Privacy policy

This is an informational website. It is used to present our services and our work, and to let visitors get in touch through the contact form.

1. Data controller

The controller of your personal data is:

For any matter relating to the protection of your personal data, you can contact the controller at the email address above.

2. What data do we collect?

We only collect personal data when you choose to provide it through the contact form on the website.

The contact form may include the following data:

• your name,
• your email address,
• the content of your message.

Providing this data is voluntary, but it is necessary in order to send an enquiry and receive a reply.

3. Why do we process your data?

Data sent through the contact form is processed in order to:

• handle the enquiry you have sent,
• reply to your message,
• contact you by email, if you have provided those details,
• prepare an initial outline of a service or a quote, where your enquiry calls for it,
• establish, exercise or defend against any legal claims.

4. Legal basis for processing

Your personal data is processed on the basis of:

• Article 6(1)(f) of the GDPR — the controller's legitimate interest in handling correspondence, replying to enquiries and staying in touch with people interested in our services,
• Article 6(1)(b) of the GDPR — where the contact leads to steps taken before entering into a contract, or to performing a contract,
• Article 6(1)(f) of the GDPR — in relation to establishing, pursuing or defending against any claims.

Where data is collected directly from you, we provide the information required by Article 13 of the GDPR. You should be informed, among other things, about the controller, the purposes of processing, the legal bases, the recipients of the data, the retention period and your rights.

5. How long do we keep your data?

Data sent through the contact form is kept for as long as is needed to handle your enquiry and conduct the correspondence.

If the contact does not lead to a contract, the data may be kept for the period needed to safeguard any potential claims, but no longer than the period required by law.

If the contact does lead to a contract, the data will be kept for the duration of the contract and afterwards for the period required by law, in particular tax and accounting rules.

6. Who might we share your data with?

Personal data may be shared with the parties that help the controller run the website and handle contact, in particular:

• the hosting provider or the site's technical infrastructure provider,
• the email provider,
• parties operating the contact form, if we use such a technical solution,
• an accountancy firm, law firm or other advisers, where this is necessary,
• public authorities, where required by applicable law.

We never sell your data or share it with third parties for marketing purposes.

7. Is your data transferred outside the UK / EEA?

As a rule, personal data is not transferred outside the United Kingdom or the European Economic Area.

If, in the future, we use technical tools that may involve transferring data outside the UK / EEA, you will be informed of this, and the controller will apply the appropriate safeguards required by data protection law.

8. Your rights

As a data subject, you have the rights granted by data protection law, including:

• the right to access your data,
• the right to receive a copy of your data,
• the right to rectify your data,
• the right to erase your data,
• the right to restrict processing,
• the right to object to the processing of your data,
• the right to data portability — where applicable,
• the right to lodge a complaint with the relevant supervisory authority (in the UK, the Information Commissioner's Office).

To exercise your rights, please contact the controller at the email address given in this privacy policy.

9. Providing your data is voluntary

Providing data in the contact form is voluntary. However, without your contact details it will not be possible to send an enquiry or receive a reply.

10. Cookies

The astrofy.uk website does not currently use cookies for analytics, advertising or marketing purposes.

The site does not currently use tools such as Google Analytics, Google Tag Manager, Plausible, the Meta Pixel or any other systems that track user behaviour.

If analytics or marketing tools are added to the site in the future, this privacy policy will be updated accordingly.

11. Newsletter

The site does not currently offer a newsletter sign-up and does not process personal data for the purpose of sending regular marketing messages.

12. Profiling and automated decision-making

Your data is not used for profiling or for automated decision-making that would produce legal effects concerning you or similarly significantly affect you.

13. Keeping your data secure

The controller applies technical and organisational measures designed to protect personal data against unauthorised access, loss, destruction or unauthorised alteration.

Only the people and parties who need it to handle enquiries, conduct correspondence or meet the controller's legal obligations have access to the data.

14. Changes to this privacy policy

This privacy policy may change if the way the site works, the scope of the data we process, the technical tools we use, or the applicable law changes.

The current version of the privacy policy is always available on the astrofy.uk website.

Last updated: 30 May 2026