Privacy Policy

Last updated: 18 January 2026

Privacy Policy

Last updated: 18 January 2026

Privacy Policy

Last updated: 18 January 2026

This Privacy Policy applies between you, the user of this Website, and Astragar Limited, the operator of this Website and a wholly owned subsidiary of Astragar, Inc. Astragar Limited takes the privacy of your information very seriously.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you use this Website or interact with our services.

This Privacy Policy should be read alongside, and in addition to, our Terms and Conditions, which can be found at: astragar.com/terms.

Please read this Privacy Policy carefully.

1. Definitions and Interpretation

In this Privacy Policy, the following definitions are used:

Data

Collectively, all information that you submit to Astragar Limited via the Website. This definition incorporates, where applicable, the definitions provided in applicable Data Protection Laws.

Cookies

A small text file placed on your computer by this Website when you visit certain parts of the Website and/or when you use certain features of the Website.

Data Protection Laws

Any applicable law relating to the processing of personal data, including but not limited to the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and any applicable EU GDPR provisions.

GDPR

The UK General Data Protection Regulation.

Astragar Limited / we / us

Astragar Limited, a company incorporated in England and Wales (Company Number: 15841148), with its registered office at 124 City Road, London, EC1V 2NX, United Kingdom, and a wholly owned subsidiary of Astragar, Inc.

Astragar, Inc.

Astragar, Inc., a corporation incorporated in the United States of America, acting as the parent holding company of the Astragar group.

User / you

Any third party that accesses the Website and is not either (i) employed by Astragar Limited and acting in the course of their employment, or (ii) engaged as a consultant or service provider accessing the Website in connection with the provision of such services.

Website

The website that you are currently using, https://www.astragar.com, and any sub-domains unless expressly excluded by their own terms.

2. Scope of This Privacy Policy

This Privacy Policy applies only to the actions of Astragar Limited and Users with respect to this Website.

It does not extend to any websites that can be accessed from this Website, including (but not limited to) links to third-party or social media websites. We are not responsible for the privacy practices or content of such websites.

3. Data Controller

For the purposes of applicable Data Protection Laws, Astragar Limited is the data controller in respect of personal data collected via this Website.

Astragar, Inc. is the parent holding company of Astragar Limited and does not act as the data controller for this Website.

4. Data We May Collect

We may collect the following personal data from you:

  • Name

  • Job title

  • Profession

  • Company name

  • Contact details (such as email address and telephone number)

  • IP address (automatically collected)

  • Usage data relating to your interaction with the Website

All data is collected in accordance with this Privacy Policy.

5. How We Collect Data

We collect data in the following ways:

  • Data provided directly by you

  • Data received from other lawful sources

  • Data collected automatically when you use the Website

5.1 Data You Provide to Us

For example, when you:

  • Contact us via the Website, email, telephone, or other means

  • Register interest in our services or pilots

  • Complete forms, surveys, or assessments

  • Subscribe to marketing communications

  • Engage with our services

5.2 Data Collected Automatically

When you access the Website, we may automatically collect:

  • IP address

  • Browser type and version

  • Pages visited, time spent, and navigation behaviour

This information helps us improve Website functionality, security and user experience.

6. How We Use Your Data

We may use your data for the following purposes:

  • Internal record keeping

  • Providing and improving our products and services

  • Responding to enquiries and requests

  • Delivering pilot programmes, assessments, or demonstrations

  • Sending marketing communications (where consent is given or soft opt-in applies)

  • Website analytics and optimisation

We only process personal data where we have a lawful basis to do so.

7. Lawful Basis for Processing

Our lawful bases for processing your personal data include:

  • Consent (where explicitly provided)

  • Contractual necessity (to provide requested services)

  • Legitimate interests, provided such interests are not overridden by your rights and freedoms

  • Legal obligation, where applicable

You may withdraw consent at any time by contacting us at info@astragar.com.

8. Marketing Communications

Where permitted by law, we may send you marketing communications relating to our services.

You have the right to opt out of marketing communications at any time by:

9. Marketing Communications

We may share your data with:

  • Employees, contractors, and advisors of Astragar Limited

  • Trusted third-party service providers (e.g. hosting, analytics, CRM, payment processing)

  • Group companies, including Astragar, Inc., where necessary for business operations and subject to appropriate safeguards

  • Regulatory or law-enforcement authorities where required by law

We do not sell your personal data.

10. International Data Transfers

Your data may be transferred outside the UK or EEA, including to group companies or service providers located abroad.

Where such transfers occur, we ensure appropriate safeguards are in place, including:

  • Standard contractual clauses

  • Adequacy decisions

  • Other lawful transfer mechanisms

11. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

  • Secure servers

  • Access controls

  • Encryption and monitoring where appropriate

If you believe your data has been compromised, please contact us immediately at info@astragar.com.

12. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or to comply with legal, regulatory, or contractual obligations.

You may request deletion of your data at any time, subject to legal requirements.

13. Your Rights

You have the right to:

  • Access your personal data

  • Rectify inaccurate or incomplete data

  • Request erasure of your data

  • Restrict processing

  • Object to processing

  • Request data portability

To exercise any of these rights, contact info@astragar.com.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO): https://ico.org.uk

14. Cookies

This Website uses cookies to improve functionality and user experience.

You can manage or disable cookies via your browser settings. Further details are provided in our Cookie Notice below.

Type of Cookie
Type of Cookie
Purpose
Purpose

Strictly necessary cookies

Strictly necessary cookies

These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services.

Analytical/performance cookies

Analytical/performance cookies

They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.

Functionality cookies

Functionality cookies

These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region). By using the Website, you agree to our placement of functionality cookie.

Targeting cookies

Targeting cookies

These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.

Cookie Schedule

Below is a list of the cookies that we use. We have tried to ensure this is complete and up to date, but if you think that we have missed a cookie or there is any discrepancy, please let us know.

Strictly Necessary

We use the following strictly necessary cookies:

Description
Description
Purpose
Purpose

Session cookie

Session cookie

Used to remember users and maintain their session while using the website

Authentication cookie

Authentication cookie

Ensures the user remains authenticated across different pages, which is crucial for secure access

Security cookie

Security cookie

To protect against security risks like CSRF (Cross-Site Request Forgery) attacks

Load balancing cookie

Load balancing cookie

Helps distribute network traffic effectively, ensuring the site remains available and operational

Compliance cookie

Compliance cookie

Records a user's acceptance of cookie policy or privacy notice, ensuring compliance with regulations like GDPR

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page and will take effect immediately upon publication.

Your continued use of the Website constitutes acceptance of the updated Privacy Policy.

16. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact:

Astragar Limited
Email: info@astragar.com

© 2026 Astragar, Inc. All rights reserved. Astragar Limited operates this website as a subsidiary of Astragar, Inc.

See your cyber risk in $ terms — not CVSS scores.

©Astragar All rights reserved.

See your cyber risk in $ terms — not CVSS scores.

©Astragar All rights reserved.

See your cyber risk in $ terms — not CVSS scores.

©Astragar All rights reserved.