Legal
Privacy Policy
How Astra Cybertech Pvt. Ltd. handles personal information collected through this website.
Last updated: 7 September 2026
Who we are
Astra Cybertech Pvt. Ltd. is a cybersecurity services company registered in India, with its registered office in Mumbai. For questions about this policy or about personal data we hold, contact info@astracybertech.com.
What we collect
We collect two categories of information through this site.
- Information you give us. When you submit the contact form we collect your name, email address, organisation, optional phone number, the service you are interested in, and the message you write. We collect this because you asked us to contact you.
- Information collected automatically. Where you consent to analytics cookies, we collect aggregated usage data — pages viewed, approximate region, device and browser type, and how you arrived. This is used to understand which content is useful.
We do not collect special category data through this site, and you should not send it to us. If your enquiry concerns an active security incident, do not include indicators, credentials, log extracts or evidence in a first contact — call us instead.
How we use it
- To respond to your enquiry and, where relevant, to scope work.
- To send you information you have specifically asked for.
- To maintain records required by our own certifications and by law.
- To understand, in aggregate, how the website is used.
We do not sell personal information, and we do not share it with third parties for their own marketing.
Legal basis
Where the GDPR applies, we rely on your consent for analytics cookies and on our legitimate interest in responding to business enquiries for the contact form. Where the Digital Personal Data Protection Act 2023 applies, we process on the basis of the consent you give when submitting the form for the stated purpose.
Who processes it
Enquiries submitted through this site are delivered to a mailbox operated by our email provider and are handled by Astra personnel. Website analytics are processed by Google Analytics, subject to the consent choice you make. Our website is served by our hosting provider, which processes standard server logs.
How long we keep it
Enquiries that do not lead to an engagement are retained for up to 24 months and then deleted. Records relating to an engagement are retained for the period required by the contract and by our statutory and certification obligations. Analytics data is retained according to the retention period configured in our analytics account.
How we protect it
This site is served over TLS. The contact form validates and size-limits input before transmission and does not store submissions in your browser. Internally, access to enquiry data is limited to personnel who need it, under the controls of our ISO/IEC 27001 certified information security management system.
Your rights
Subject to the law that applies to you, you may ask us to confirm what personal data we hold about you, to correct it, to delete it, or to stop processing it. Write to info@astracybertech.com and we will respond within the statutory period. You may also withdraw consent to analytics cookies at any time from the cookie settings on this site.
International transfers
Our service providers may process data outside India. Where they do, we rely on the transfer mechanisms those providers make available and satisfy ourselves that appropriate safeguards are in place.
Changes
We will update this page when our practices change, and will change the date at the top when we do.