The data controller responsible for your personal data is:

[Insert Company Legal Name]
[Insert Address]
[Insert Country]
Email: [Insert Contact Email]
Phone: [Insert Contact Phone]

This means we decide how and why your personal data is processed, in line with the EU-GDPR (General Data Protection Regulation).

When you visit our website, our system automatically records certain technical information (“server log files”). This includes your IP address, date and time of access, pages viewed, files requested, the amount of data transferred, browser type/version, operating system, and the website that referred you to us.

We use this data to ensure the smooth operation of our site, to identify and fix technical problems, and to protect against cyber threats. For example, if we see unusual activity in the logs, we can take action to block potential attacks before they cause harm

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) in maintaining the security and functionality of our online services.

Retention: Logs are normally kept for up to 14 days and then deleted, unless we need them for security or legal reasons.

Our website is hosted by professional providers in Europe who supply the server space and technology needed to run our site. All personal data collected through the website—including order forms, contact forms, and affiliate registrations—is processed on their secure servers.

We only work with hosting providers who meet GDPR security standards, ensuring that your data remains safe during transmission and storage.

When you place an order for eclipse glasses or other products, we collect the information needed to process and deliver your purchase:

• Your name
• Shipping address
• Email address
• Phone number
• Order details and payment confirmation

We use these details to fulfill your order, keep you informed about its status, and comply with our legal obligations (for example, tax record-keeping).

Legal basis: Contract performance (Art. 6(1)(b) GDPR) and legal obligation (Art. 6(1)(c) GDPR).

Retention: Stored for the duration required by accounting and tax laws.

If you get in touch via our contact form, email, or WhatsApp or other platforms, we may collect your name, email address, phone number and any other details you choose to share depending on the method of communication.

We use this information to respond to your inquiries, provide customer service, and follow up if necessary. For example, if you write to ask about shipping times, we’ll use your contact details to reply and possibly send an update when your order ships.

Legal basis: Contract performance if related to an order (Art. 6(1)(b) GDPR), or legitimate interest in handling inquiries (Art. 6(1)(f) GDPR).

Retention: Deleted once your inquiry is resolved, unless further retention is necessary or you consent to continued communication.

To deliver your order, we share your shipping address and contact details with trusted delivery providers. This may include your email or phone number, so they can send you tracking updates or delivery notifications.

We do not share more information than necessary, and we work only with carriers who handle personal data securely and in compliance with GDPR.

When you choose a payment method, your payment details are processed either by us or by our secure payment service providers. In most cases, your details (such as credit card information) are entered directly into the provider’s secure platform and never stored by us.

We may share transaction details with the payment processor to confirm payments, prevent fraud, and resolve payment issues.

If you sign up for the Spectrum Affiliate Program, we collect the details we need to set up and manage your account:

• Name or business name
• Email address
• Payment/bank details (to send your commissions)
• Website/social media account information
• Tracking data (clicks, conversions, commissions earned)

This information allows us to track your performance, calculate earnings, and pay you on time.

Legal basis: Contract performance (Art. 6(1)(b) GDPR) and legitimate interest in running our affiliate program (Art. 6(1)(f) GDPR).

When you take part in a raffle, photo competition, or similar promotional activity, we collect:

• Your name
• Email address
• Phone number
• Your entry (e.g., photo or purchase receipt)

We use this data to verify eligibility, manage entries, and contact winners. For some promotions, this also includes announcing winners publicly (with your consent).

Legal basis: Consent (Art. 6(1)(a) GDPR) and contract performance (Art. 6(1)(b) GDPR).

If you choose to receive marketing messages from us, we will use the contact details you provide to send you news about upcoming solar eclipses, exclusive promotions, raffles, and other Spectrum-related updates. These communications are intended to keep you informed about opportunities that might interest you, especially given the limited time window during which eclipse glasses are in high demand.

We only send these messages if you have given your explicit consent, and you can withdraw this consent at any time by following the unsubscribe link in our emails or by replying “STOP” to our WhatsApp messages. Withdrawing consent will not affect the lawfulness of communications sent before your request.

To help us measure the effectiveness of our campaigns and send you more relevant information, we may track whether you open our messages and click on the links they contain. This allows us to see which topics resonate most with our audience, without overloading you with irrelevant updates.

Legal basis: Your consent (Art. 6(1)(a) GDPR).

Retention: We will keep your contact details for marketing purposes until you opt out or withdraw your consent.

We operate official pages on Facebook, Instagram, X (Twitter), LinkedIn, and TikTok. When you interact with us on these platforms, your data is also processed by the platform operators under their own privacy policies.

In some cases, we and the platform are considered joint controllers under GDPR, meaning both parties are responsible for protecting your data

You have the right to

• Access the personal data we hold about you
• Correct inaccuracies in your data
• Request deletion of your data (“right to be forgotten”)
• Restrict how we process your data
• Receive a copy of your data in a portable format
• Object to certain processing activities
• Withdraw consent at any time
• File a complaint with a supervisory authority

To exercise any of these rights, contact us at:
[Insert Contact Email]
[Insert Postal Address]

We apply technical and organizational security measures to protect your data from unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure storage, and limited access to personal data.

We may update this Privacy Policy to reflect changes in our business or legal requirements. The latest version will always be available on our website, with the date of the last update clearly shown.