1. Data controller and contact
ASTRELIX DIGITAL LTD is the controller of personal information processed for the purposes described in this Policy. References to “Astrelix”, “we”, “us” and “our” mean ASTRELIX DIGITAL LTD. For privacy enquiries or requests concerning your personal information, contact contact@astrelixdigital.com.
2. Information we process
Depending on how you interact with us, we process contact details and correspondence; account or guest-workspace identifiers; project records, prompts, conversations, uploaded references and generated assets; and technical information needed to deliver and secure the service, including IP addresses and request-verification data. We receive information from you and, where applicable, from authentication and security providers. Please do not submit sensitive personal information that is unnecessary for your enquiry or project.
3. Purposes and lawful bases
We use personal information to respond to enquiries, provide and maintain requested services, manage workspaces, prevent misuse and fulfil legal obligations. We rely on performance of a contract or steps requested before entering a contract where relevant; legitimate interests in managing correspondence, operating and securing our services; and compliance with legal obligations. Where processing requires consent, we will request it for the stated purpose. Providing enquiry information is voluntary, although we may be unable to respond without appropriate contact details.
4. AI-assisted processing
When you submit a request through an enabled model-assisted feature, the prompt, selected references and relevant project or conversation context may be transmitted to the configured model provider to fulfil that request. Available integrations are described in the product information. Provider processing is subject to the applicable service configuration and terms. Some preview features use simulated responses and do not submit generation requests to external model providers. AI content generation is not a decision about an individual with legal or similarly significant effects.
5. Service providers and disclosures
We use service providers for hosting, storage, authentication, request verification and enabled AI features. These include Cloudflare for website delivery and security, Supabase for configured website enquiry storage, and the model provider used for an enabled generation request. Information may also be disclosed where required by law or necessary to protect legal rights. Information concerning additional providers and their processing can be requested through our privacy contact.
6. International transfers
Service providers may process information outside the United Kingdom. Any international transfer must comply with applicable data-protection requirements, including an applicable adequacy decision or appropriate contractual safeguards where required. You may contact us for information about the transfer arrangements relevant to your use of the service and how to obtain details of applicable safeguards.
7. Retention and security
We retain information for as long as reasonably necessary for the purposes for which it was collected. Retention is determined by the duration of an enquiry or service relationship, the need to maintain requested project records, applicable legal obligations and the resolution of disputes. Access to enquiry records is restricted to authorised administrators. No method of electronic storage or transmission can provide an absolute guarantee of security.
8. Your rights
Subject to applicable law and the basis of processing, you may request access, correction, erasure, restriction of processing or transfer of your personal information. Where processing is based on consent, you may withdraw that consent without affecting the lawfulness of earlier processing. Send requests to contact@astrelixdigital.com. We may request information reasonably necessary to verify your identity and will respond within the time limits required by law.
9. Right to object and complaints
You have the right to object to processing based on legitimate interests on grounds relating to your particular situation. You may also complain to the UK Information Commissioner’s Office at ico.org.uk. We encourage you to contact us so that we can investigate your concern, but you do not need to do so before contacting the regulator.
10. Policy updates
We may update this Policy to reflect changes in our services or applicable requirements. The date above identifies the latest revision. Where required, we will provide additional notice of material changes. Third-party websites and services accessed independently are governed by their own privacy notices.