1. Data controller
- Controller: Dayneris Domínguez González, trading as AstroHue.
- Tax identification number: Y3312271D.
- Postal address: Calle Mozart 27, 35110 Santa Lucía de Tirajana, Las Palmas, Spain.
- Privacy contact: info@astrohue.es.
For UK data protection purposes, AstroHue acts as an overseas controller when offering services to people in the United Kingdom. Questions and rights requests can be sent directly to the contact above.
2. Information we may process
- Identity and contact information, such as name, company, email, telephone and country.
- Professional context, such as industry, website, team size, commercial needs and current process.
- Booking information, including date, time zone, form answers and attendance.
- Communications, replies, requests and contact preferences.
- Limited technical information for security, such as IP address, browser and privacy choices.
- Campaign source and optional measurement data where a valid legal basis and consent exist.
Do not submit patient health records or other clinical information through a demonstration or booking form.
3. Purposes and legal bases
| Purpose | Legal basis | Typical information |
|---|---|---|
| Respond to an enquiry and prepare a proposal or demonstration. | Steps requested before entering a contract and, where appropriate, consent. | Identity, contact and business context. |
| Manage bookings, reminders and appointment communications. | Performance of the request or pre-contractual relationship. | Contact details, date, time zone and booking answers. |
| Send AstroHue marketing communications. | Consent or another applicable lawful basis for business marketing, always with a simple opt-out. | Email, telephone, preferences and consent record. |
| Security, abuse prevention and technical operation. | Legitimate interests in protecting the site and compliance with legal obligations. | Technical and security logs. |
| Optional analytics or advertising measurement. | Consent, when enabled. | Identifiers and browsing data described in the Cookie Policy. |
We do not use solely automated decisions that produce legal or similarly significant effects.
4. Service providers and international transfers
Vetted providers may process information under contract and AstroHue's instructions where needed for hosting, email, CRM, booking, automation, support and security. HighLevel may be used for CRM records, forms, booking and communications.
Providers may process information outside the European Economic Area or the United Kingdom. Where required, we rely on recognised safeguards such as adequacy decisions, approved data privacy frameworks, standard contractual clauses or the UK addendum. We do not sell personal information or share it for cross-context behavioural advertising.
Information may also be disclosed to public bodies where required by law.
5. Retention
- Enquiries and demonstration requests: for as long as needed to respond and ordinarily up to 24 months to retain commercial context, unless you object or a different obligation applies.
- Client and contractual records: for the relationship and applicable accounting, tax and liability periods.
- Consent and suppression records: while needed to demonstrate preferences and prevent further messages.
- Technical logs: for limited periods needed for security and incident response.
6. Your privacy rights
Depending on your location, you may request access, correction, deletion, restriction, objection and portability, or withdraw consent without affecting earlier processing. Email info@astrohue.es with “Privacy request” and the right you wish to exercise. Reasonable information may be requested to verify identity.
People in the EEA may complain to the Spanish Data Protection Agency or their local authority. UK residents may contact the ICO. Residents of US states with applicable privacy laws may request access, correction or deletion and may appeal a refused request by replying to AstroHue's decision. AstroHue does not discriminate against anyone for exercising a privacy right.
7. Security, children and changes
We use reasonable access controls, minimisation, backups, encryption where appropriate and supplier review. No system is completely infallible, but incidents will be handled under applicable law.
Services are designed for professionals and businesses and are not directed to children under 18. This policy may be updated for legal or technical changes; the current date appears at the top.