STELLAR FlyPods

Privacy Policy

Last updated: May 17, 2026

This Privacy Policy explains what personal data STELLAR FlyPods collects when you use our website (stellarflypods.com), why we collect it, how we protect it, and what rights you have under the General Data Protection Regulation (GDPR) (EU) 2016/679.

1. Who we are

STELLAR FlyPods is a product of Dedal Trade Limited (also registered as DEDAL TRADE Co., Ltd., Hong Kong).

Data controller:
Dedal Trade Limited
Email: info@stellarstlr.com
Website: stellarflypods.com

If you have any questions or requests regarding your personal data, contact us at info@stellarstlr.com.

2. What data we collect and why

We collect only the data necessary to process your order and operate our website.

2.1 Order and payment data

When you place an order, we collect:

Full name
Billing and shipping address
Email address
Phone number (optional, used for delivery updates)
Payment information — card details, Apple Pay, or Google Pay tokens

Payment data is processed exclusively by our payment processor. We never see, store, or have access to your full card number, CVV, or bank account details. Our payment processor is PCI DSS Level 1 certified.

Legal basis: Art. 6(1)(b) GDPR — performance of a contract.

2.2 Account data (optional)

If you choose to create an account at checkout, we store your name, email address, and order history so you can track your orders and manage your STELLARvibe settings in future.

Legal basis: Art. 6(1)(b) GDPR — performance of a contract.

2.3 Newsletter and marketing emails

If you tick the newsletter opt-in at checkout, we store your email address and send you occasional updates about new products, exclusive offers, and sound tips. You can unsubscribe at any time via the link in any email we send.

Legal basis: Art. 6(1)(a) GDPR — your explicit consent.

2.4 Gift message

If you enter a gift message at checkout, it is printed on a card included in the parcel and stored with your order record.

Legal basis: Art. 6(1)(b) GDPR — performance of a contract.

2.5 Website usage data (cookies and server logs)

Our web server automatically records your IP address, browser type and version, pages visited, time spent, and referring URL. We also use session cookies to maintain your shopping cart across pages. These cookies expire at the end of your browser session or after 48 hours. We do not use advertising or tracking cookies.

Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in operating a functional website.

3. How we share your data

We share your data only with the third-party service providers necessary to fulfil your order:

Payment processor — secure processing of card, Apple Pay, and Google Pay transactions
Hosting provider — website hosting and server infrastructure (EU)
Shipping carrier — delivery of your order
Email service provider — order confirmation and transactional emails (EU)

We do not sell, rent, or trade your personal data to any third party. All processors are bound by data processing agreements compliant with GDPR Chapter V.

4. International transfers

Our payment processor is based in the United States. Transfers are covered by Standard Contractual Clauses (SCCs) approved by the European Commission under Art. 46(2)(c) GDPR. No other international transfers of your personal data occur.

5. Data retention

Order records (name, address, items, price) — 7 years (legal and tax obligation)
Payment transaction records — 7 years (legal and tax obligation)
Account data — until you request deletion or close your account
Newsletter subscription — until you unsubscribe
Server logs — 90 days
Session cookies — end of browser session / 48 hours

After the retention period, your data is securely deleted or anonymised.

6. Your rights under GDPR

If you are in the European Economic Area (EEA), you have the following rights:

Right of access (Art. 15) — Request a copy of the personal data we hold about you.
Right to rectification (Art. 16) — Ask us to correct inaccurate or incomplete data.
Right to erasure (Art. 17) — Ask us to delete your data. Note: we may be required to retain order and payment records for 7 years to comply with legal obligations.
Right to restrict processing (Art. 18) — Ask us to pause processing while a dispute is resolved.
Right to data portability (Art. 20) — Receive your data in a structured, machine-readable format.
Right to object (Art. 21) — Object to processing based on legitimate interest.
Right to withdraw consent (Art. 7(3)) — Withdraw newsletter consent at any time by clicking "Unsubscribe" in any email.

To exercise any of these rights, email us at info@stellarstlr.com. We will respond within 30 days.

You also have the right to lodge a complaint with your local Data Protection Authority (DPA). A list of EU DPAs is available at edpb.europa.eu.

7. Data security

We protect your data using SSL/TLS encryption on all pages (HTTPS), PCI DSS Level 1 certified payment processing, access controls limiting data to authorised staff only, and regular security updates to our website software.

Despite these measures, no internet transmission is 100% secure. If you believe your data has been compromised, contact us immediately at info@stellarstlr.com.

8. Children

Our website is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has submitted data to us, please contact us and we will delete it promptly.

9. Changes to this policy

If we update this Privacy Policy, the new version will be published at stellarflypods.com/privacy-policy with an updated "Last updated" date. For material changes that affect how your data is processed, we will notify you by email (if we hold your email address) and display a notice on the website.

10. Legal notice

STELLAR be stellar® is a registered trademark of Dedal Trade Limited.
EU Trade Mark Registration No. 018884685
HK Trade Mark Registration No. 306220494