Clear handling.
Limited use.

Scope

This policy applies to the Albatro Aviation online store and our Operations order and invoice system. Website purchases use guest checkout hosted by Stripe. Purchases completed on eBay are also subject to eBay’s own privacy practices.

Information we process

Depending on how you interact with us, we process the following categories of information:

• Direct-store orders: contact and shipping details, order items, payment status, tax, and payment references are processed by Stripe and our private Operations system to take payment, fulfill orders, issue invoices, and handle returns. Card details are entered on Stripe’s hosted checkout and are not stored by our storefront. Your browser stores your cart and a first-party session cookie used to securely retrieve your order status.
• eBay order information: order and sales-record identifiers; buyer identifiers; name, contact, and shipping details when eBay makes them available; listing, item, variation, and SKU identifiers; quantities; prices; taxes; shipping charges; discounts; payment and fulfillment status; cancellations, returns, and refunds.
• Website and security information: hosting and security logs such as IP address, request details, timestamps, and browser or device information generated when the site is accessed.
• Business records: draft and finalized invoices, invoice copies, item-mapping decisions, reconciliation and exception records, audit records, and account-deletion requests and resolutions.

How we use information

We use this information only as needed to:

• process and fulfill website orders, and prepare reviewable draft invoices for eBay sales;
• reconcile orders, payments, cancellations, returns, and refunds;
• finalize and maintain accounting and transaction records;
• protect the site and business systems, prevent fraud, and investigate security events;
• provide customer support and resolve order issues; and
• meet legal, tax, accounting, privacy, and marketplace obligations.

We do not sell personal information and do not use it for behavioral advertising.

Service providers

We disclose information only where needed to operate the services described above. Relevant providers include Stripe, which processes website payments and checkout tax calculations; eBay, which supplies marketplace order and notification data, and Cloudflare, which provides website hosting, security, application processing, queues, databases, and object storage. Google Drive may be used for encrypted off-provider backups after that backup process is enabled. These providers process information under their own terms and our service arrangements.

Retention and deletion

We keep information only while it is operationally necessary or legally required. Drafts and unnecessary buyer information are deleted, and retained accounting records are redacted where legally permitted. When finalized records must be kept after a deletion request, we record the legal basis and a retention deadline for that decision.

• D1 database exports stored in Cloudflare R2 expire after 90 days.
• When encrypted Google Drive backups are enabled, they will age out after 12 months.
• For enabled backups, deletion reaches historical copies through scheduled aging rather than by immediately rewriting every backup.
• If a backup is restored, applicable deletion and redaction decisions must be reapplied.

eBay account-deletion notifications enter a manual compliance queue. A request cannot be dismissed or completed without a recorded resolution that identifies the reviewer, action, affected data, and—where records are retained—the legal basis and deadline.

Your choices

Depending on where you live, you may have rights to request access, correction, deletion, or restriction of personal information. Contact us to make a request. We may need to verify your identity and may retain limited information when required by law, to protect legal rights, or to document how a request was resolved.

Security and updates

We use administrative and technical safeguards designed to limit access to business systems and protect information in transit and at rest. No system can guarantee absolute security. This site and its services are not directed to children, and we do not knowingly collect children’s personal information.

We may update this policy as our services or legal obligations change. The effective date above shows when this version took effect. We will revise the policy when our handling of personal information changes.