Astraeus Technology Ltd
Privacy Policy
Last updated 18 June 2026
1. Introduction
- This privacy policy sets out how Astraeus Technology Ltd ("we", "us", "our") collects, uses, stores, shares and protects information about individuals ("personal data") in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection legislation.
- Astraeus Technology Ltd is a company incorporated in England and Wales (registration number 15162283) with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.
- For the purposes of the UK GDPR, the data controller is Astraeus Technology Ltd. Our contact details are set out in Section 15 below.
- This privacy policy applies to our website at www.astraeustechnology.com and governs our data collection and processing practices. By using our website, you acknowledge that you have read and understood this privacy policy.
2. What data we collect
- We may collect and process the following categories of personal data about you:
- Contact data: your email address and any other information you choose to include when you contact us.
- Technical data: internet protocol (IP) address, browser type and version, operating system, and other technology on the device you use to access our website.
- Usage data: information about how you use our website, such as the pages you view.
- This is a marketing website. We do not operate user accounts here, we do not take payments through it, and we do not knowingly collect special category data.
3. How we collect your data
- Direct interactions: you provide us with personal data when you email us or otherwise correspond with us.
- Automated technologies: as you interact with our website, our hosting provider may automatically collect technical and usage data through server logs and similar technologies. See Section 10 below for details on cookies.
- We do not buy personal data about you from third parties.
4. How we use your data
- We will only use your personal data when the law allows us to. We use your personal data to:
- respond to and manage enquiries you send us;
- operate, maintain, secure and improve our website;
- comply with our legal and regulatory obligations.
- We do not use your personal data for advertising, and we do not sell it.
5. Legal basis for processing (UK GDPR Article 6)
- We rely on the following legal bases under Article 6(1) of the UK GDPR:
- Consent (Article 6(1)(a)): where you have given clear consent, for example to any non-essential cookies we may introduce in future.
- Contract (Article 6(1)(b)): where processing is necessary to take steps at your request before entering into a contract, such as responding to a project enquiry.
- Legal obligation (Article 6(1)(c)): where processing is necessary for compliance with a legal obligation to which we are subject.
- Legitimate interests (Article 6(1)(f)): for operating and securing our website and running our business, except where overridden by your interests or fundamental rights.
6. Sharing your data
- We may share your personal data with the following categories of third parties:
- Service providers who help us run the website, including our hosting and infrastructure provider, Vercel Inc., and our email provider.
- Professional advisers such as lawyers, accountants, and insurers, where necessary.
- Regulators and other authorities where we are required to report or disclose in certain circumstances.
- Third parties in connection with any sale, merger, or reorganisation of our business or assets.
- We do not sell your personal data. We require all third parties to respect its security and to process it only for specified purposes and in accordance with our instructions.
7. International transfers
- Some of our service providers may process your personal data outside the United Kingdom.
- Where we transfer your personal data outside the UK, we ensure at least one of the following safeguards is in place:
- the transfer is to a country deemed to provide an adequate level of protection under UK law; or
- we use a UK International Data Transfer Agreement, or the UK addendum to the EU standard contractual clauses, which give your data the same protection it has in the UK.
8. Data retention
- We retain your personal data only for as long as reasonably necessary to fulfil the purposes we collected it for, including any legal, accounting, or reporting requirements.
- Enquiry correspondence is kept for as long as needed to deal with your request and for a reasonable period afterwards, then deleted. Technical logs are retained for a short period for security and diagnostics.
- In some circumstances we may anonymise your personal data, in which case we may use that information indefinitely without further notice to you.
9. Your rights
- Under the UK GDPR and the Data Protection Act 2018, you have the following rights:
- Right of access (Article 15): to request a copy of the personal data we hold about you.
- Right to rectification (Article 16): to have inaccurate or incomplete data corrected.
- Right to erasure (Article 17): to have your data deleted where there is no compelling reason to keep it.
- Right to restriction of processing (Article 18): to limit how we process your data in certain cases.
- Right to data portability (Article 20): to receive your data in a structured, machine-readable format.
- Right to object (Article 21): to object to processing based on our legitimate interests or to direct marketing.
- Rights in relation to automated decision-making (Article 22): not to be subject to a decision based solely on automated processing. We do not carry out such automated decision-making.
- Right to withdraw consent: at any time, where we are relying on consent.
- To exercise any of these rights, contact us using the details in Section 15. We will respond within one month. There is no fee unless your request is clearly unfounded, repetitive, or excessive.
10. Cookies
- Our website uses only the strictly necessary cookies required for it to function and be served securely.
- We do not use analytical, functionality, or targeting cookies. If we introduce non-essential cookies in future, we will ask for your consent first and update this policy.
- You can set your browser to refuse all or some cookies. If you do, some parts of our website may not function properly.
11. Children's privacy
- Our website is not intended for children under 18, and we do not knowingly collect personal data from them.
- If we learn that we have collected personal data from a child without appropriate consent, we will take steps to delete it as quickly as possible.
- If you believe a child has provided us with personal data, please contact us using the details in Section 15.
12. Third-party links
- Our website may include links to third-party websites and services. Clicking those links may allow third parties to collect or share data about you.
- We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to read the privacy policy of every website you visit.
13. Data security
- We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed.
- We have procedures to deal with any suspected personal data breach and will notify you and the Information Commissioner's Office of a breach where we are legally required to do so.
14. Changes to this privacy policy
- We may update this privacy policy from time to time by publishing a new version on our website.
- You should check this page occasionally to ensure you are happy with any changes.
- This privacy policy was last updated on 18 June 2026.
15. How to contact us
- If you have any questions about this privacy policy, or wish to exercise any of your rights, please contact us by email at hello@astraeustechnology.com.
- You can also write to us at: Astraeus Technology Ltd, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
16. Supervisory authority
- You have the right to complain at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection issues, at ico.org.uk. We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.
- The ICO can be reached at: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, telephone 0303 123 1113.
This privacy policy was created using a free template from SEQ Legal.