Privacy Policy

Last updated: September 29, 2026

This Privacy Policy explains how Noostro LLC (“Noostro”, “we”, “us”) collects and uses personal information when you visit this website, contact us, or become a client. We are the data controller for the information described here.

1. Information we collect

Information you give us. When you use the contact form or write to us, we collect your name, work email, company, website and the content of your message. When you become a client, we also collect the names and business contact details of your staff involved in the engagement, and billing information such as company name, billing address and tax identifiers.

Payment information. Card and PayPal payments are handled by Stripe and PayPal. They process your payment details under their own privacy policies; we receive only a confirmation of payment and limited details such as the payer name and the last four digits of a card. Bank transfers are processed by our bank, and we see the information shown on the transfer.

Technical information. Our hosting provider automatically records server logs, which include IP addresses, browser type and the pages requested. These logs are used for security and troubleshooting and are kept for a limited period. This website does not use analytics or advertising trackers.

2. How we use information

• To reply to your enquiries and prepare proposals.
• To perform our contracts with clients, including communication, delivery and reporting.
• To issue invoices, receive payments and keep accounting records.
• To protect the website against spam, abuse and security threats.
• To comply with legal obligations, such as tax and record-keeping requirements.

We do not use your information for automated decision-making, and we do not send marketing emails unless you have asked to receive them.

3. Legal bases (EEA and UK)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases: taking steps at your request before entering into a contract, and performing a contract; our legitimate interests in running and protecting our business, responding to enquiries and keeping records; compliance with legal obligations; and your consent, where we ask for it, which you may withdraw at any time.

4. Who we share information with

We do not sell or rent personal information, and we do not share it for cross-context behavioural advertising. We share it only with service providers that help us run our business, under contractual confidentiality and data protection obligations:

• Website hosting and email service providers.
• Payment processors (Stripe, PayPal) and our bank.
• Accounting, document and collaboration software.
• Professional advisers such as accountants and lawyers, where necessary.

We may also disclose information where required by law, to respond to lawful requests from authorities, or to protect our rights.

5. International transfers

We are based in the United States and work with clients and providers in several countries. Your information may therefore be processed outside your country of residence. Where required, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

6. How long we keep information

• Enquiries that do not lead to an engagement: up to 24 months after our last exchange.
• Client project records and correspondence: for the duration of the relationship and up to 3 years after.
• Invoices and accounting records: 7 years, as required for tax purposes.
• Server logs: according to the hosting provider’s retention period, typically no more than 90 days.

7. Security

This website is served over an encrypted connection (HTTPS). We restrict access to personal information to the people who need it, use strong authentication on our business accounts, and do not store payment card details.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. Residents of California and other US states with privacy laws may have the right to know what information we collect, to request its deletion or correction, and not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined in the California Consumer Privacy Act.

To exercise any of these rights, write to contact@noostro.com. We will reply within 30 days and may ask you to confirm your identity. If you are in the EEA or UK, you also have the right to complain to your local data protection authority.

9. Cookies

This website only uses strictly necessary cookies. See our Cookie Policy for details.

10. Children

Our services are intended for businesses. This website is not directed at children under 16, and we do not knowingly collect their information.

11. Changes to this policy

We may update this policy when our practices change. The date at the top of this page shows when it was last revised.

12. Contact

For any question about this policy or your personal information, contact us at contact@noostro.com or by mail at: