Privacy policy

The controller for the personal data described on this page is [REPLACE: full legal entity name, e.g. Astra Studio B.V.] ("Astra"), registered at [REPLACE: street, city, postal code, country].

For privacy questions or requests about your data, you can contact Astra at hello@yourcompany.com.

Project-specific documents, proposals, or service agreements may contain additional privacy or processing details where relevant.

Astra may process the following categories of personal data:

• Contact and enquiry details you choose to send, such as your name, email address, company name, website, and project information.
• If you use the website assistant, the content of your chat messages and any personal data you choose to include in them.
• Technical and usage information needed to deliver and secure the website, such as IP address, browser information, device data, and server logs handled by hosting or infrastructure providers.
• No website analytics are intentionally enabled through this marketing site by default at the time of this update.

This website currently uses an email handoff for project enquiries. If you choose to send an enquiry, your own email provider will process the message before Astra receives it.

In line with GDPR transparency requirements, Astra aims to explain the purpose and legal basis for each main type of processing.

• To respond to enquiries, discuss potential work, and take steps requested before entering into a business relationship.
• To provide answers through the website assistant, including processing the content submitted in chat messages.
• To operate, secure, and maintain the website and its technical infrastructure, based on Astra's legitimate interests in running a reliable and secure site.
• If limited analytics are enabled later, Astra intends to use them only for website measurement and improvement, and this policy should be updated accordingly.
• To comply with legal, accounting, or regulatory obligations where those apply.

Astra may share personal data only where needed for the purposes above and only with appropriate recipients, such as:

• Website hosting, infrastructure, security, and deployment providers.
• Email, calendar, CRM, or project administration tools used to respond to legitimate business enquiries.
• If the live AI assistant is configured, the model provider used to generate assistant responses based on the messages submitted through the widget.
• No analytics provider is intentionally active through this site by default at the time of this update.
• Professional advisers or public authorities where disclosure is legally required or reasonably necessary.

Some service providers may process data outside the EEA. If that happens, Astra intends to rely on appropriate safeguards required by applicable law, such as standard contractual clauses or equivalent lawful mechanisms.

Personal data is kept only for as long as needed for the purpose for which it was collected. Indicative retention periods:

• Project enquiries and chat transcripts: 24 months after the last meaningful contact.
• Signed contracts, invoices, and related records: 7 years after the end of the engagement, where required by law.
• Limited website analytics, where enabled: 26 months.
• Server and security logs: 14 days.

Depending on the circumstances and applicable law, you may have the right to request access to your personal data, rectification, erasure, restriction, portability, or to object to processing. Where processing is based on consent, you may also withdraw that consent.

You may also lodge a complaint with the supervisory authority in your country, including the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) where relevant.

For information about cookies and similar technologies, please see the cookie notice.

Astra may update this privacy policy if the website setup, providers, legal obligations, or business processes change.