Privacy notice

Who we are

Astrape is a sole trader business run by Rayyan Ghumra, trading as Astrape. Under UK data protection law (the UK GDPR and the Data Protection Act 2018), Rayyan Ghumra is the "controller" of the personal information described in this notice.

Contact us about anything in this notice at hello@astrape.co.uk. Our postal address is 66 Hampton Road, Birmingham B6 6AB. We are registered with the Information Commissioner's Office (ICO), registration number ZC268834.

What information we collect

• Through the contact form: your name, your email address, your message, and (only if you choose to give them) your business name and current website.

• If you email us directly: your email address, your name if it appears, and whatever you tell us in the message.

• Technical information: when you visit, our hosting provider handles your IP address and basic request details (such as the page requested and your browser type) to deliver the site and keep it secure. When you send the contact form, your IP address is also used briefly to limit repeated submissions. We do not store it in a database.

We do not use analytics, advertising or tracking tools, and we do not set cookies. See our cookies and storage page for detail.

How and why we use it

• To reply to your enquiry and take steps at your request before a project starts. Our lawful basis is that this is necessary to take steps at your request before entering into a contract, and our legitimate interest in responding to business enquiries.

• To provide our services and manage our relationship, if you become a client. Lawful basis: performing our contract with you.

• To keep accounting and tax records. Lawful basis: our legal obligations.

• To keep the website secure and prevent spam and abuse. Lawful basis: our legitimate interests in protecting the site and our inbox.

We do not sell your information, we do not send marketing emails unless you ask us to, and we do not make automated decisions about you.

Who we share it with

We use a small number of service providers to run the site and handle messages. They process information only on our behalf and under their own data protection terms.

• Cloudflare hosts the website, handles its domain name records and protects it from abuse. It sees visitors' IP addresses and request details.

• Resend delivers the contact form message to our inbox as an email, so it processes the contents of your enquiry.

• Hostinger provides our hello@astrape.co.uk mailbox, where enquiries are received and stored.

• Google (Gmail) is used to read and reply to that mailbox, so your messages are also accessible through our Google account.

We may also share information where the law requires it, for example with a court or regulator.

Transfers outside the UK

Some of these providers handle data outside the UK. For example, Resend stores its data in the United States. Where information leaves the UK, we rely on safeguards that UK data protection law permits, such as standard contractual clauses. Contact us if you would like more detail.

How long we keep it

• Resend keeps delivery logs and the contents of messages it sends for 30 days, and then deletes them automatically.

• Our mailbox: enquiries that do not lead to any work are deleted after 2 months.

• If we work together: we keep project records for as long as the work continues, and then for as long as the law requires us to keep accounting and tax records, which is usually around six years.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you;

• ask us to correct anything that is wrong or incomplete;

• ask us to delete your information, in some circumstances;

• ask us to restrict how we use your information, in some circumstances;

• object to us using your information on the basis of our legitimate interests; and

• ask for information you gave us to be sent to you in a portable format, where this applies.

To use any of these rights, email hello@astrape.co.uk. We will normally reply within one month. There is no charge.

Complaints

If you are unhappy with how we have handled your information, please tell us first at hello@astrape.co.uk. We will acknowledge your complaint within 30 days and respond without undue delay.

You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this notice

If we change how we use personal information we will update this page and the date at the top.