Privacy Policy
Last updated: 18 January 2026
Privacy Policy
Last updated: 18 January 2026
Privacy Policy
Last updated: 18 January 2026
This Privacy Policy applies between you, the user of this Website, and Astragar Limited, the operator of this Website and a wholly owned subsidiary of Astragar, Inc. Astragar Limited takes the privacy of your information very seriously.
This Privacy Policy explains how we collect, use, store, and protect your personal data when you use this Website or interact with our services.
This Privacy Policy should be read alongside, and in addition to, our Terms and Conditions, which can be found at: astragar.com/terms.
Please read this Privacy Policy carefully.
This Privacy Policy applies between you, the user of this Website, and Astragar Limited, the operator of this Website and a wholly owned subsidiary of Astragar, Inc. Astragar Limited takes the privacy of your information very seriously.
This Privacy Policy explains how we collect, use, store, and protect your personal data when you use this Website or interact with our services.
This Privacy Policy should be read alongside, and in addition to, our Terms and Conditions, which can be found at: astragar.com/terms.
Please read this Privacy Policy carefully.
1. Definitions and Interpretation
1. Definitions and Interpretation
1. Definitions and Interpretation
In this Privacy Policy, the following definitions are used:
In this Privacy Policy, the following definitions are used:
Data
Data
Collectively, all information that you submit to Astragar Limited via the Website. This definition incorporates, where applicable, the definitions provided in applicable Data Protection Laws.
Collectively, all information that you submit to Astragar Limited via the Website. This definition incorporates, where applicable, the definitions provided in applicable Data Protection Laws.
Cookies
Cookies
A small text file placed on your computer by this Website when you visit certain parts of the Website and/or when you use certain features of the Website.
A small text file placed on your computer by this Website when you visit certain parts of the Website and/or when you use certain features of the Website.
Data Protection Laws
Data Protection Laws
Any applicable law relating to the processing of personal data, including but not limited to the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and any applicable EU GDPR provisions.
Any applicable law relating to the processing of personal data, including but not limited to the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and any applicable EU GDPR provisions.
GDPR
GDPR
The UK General Data Protection Regulation.
The UK General Data Protection Regulation.
Astragar Limited / we / us
Astragar Limited / we / us
Astragar Limited, a company incorporated in England and Wales (Company Number: 15841148), with its registered office at 333 Edgware Road, Second Floor, London NW9 6TD, United Kingdom, London, EC1V 2NX, United Kingdom, and a wholly owned subsidiary of Astragar, Inc.
Astragar Limited, a company incorporated in England and Wales (Company Number: 15841148), with its registered office at 333 Edgware Road, Second Floor, London NW9 6TD, United Kingdom, London, EC1V 2NX, United Kingdom, and a wholly owned subsidiary of Astragar, Inc.
Astragar, Inc.
Astragar, Inc.
Astragar, Inc., a corporation incorporated in the United States of America, acting as the parent holding company of the Astragar group.
Astragar, Inc., a corporation incorporated in the United States of America, acting as the parent holding company of the Astragar group.
User / you
User / you
Any third party that accesses the Website and is not either (i) employed by Astragar Limited and acting in the course of their employment, or (ii) engaged as a consultant or service provider accessing the Website in connection with the provision of such services.
Any third party that accesses the Website and is not either (i) employed by Astragar Limited and acting in the course of their employment, or (ii) engaged as a consultant or service provider accessing the Website in connection with the provision of such services.
Website
Website
The website that you are currently using, https://www.astragar.com, and any sub-domains unless expressly excluded by their own terms.
The website that you are currently using, https://www.astragar.com, and any sub-domains unless expressly excluded by their own terms.
2. Scope of This Privacy Policy
2. Scope of This Privacy Policy
2. Scope of This Privacy Policy
This Privacy Policy applies only to the actions of Astragar Limited and Users with respect to this Website.
It does not extend to any websites that can be accessed from this Website, including (but not limited to) links to third-party or social media websites. We are not responsible for the privacy practices or content of such websites.
This Privacy Policy applies only to the actions of Astragar Limited and Users with respect to this Website.
It does not extend to any websites that can be accessed from this Website, including (but not limited to) links to third-party or social media websites. We are not responsible for the privacy practices or content of such websites.
3. Data Controller
3. Data Controller
3. Data Controller
For the purposes of applicable Data Protection Laws, Astragar Limited is the data controller in respect of personal data collected via this Website.
Astragar, Inc. is the parent holding company of Astragar Limited and does not act as the data controller for this Website.
For the purposes of applicable Data Protection Laws, Astragar Limited is the data controller in respect of personal data collected via this Website.
Astragar, Inc. is the parent holding company of Astragar Limited and does not act as the data controller for this Website.
4. Data We May Collect
4. Data We May Collect
4. Data We May Collect
We may collect the following personal data from you:
We may collect the following personal data from you:
Name
Job title
Profession
Company name
Contact details (such as email address and telephone number)
IP address (automatically collected)
Usage data relating to your interaction with the Website
Name
Job title
Profession
Company name
Contact details (such as email address and telephone number)
IP address (automatically collected)
Usage data relating to your interaction with the Website
All data is collected in accordance with this Privacy Policy.
All data is collected in accordance with this Privacy Policy.
5. How We Collect Data
5. How We Collect Data
5. How We Collect Data
We collect data in the following ways:
We collect data in the following ways:
Data provided directly by you
Data received from other lawful sources
Data collected automatically when you use the Website
Data provided directly by you
Data received from other lawful sources
Data collected automatically when you use the Website
5.1 Data You Provide to Us
5.1 Data You Provide to Us
5.1 Data You Provide to Us
For example, when you:
For example, when you:
Contact us via the Website, email, telephone, or other means
Register interest in our services or pilots
Complete forms, surveys, or assessments
Subscribe to marketing communications
Engage with our services
Contact us via the Website, email, telephone, or other means
Register interest in our services or pilots
Complete forms, surveys, or assessments
Subscribe to marketing communications
Engage with our services
5.2 Data Collected Automatically
5.2 Data Collected Automatically
5.2 Data Collected Automatically
When you access the Website, we may automatically collect:
When you access the Website, we may automatically collect:
IP address
Browser type and version
Pages visited, time spent, and navigation behaviour
IP address
Browser type and version
Pages visited, time spent, and navigation behaviour
This information helps us improve Website functionality, security and user experience.
This information helps us improve Website functionality, security and user experience.
6. How We Use Your Data
6. How We Use Your Data
6. How We Use Your Data
We may use your data for the following purposes:
We may use your data for the following purposes:
Internal record keeping
Providing and improving our products and services
Responding to enquiries and requests
Delivering pilot programmes, assessments, or demonstrations
Sending marketing communications (where consent is given or soft opt-in applies)
Website analytics and optimisation
Internal record keeping
Providing and improving our products and services
Responding to enquiries and requests
Delivering pilot programmes, assessments, or demonstrations
Sending marketing communications (where consent is given or soft opt-in applies)
Website analytics and optimisation
We only process personal data where we have a lawful basis to do so.
We only process personal data where we have a lawful basis to do so.
7. Lawful Basis for Processing
7. Lawful Basis for Processing
7. Lawful Basis for Processing
Our lawful bases for processing your personal data include:
Our lawful bases for processing your personal data include:
Consent (where explicitly provided)
Contractual necessity (to provide requested services)
Legitimate interests, provided such interests are not overridden by your rights and freedoms
Legal obligation, where applicable
Consent (where explicitly provided)
Contractual necessity (to provide requested services)
Legitimate interests, provided such interests are not overridden by your rights and freedoms
Legal obligation, where applicable
You may withdraw consent at any time by contacting us at info@astragar.com.
You may withdraw consent at any time by contacting us at info@astragar.com.
8. Marketing Communications
8. Marketing Communications
8. Marketing Communications
Where permitted by law, we may send you marketing communications relating to our services.
You have the right to opt out of marketing communications at any time by:
Where permitted by law, we may send you marketing communications relating to our services.
You have the right to opt out of marketing communications at any time by:
Using the unsubscribe link in emails, or
Contacting us at info@astragar.com
Using the unsubscribe link in emails, or
Contacting us at info@astragar.com
9. Marketing Communications
9. Marketing Communications
9. Marketing Communications
We may share your data with:
We may share your data with:
Employees, contractors, and advisors of Astragar Limited
Trusted third-party service providers (e.g. hosting, analytics, CRM, payment processing)
Group companies, including Astragar, Inc., where necessary for business operations and subject to appropriate safeguards
Regulatory or law-enforcement authorities where required by law
Employees, contractors, and advisors of Astragar Limited
Trusted third-party service providers (e.g. hosting, analytics, CRM, payment processing)
Group companies, including Astragar, Inc., where necessary for business operations and subject to appropriate safeguards
Regulatory or law-enforcement authorities where required by law
We do not sell your personal data.
We do not sell your personal data.
10. International Data Transfers
10. International Data Transfers
10. International Data Transfers
Your data may be transferred outside the UK or EEA, including to group companies or service providers located abroad.
Where such transfers occur, we ensure appropriate safeguards are in place, including:
Your data may be transferred outside the UK or EEA, including to group companies or service providers located abroad.
Where such transfers occur, we ensure appropriate safeguards are in place, including:
Standard contractual clauses
Adequacy decisions
Other lawful transfer mechanisms
Standard contractual clauses
Adequacy decisions
Other lawful transfer mechanisms
11. Data Security
11. Data Security
11. Data Security
We implement appropriate technical and organisational measures to protect your data, including:
We implement appropriate technical and organisational measures to protect your data, including:
Secure servers
Access controls
Encryption and monitoring where appropriate
Secure servers
Access controls
Encryption and monitoring where appropriate
If you believe your data has been compromised, please contact us immediately at info@astragar.com.
If you believe your data has been compromised, please contact us immediately at info@astragar.com.
12. Data Retention
12. Data Retention
12. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or to comply with legal, regulatory, or contractual obligations.
You may request deletion of your data at any time, subject to legal requirements.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or to comply with legal, regulatory, or contractual obligations.
You may request deletion of your data at any time, subject to legal requirements.
13. Your Rights
13. Your Rights
13. Your Rights
You have the right to:
You have the right to:
Access your personal data
Rectify inaccurate or incomplete data
Request erasure of your data
Restrict processing
Object to processing
Request data portability
Access your personal data
Rectify inaccurate or incomplete data
Request erasure of your data
Restrict processing
Object to processing
Request data portability
To exercise any of these rights, contact info@astragar.com.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO): https://ico.org.uk
To exercise any of these rights, contact info@astragar.com.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO): https://ico.org.uk
14. Cookies
14. Cookies
14. Cookies
This Website uses cookies to improve functionality and user experience.
You can manage or disable cookies via your browser settings. Further details are provided in our Cookie Notice below.
This Website uses cookies to improve functionality and user experience.
You can manage or disable cookies via your browser settings. Further details are provided in our Cookie Notice below.
Type of Cookie
Type of Cookie
Purpose
Purpose
Strictly necessary cookies
Strictly necessary cookies
These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services.
These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services.
Analytical/performance cookies
Analytical/performance cookies
They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
Functionality cookies
Functionality cookies
These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region). By using the Website, you agree to our placement of functionality cookie.
These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region). By using the Website, you agree to our placement of functionality cookie.
Targeting cookies
Targeting cookies
These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.
These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.
Cookie Schedule
Cookie Schedule
Cookie Schedule
Below is a list of the cookies that we use. We have tried to ensure this is complete and up to date, but if you think that we have missed a cookie or there is any discrepancy, please let us know.
Below is a list of the cookies that we use. We have tried to ensure this is complete and up to date, but if you think that we have missed a cookie or there is any discrepancy, please let us know.
Strictly Necessary
Strictly Necessary
Strictly Necessary
We use the following strictly necessary cookies:
We use the following strictly necessary cookies:
Description
Description
Purpose
Purpose
Session cookie
Session cookie
Used to remember users and maintain their session while using the website
Used to remember users and maintain their session while using the website
Authentication cookie
Authentication cookie
Ensures the user remains authenticated across different pages, which is crucial for secure access
Ensures the user remains authenticated across different pages, which is crucial for secure access
Security cookie
Security cookie
To protect against security risks like CSRF (Cross-Site Request Forgery) attacks
To protect against security risks like CSRF (Cross-Site Request Forgery) attacks
Load balancing cookie
Load balancing cookie
Helps distribute network traffic effectively, ensuring the site remains available and operational
Helps distribute network traffic effectively, ensuring the site remains available and operational
Compliance cookie
Compliance cookie
Records a user's acceptance of cookie policy or privacy notice, ensuring compliance with regulations like GDPR
Records a user's acceptance of cookie policy or privacy notice, ensuring compliance with regulations like GDPR
Analytics / Performance
Description
Purpose
Google Analytics 4 (GA4)
Measures website traffic, sources and on-site behaviour to help us improve the site; set only after you accept analytics cookies.
Targeting / Marketing
Description
Purpose
Leadinfo
Identifies the company associated with a visitor’s IP address for B2B marketing and lead generation; set only after you accept marketing cookies.
LinkedIn Insight Tag
Conversion tracking and retargeting for LinkedIn advertising.
Google Ads
Conversion tracking and remarketing for Google advertising.
Meta Pixel
Conversion tracking and retargeting for Meta (Facebook and Instagram) advertising.
15. Changes to This Privacy Policy
15. Changes to This Privacy Policy
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page and will take effect immediately upon publication.
Your continued use of the Website constitutes acceptance of the updated Privacy Policy.
We may update this Privacy Policy from time to time. Any changes will be posted on this page and will take effect immediately upon publication.
Your continued use of the Website constitutes acceptance of the updated Privacy Policy.
16. Contact Us
16. Contact Us
16. Contact Us
If you have any questions about this Privacy Policy or how your data is handled, please contact:
If you have any questions about this Privacy Policy or how your data is handled, please contact:
Astragar Limited
Email: info@astragar.com
Astragar Limited
Email: info@astragar.com
© 2026 Astragar, Inc. All rights reserved. Astragar Limited operates this website as a subsidiary of Astragar, Inc.
© 2026 Astragar, Inc. All rights reserved. Astragar Limited operates this website as a subsidiary of Astragar, Inc.
See your cyber risk in $ terms — not CVSS scores.
See your cyber risk in $ terms — not CVSS scores.
See your cyber risk in $ terms — not CVSS scores.
See your cyber risk in $ terms — not CVSS scores.