Privacy Policy

1. Who we are

Astrolabix LLC (“Astrolabix”, “we”, “us”) is the controller of the personal data described in this policy.

Postal address

30 N Gould St, STE R
Sheridan, WY 82801, USA

Privacy contact

hello@astrolabix.com

This policy covers astrolabix.com. It does not cover the systems we build or operate for clients under a signed statement of work - those are governed by the agreement for that engagement.

2. What this site does not do

We think the absence of data collection deserves as much detail as its presence. As of the date above, this website:

• sets no cookies of any kind, first- or third-party;
• runs no analytics - no page-view counting, no session recording, no heatmaps;
• loads no third-party scripts, pixels, tag managers, embeds or social widgets;
• serves its fonts, images and code from its own domain, so loading a page does not tell anyone else that you visited;
• does no advertising, retargeting, fingerprinting, cross-site tracking or profiling;
• builds no advertising or marketing profile about you, and sends no marketing email unless you ask us to.

Because there is nothing to opt out of, there is no cookie banner. A Global Privacy Control or Do Not Track signal from your browser is honoured by design: there is no tracking for it to switch off.

3. What we collect

The contact form. When you send us a brief we receive:

• your name;
• your email address;
• your company, if you choose to give it - the field is optional;
• your project brief, the free-text description of what you want to build.

Please do not put confidential information, trade secrets, health or financial details, government identifiers, or other people’s personal data into the brief. A first message is not a secure channel; tell us instead that there is more to discuss and we will arrange one.

The spam trap. The form contains a hidden field named website. It is invisible to people and to assistive technology, and you are never asked to fill it in. Automated spam tools fill it anyway, so a submission that arrives with it completed is discarded as spam. We collect nothing else for spam filtering - no scoring service, no CAPTCHA.

Email you send us. If you write to hello@astrolabix.com we hold that correspondence, and whatever you chose to put in it, in our mailbox.

Technical logs held by our providers. Delivering any website necessarily involves a hosting provider, and delivering the form involves a form-processing provider. Those providers keep their own short-lived operational records - for example the IP address a request came from - to serve pages and to protect the service from abuse. We do not use those records for analytics or profiling, and we do not combine them with anything else.

4. Why we use it, and our lawful basis

For anyone in the European Economic Area, the United Kingdom or Switzerland, the GDPR requires us to name a lawful basis for each purpose. Ours are:

Replying to your enquiry

Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR), and our legitimate interest in responding to people who ask us to (Art. 6(1)(f)).

Preventing spam and abuse

Our legitimate interest in keeping our inbox and our systems usable (Art. 6(1)(f)).

Keeping records of engagements

Performance of the contract with our client (Art. 6(1)(b)), and compliance with tax, accounting and other legal obligations (Art. 6(1)(c)).

We do not rely on consent, because we do not run any processing - cookies, analytics or marketing - that would require it. We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

5. How long we keep it

• Enquiries that do not lead to work: deleted within 24 months of our last exchange with you.
• Enquiries that become an engagement: kept for the life of the engagement, then for as long as we need them for our records and for the periods required by tax, accounting and limitation rules.
• Submissions caught by the spam trap: discarded, and not read.

You can ask us to delete your enquiry sooner. See your rights below.

6. Who else sees it

We do not sell your personal data, and we never have. We do not share it for advertising of any kind. We disclose it only:

• to the service providers who make the site and our mail work - our hosting provider, our email provider, and the form-processing provider that delivers contact-form submissions to our inbox. They act on our documented instructions as processors, and may not use your data for their own purposes;
• to our professional advisers, where they need it and are bound by confidentiality;
• where we are legally required to, or where it is necessary to establish, exercise or defend legal claims;
• to a successor entity, if the business is ever transferred - in which case this policy continues to apply to data transferred with it.

7. International transfers

Astrolabix operates from the United States, and our service providers process data in the United States. If you contact us from the EEA, the UK, Switzerland or anywhere else outside the US, your personal data will be transferred to and stored in the United States, whose data protection laws differ from those where you live.

Where a transfer mechanism is legally required, we rely on the European Commission’s Standard Contractual Clauses - together with the UK International Data Transfer Addendum where the UK GDPR applies - in our agreements with the providers who process data on our behalf, alongside the technical measures described in this policy. Write to us if you would like details of the safeguards that apply to your data.

8. Your rights under the GDPR and UK GDPR

If you are in the EEA, the UK or Switzerland, you have the following rights over your personal data. They are free to exercise, and we will respond within one month.

Access

Get confirmation of what we hold about you, and a copy of it.

Rectification

Have inaccurate data corrected and incomplete data completed.

Erasure

Have your data deleted where we no longer need it or where you have successfully objected to our use of it.

Restriction

Have us pause our use of your data while a dispute about it is resolved.

Objection

Object to processing we base on legitimate interests, on grounds relating to your situation.

Portability

Receive the data you gave us in a structured, commonly used, machine-readable format, and have it sent to another controller where technically feasible.

Complaint

Lodge a complaint with the data protection authority in the country where you live or work - in the UK, the Information Commissioner’s Office. We would rather you came to us first, but that is your choice, not a condition.

To exercise any of these, email hello@astrolabix.com. We may ask you to confirm that you control the email address in our records, so that we do not disclose your data to someone else.

9. Your rights in California (CCPA/CPRA)

This section applies to California residents and uses the terms of the California Consumer Privacy Act as amended by the CPRA.

Categories collected in the last 12 months. All of it comes directly from you, through the contact form or by email, and is used for the business purposes described in section 4.

Identifiers

Your name, email address, and company name if you give one.

Professional information

Your employer and role, to the extent you describe them in your brief.

Commercial information

The content of your project brief, to the extent it records services you are considering.

Categories we do not collect: sensitive personal information (including government identifiers, financial account details, precise geolocation, race or ethnicity, religion, union membership, genetic, biometric, health or sex-life data); internet or network activity information; audio, visual or biometric data; education records; characteristics of protected classifications; and inferences drawn to create a profile. Because we collect no sensitive personal information, there is nothing for a request to limit its use to apply to.

No sale, no sharing. We do not sell personal information and we do not share it for cross-context behavioural advertising, as those terms are defined by the CCPA. We have not done so in the preceding 12 months, including in respect of consumers we know to be under 16.

Your rights. As a California resident you may:

• request to know the categories and specific pieces of personal information we have collected, the sources, our purposes, and the categories of recipients;
• request that we delete personal information we collected from you;
• request that we correct inaccurate personal information;
• opt out of the sale or sharing of personal information - we do neither, so there is nothing to opt out of;
• not be discriminated against for exercising any of these rights. We will not deny you service, charge you a different price, or give you a lesser experience.

Make a request by emailing hello@astrolabix.com with “Privacy request” in the subject line. We will verify you by corresponding with the email address we hold, and will respond within the statutory period. An authorised agent may act for you if they provide written permission signed by you; we may still contact you to confirm.

Residents of other US states with comprehensive privacy laws - among them Virginia, Colorado, Connecticut, Utah, Texas and Oregon - have comparable rights of access, correction, deletion and portability, and should contact us the same way.

10. Children

This site is aimed at businesses. It is not directed to children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, write to us and we will delete it.

11. Security

The site is served over HTTPS. Access to the mailbox and to form submissions is limited to the people at Astrolabix who need it and is protected by strong authentication. We keep the attack surface small on purpose: no third-party scripts, no advertising code, no database of visitors. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

12. Changes to this policy

If we change how we handle personal data, we will revise this page and move the “Last updated” date. Material changes will be described here rather than made quietly.

13. How to reach us

Questions, requests and complaints about this policy all go to the same place:

Email

hello@astrolabix.com

Post

Astrolabix LLC
30 N Gould St, STE R
Sheridan, WY 82801, USA