Privacy Policy
Last updated: 17 April 2026
Introduction
Astra Shadow ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
We respect your privacy and are committed to protecting your personal data. This policy will inform you about how we look after your personal information and tell you about your privacy rights under UK data protection laws.
Information We Collect
We may collect and process the following categories of personal information:
Information You Provide Directly
- Contact details including name, email address, and postal address
- Financial information you share during consultations to help us provide appropriate guidance
- Communication preferences and any feedback you provide
- Information included in correspondence when you contact us
Information Collected Automatically
- Technical data including IP address, browser type, and operating system
- Usage data about how you interact with our website
- Cookie data as described in our Cookies Policy
How We Use Your Information
We use your personal information for the following purposes:
- To provide financial guidance services you have requested
- To communicate with you about our services, appointments, and inquiries
- To improve our website functionality and user experience
- To send you information about services we believe may interest you, where you have consented
- To comply with legal obligations and regulatory requirements
- To maintain records for business purposes and continuity of service
Legal Basis for Processing
Under UK data protection law, we must have a legal basis for processing your personal information. We rely on the following legal bases:
- Contract: Processing is necessary to perform our contract with you or take steps at your request before entering a contract
- Consent: You have given clear consent for us to process your personal data for specific purposes
- Legitimate interests: Processing is necessary for our legitimate business interests, provided these are not overridden by your rights
- Legal obligation: Processing is necessary to comply with legal or regulatory requirements
Data Sharing and Disclosure
We do not sell your personal information to third parties. We may share your information in the following circumstances:
- With service providers who assist us in operating our business (such as email hosting or appointment scheduling platforms), who are contractually obligated to protect your data
- With professional advisors including lawyers and accountants when necessary for business operations
- When required by law, regulation, or legal process
- To protect our rights, property, or safety, or that of our clients or others
- With other professionals where you have requested a referral and given explicit consent
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Secure storage of physical and electronic records
- Encryption of sensitive data during transmission
- Access controls limiting who can view your information
- Regular security assessments and updates
- Staff training on data protection and confidentiality
While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but continually work to maintain best practices.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.
- Client records are retained for seven years following the end of our professional relationship, in accordance with financial services guidelines
- Marketing communications data is retained until you withdraw consent or we determine it is no longer relevant
- Website usage data is typically retained for up to two years
When personal information is no longer needed, we securely delete or anonymize it.
Your Rights
Under UK data protection law, you have several rights regarding your personal information:
- Right of access: You can request a copy of the personal information we hold about you
- Right to rectification: You can ask us to correct inaccurate or incomplete information
- Right to erasure: You can request deletion of your personal data in certain circumstances
- Right to restrict processing: You can ask us to limit how we use your information
- Right to data portability: You can request your data in a structured, commonly used format
- Right to object: You can object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time
To exercise any of these rights, please contact us at [email protected]. We will respond within one month of receiving your request.
Cookies
Our website uses cookies to enhance your browsing experience and analyze website usage. For detailed information about the cookies we use and how to manage them, please see our Cookies Policy.
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.
Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or for legal, operational, or regulatory reasons. The updated version will be indicated by a revised "Last updated" date at the top of this page.
We encourage you to review this policy regularly. If we make material changes, we will notify you by email or through a notice on our website prior to the changes taking effect.
Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
Astra Shadow
42 Whiteladies Road
Clifton, Bristol BS8 2NH
United Kingdom
Email: [email protected]
Complaints
If you believe we have not handled your personal information properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk