AI-Driven Delivery Transformation

Privacy, Compliance, and Trust

Astrellix applies governance-first controls to protect personal and business data across client engagements, operations, and digital interactions.

Privacy Policy & Data Protection

Privacy Policy & Data Protection Notice

Last updated: January 2024

1. Introduction

Astrellix is committed to protecting personal data and privacy. This policy explains how information is collected, processed, and protected under GDPR, CCPA, and other applicable data-protection regulations.

2. Data Controller Information

Astrellix Global Operations
United States | EU | India
Email: consult@astrellix.com

3. Information We Collect

  • Contact data: name, email, phone, company, job title
  • Technical data: IP address, browser type, device, cookies
  • Usage data: pages visited, navigation patterns, session behavior
  • Communication data: inquiry forms and correspondence
  • Business data: project and contractual information

4. Legal Basis for Processing (GDPR)

  • Consent
  • Contract performance
  • Legitimate interest
  • Legal obligations

5. How We Use Your Information

  • Respond to inquiries and provide requested information
  • Deliver consulting and software development services
  • Process payments and maintain financial records
  • Provide service notifications and operational updates
  • Improve website functionality and user experience
  • Comply with legal, regulatory, and audit requirements

6. Data Sharing & Third Parties

We may share data with payment processors, communication providers, analytics tools, and authorities where legally required. Astrellix does not sell personal data.

7. International Data Transfers

When data is transferred outside the EU/EEA, we apply safeguards such as Standard Contractual Clauses and recognized adequacy mechanisms.

8. Data Retention

  • Contact inquiries: 2 years
  • Client data: contract duration + 7 years
  • Marketing data: until consent withdrawal
  • Cookie preferences: 12 months
  • Financial records: 7 years

9. Your Rights

  • Access and rectification
  • Erasure and restriction of processing
  • Data portability
  • Objection to processing
  • Withdrawal of consent
  • Complaint to supervisory authority

To exercise rights, contact: consult@astrellix.com

10-13. Security, Updates, and Contact

  • End-to-end encryption and access controls
  • Regular security assessments and incident procedures
  • SOC2 and ISO 27001 aligned practices
  • Policy updates communicated through website or email notices

For privacy concerns: consult@astrellix.com
Supervisory Authority: EU Data Protection Supervisory Authority