Privacy Policy

Who we are

Costellier is operated by Maria de Ysasi, trading as HeirStyle UK, at 61 Bridge Street, Kington, HR5 3DJ, United Kingdom. This is the controller responsible for the personal information described in this policy. For privacy questions, email info@heirstyle.co.uk or call +44 7447 827644.

Information we use

• Your Shopify customer account identifier and basic account details used to sign you in.
• The materials, ingredients, recipes, Make Settings, production instructions, product photos and business settings you choose to save.
• Purchase and order references needed to verify Lifetime Unlimited access and handle refunds.
• For a manual Philippine payment: your signed-in email address, the chosen method, PHP amount, unique Costellier reference, GCash or bank transaction reference, optional payer name, status and relevant dates. The email address is shown only in HeirStyle UK’s owner-protected payment review. Costellier does not ask for or receive your wallet PIN, one-time password or full payment-card details.
• A permanent encrypted snapshot of an issued payment receipt, including its number, issue date, seller details, customer or business name, product, amount, payment method, masked transaction reference and agreement record. Receiving-account details and the full transaction reference are not placed on the customer receipt.
• Your recorded agreement to immediate digital access, including its version and date, so we can activate the purchase and keep evidence of your choice.
• Technical session and security information needed to keep the service working safely.

Why we use it

We use account and saved-content information to provide Costellier and perform our contract with you. Shopify purchase status may be checked periodically so refunded or reversed Shopify orders can be returned to the Free plan without deleting saved content. Manual GCash or bank references are reviewed by HeirStyle UK against the receiving account to confirm cleared funds, prevent duplicate or fraudulent activation, support customers and keep transaction records. Confirmed refunds or reversals can remove manual Lifetime access without deleting saved content. We use limited technical and activity information for our legitimate interests in security, fraud prevention, service reliability and understanding whether the app’s main features are useful. Optional Google Analytics is used only with your consent to understand demand, improve useful features and measure the journey towards an upgrade. We may retain transaction information where needed to meet legal, tax or accounting obligations.

Who receives it

Shopify provides customer authentication and handles card checkout and order verification. For a manual Philippine payment, your own GCash provider or bank processes the transfer under its terms, while HeirStyle UK receives and reviews the payment record. Resend may deliver an operational alert to HeirStyle UK when a payment reference is submitted. That alert contains only the PHP amount, payment method, Costellier reference and submission time; it intentionally excludes the full transaction reference, receiving-account details and your saved Costellier content. OpenAI’s ChatGPT Sites service and its hosting infrastructure help operate and store the app. If you accept optional analytics, Google Analytics processes limited usage information for us. Information may also be disclosed to professional advisers or authorities when legally required. We do not sell your personal information and Costellier does not use advertising trackers.

Photos, backups and other content

You remain responsible for the content you upload. Please only upload photographs and information you own or have permission to use. Photos are held in private object storage rather than embedded in the main pricing database. When you restore a backup, Costellier automatically keeps one private pre-restore safety copy so an accidental restore can be recovered; a later restore replaces that safety copy.

Cookies, analytics and local storage

Costellier uses an essential sign-in session cookie. It is necessary for authentication and is not used for advertising. The app remembers your analytics choice locally in your browser, using local storage and a small consent-preference cookie where needed. It may also cache static files so it can behave like an installed web app; private API responses are not intentionally cached.

If you accept optional analytics, Costellier keeps first-party counts of milestones such as adding a material, building a recipe, using Make Settings, reaching the Make Settings upgrade prompt, reaching the purchase step and verifying Lifetime access. The owner can see only aggregate totals and percentages. The dashboard excludes the owner’s own activity and does not show customer names, email addresses, account identifiers, saved content, prices or photos.

Google Analytics is optional and does not load until you select “Accept analytics”. If accepted, it may collect page visits, approximate location, device and browser information, referral source, and general actions such as opening an app section, saving an item, beginning checkout or unlocking Lifetime Unlimited. A verified Unlimited purchase sends the paid amount and currency so revenue can be measured. We do not send Google your name, email address, account reference, recipe or material names, photographs, or customer-entered calculator prices. Google advertising signals and ad personalisation are disabled.

You can withdraw or change your Google Analytics choice at any time using the “Cookie settings” link in the footer. Declining Google Analytics does not restrict the app.

How long we keep information

Saved materials, ingredients, recipes, photos, settings and the latest pre-restore safety copy are normally kept until you delete them or ask us to delete your account data. A new restore replaces the previous safety copy. Sign-in sessions normally last up to 30 days; expired session records are routinely cleared. Short-lived login security records expire after about 10 minutes. Unsubmitted Philippine payment instructions expire after about 48 hours. Purchase, payment-reference, entitlement, immediate-access consent and issued receipt records may be kept while your account remains active and afterwards where required for customer support, fraud prevention, legal, tax or accounting records. An issued receipt is retained as an unchanged transaction record even if access is later refunded or reversed.

International processing and security

Our service providers may process information outside the UK. Where required, appropriate contractual or legal safeguards are used. Customer access, refresh and identity tokens stored for a session are encrypted at rest, private responses are marked not to be cached, and uploaded photos are kept in private storage. We use reasonable technical and organisational measures to protect information, but no online service can promise absolute security.

Your rights

Depending on the circumstances, you may ask to access, correct, erase, restrict or receive a copy of your information, or object to certain processing. Email us to make a request. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.

Children

Costellier is intended for adults and is not directed to children under 18.

Changes

We may update this policy as Costellier develops. The effective date above will be changed when material updates are made.