1) Who we are

ASTROLAB MEDIA LIMITED is the data controller for the personal information described in this Privacy Policy (unless otherwise stated).

2) Information we collect

We may collect the following categories of personal information:

• Contact details (e.g., name, email address, phone number, company name).
• Inquiry content (e.g., messages you send, project briefs, service requirements, attachments you provide).
• Business information (e.g., role/title, industry, company size, marketing objectives).
• Website usage data (e.g., IP address, approximate location, device information, browser type, pages viewed, referring pages, and timestamps).
• Communication metadata (e.g., date/time of contact, email headers, and support history).

We do not intentionally collect special category data (such as health, biometrics, or political opinions). Please do not send such information to us.

3) How we use information

We use personal information to:

• Respond to inquiries and provide customer support.
• Assess your request and prepare proposals, quotes, or service recommendations.
• Deliver and manage our services (e.g., campaign execution, reporting, account administration).
• Improve our website, user experience, and service quality.
• Maintain security, prevent fraud, and protect our rights and operations.
• Comply with legal obligations, accounting, and record-keeping requirements.

4) Legal bases for processing (EEA/UK visitors)

If you are located in the European Economic Area (EEA) or the United Kingdom, we rely on one or more of the following legal bases:

• Contract: processing necessary to provide services or take steps at your request before entering into a contract.
• Legitimate interests: to operate our business, respond to inquiries, improve our services, and secure our website (balanced against your rights).
• Consent: where required (for example, certain cookies or marketing communications where applicable).
• Legal obligation: to comply with laws (e.g., accounting, tax, regulatory obligations).

5) Cookies & analytics

Cookies are small text files stored on your device. We may use cookies and similar technologies to:

• Ensure the website functions properly.
• Understand website traffic and usage patterns.
• Improve performance and user experience.

You can control cookies through your browser settings. Disabling cookies may affect site functionality. Where required by law, we will request your consent before placing non-essential cookies.

6) Sharing & service providers (processors)

We may share personal information with trusted third parties only as needed to operate our business and provide services, such as:

• Website hosting and infrastructure providers.
• Analytics and performance measurement tools.
• Customer communication tools (email, support, CRM).
• Professional advisers (legal, accounting) when necessary.

These providers are authorized to process personal information only for the purposes described and are required to protect it under contractual obligations.

7) International transfers

We are based in Hong Kong and may process or store your information in Hong Kong and other countries where our service providers operate. When transferring personal information internationally, we take steps to ensure an adequate level of protection as required by applicable laws (for example, contractual safeguards for EEA/UK personal data where applicable).

8) Data retention

We keep personal information only for as long as necessary for the purposes described in this Policy, including:

• The time needed to respond to your inquiry and manage our relationship.
• The duration of any service contract and a reasonable period thereafter.
• As required to meet legal, accounting, or reporting obligations.

When information is no longer needed, we securely delete or anonymize it.

9) Security

We implement reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. However, no method of transmission or storage is 100% secure.

10) Your rights

Depending on your location and applicable law, you may have rights regarding your personal information, such as:

• Access: request a copy of the personal information we hold about you.
• Correction: ask us to correct inaccurate or incomplete information.
• Deletion: request deletion of your information in certain circumstances.
• Objection: object to processing based on legitimate interests in certain circumstances.
• Restriction: request restriction of processing in certain circumstances.
• Portability: request a portable copy of information you provided to us (where applicable).
• Withdraw consent: where processing is based on consent, you can withdraw it at any time.

To exercise your rights, contact us using the details in the “Contact” section. We may request verification of identity before responding.

11) Children’s privacy

Our website and services are not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us so we can take appropriate action.

12) Updates to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The “Last updated” date at the top indicates when this Policy was most recently revised.

13) Contact

If you have questions about this Privacy Policy or how we handle personal information, contact: