivery/fulfillment partners when required to deliver orders.
• Operational partner (Ukraine): We may share necessary order and contact details with FOP Taranets I I to process order requests and customer support on behalf of the Controller.
• Data providers such as Rainforest API to retrieve product data (requests may include technical identifiers like IP, user-agent).
• Legal / safety: if required by law, regulation, or to protect rights and safety.
• Business transfers: if we merge, sell, or reorganize (with appropriate protections).

We do not sell your personal data.

7) Cookies and tracking (in-app web content)

Because the app displays web content, the website may use cookies/local storage for: login sessions, cart and preferences, security and performance. You can control cookies via your device settings and browser settings, but disabling them may affect functionality.

8) Data retention

We keep information only as long as necessary:

• account and order data: as needed for service, legal, and accounting requirements;
• logs/diagnostics: for a limited period to ensure reliability and security.

9) Security

We use reasonable technical and organizational measures to protect data (encryption in transit, access controls, monitoring). No method of transmission or storage is 100% secure.

10) Your rights and choices

Depending on your location, you may have rights to:

• access, correct, or delete your personal data;
• object to processing or request restriction;
• request data portability;
• withdraw consent (e.g., location/camera/photos) via iOS/Android Settings;
• lodge a complaint with a data protection authority.

To exercise rights, contact the Controller at: info@ordely.org

11) Children

The Service is not intended for children under 13 (or the minimum age required in your country). We do not knowingly collect personal data from children.

12) International transfers

Your data may be processed in countries other than your own (for example, Germany and Ukraine for operational support). Where required, we use appropriate safeguards.

13) Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new effective date.

Controller contact: info@ordely.org
Partner/processor contact (for technical matters): info@sande-it.com