Last updated: May 2026

Cerro Alto is operated by Datalitec SRL, a limited liability company registered in Brussels, Belgium (company number 0775.632.78). This policy explains what personal data we collect, why we collect it, and how we use it.

We take your privacy seriously. We collect only what we need and never sell your data to third parties.

Who We Are

Datalitec SRL trading as Cerro Alto 35 Square de Meeus, 1000 Brussels, Belgium VAT: BE0775.632.78 Contact: info@cerro-alto.com

What Data We Collect

We collect personal data in the following situations:

• When you place an order — name, delivery address, email address, and payment details (processed securely by our payment provider, not stored by us).
• When you subscribe to our newsletter — your email address only.
• When you visit our website — browsing behaviour and technical data via cookies.
• When you contact us — any information you choose to share.

How We Use Your Data

• To process and fulfill your orders
• To send you transactional emails (order confirmation, shipping updates)
• To send you our newsletter and promotional offers — only if you have subscribed
• To improve our website and understand how visitors use it
• To comply with our legal obligations

Email Marketing — Klaviyo

We use Klaviyo to manage our email list and send newsletters. When you subscribe, your email address is stored on Klaviyo's servers. Klaviyo is GDPR compliant and acts as a data processor on our behalf.

You can unsubscribe at any time by clicking the unsubscribe link at the bottom of any email we send, or by emailing us at info@cerro-alto.com.

Cookies

We use the following cookies on our website:

• Essential cookies — required for the site to function (shopping cart, session management).
• Analytics cookies — we use Google Analytics to understand how visitors use our site. This data is anonymised and aggregated.
• Marketing cookies — if you subscribe to our newsletter, Klaviyo may place cookies to track email engagement.

You can disable cookies in your browser settings at any time.

Your Rights Under GDPR

As a resident of the European Union, you have the following rights:

• Right to access — request a copy of the data we hold about you.
• Right to rectification — ask us to correct inaccurate data.
• Right to erasure — ask us to delete your data.
• Right to object — object to processing your data for marketing purposes.
• Right to portability — request your data in a portable format.
• Right to withdraw consent — withdraw consent at any time.

To exercise any of these rights, email info@cerro-alto.com. We will respond within 30 days.

Data Retention

We retain order data for as long as required by Belgian tax and accounting law (minimum 7 years). Email subscriber data is retained until you unsubscribe or request deletion. Website analytics data is retained for 26 months.

Data Security

We take reasonable technical and organizational measures to protect your personal data. Payment transactions are processed by secure third-party providers and we do not store card details.

Third Parties

We do not sell, trade, or rent your personal data to third parties. We share data only with service providers necessary to run our business — fulfillment partner, Klaviyo (email marketing), and Google Analytics (website analytics).

Changes to This Policy

We may update this policy from time to time. The date at the top reflects when it was last revised.

Contact

Questions about this policy or your data? Email info@cerro-alto.com. We read everything.