Introduction

AstoneByte ("we," "our," or "us") is a software services company based in London, UK. We offer web development, mobile apps, AI solutions, cloud services, security, and data analytics.

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR), Data Protection Act 2018, and applicable international laws such as the EU GDPR. This Privacy Policy explains how we collect, use, share, and safeguard your information when you interact with our Services.

By using our Services, you accept this Privacy Policy. If you do not agree, please do not use our Services or contact us.

Information We Collect

Personal Data

We collect personal data you provide, for example:

• Contact details (name, email, phone, address)
• Company info (organisation, job title)
• Payments & billing info
• Communications (support requests, surveys)
• Consent, preferences, service-interest data

Usage & Device Data

Automatically collected data includes:

• Browser, device, OS
• Pages visited, clicks, session duration
• IP-based location (country, city)
• Error logs, performance metrics

Cookies & Tracking Technologies

We use cookies, pixels, and similar tools to:

• Analyze site usage
• Store preferences
• Enhance user experience

You can control cookies via browser settings, but disabling some may impact functionality.

How We Use Your Data & Legal Bases

We use your data for:

• Service delivery and support (contractual necessity)
• Communication and marketing (with consent or legitimate interest)
• Site improvement and personalization (legitimate interest)
• AI model training & analytics (contract, consent, anonymized data only)
• Legal, regulatory, and security compliance

International Data Transfers

We may transfer data outside the UK, potentially to countries without equivalent privacy laws. We ensure protections via:

• UK International Data Transfer Agreements (IDTA)
• Standard Contractual Clauses (SCCs)
• EU–US or UK–US Data Privacy Framework (when applicable)

AI Processing & Safeguards

For AI chatbots, workflow automation, and analytics:

• We only use data with lawful basis (contract or consent).
• We minimize, anonymize or pseudonymize personal data before use.
• Human oversight ensures fairness and accuracy.
• Automated decisions affecting individuals can be reviewed or contested.

Data Sharing & Third Parties

Your data may be shared with:

• Cloud, hosting, email, billing, and analytics providers
• Consultants and contractors under NDA
• Legal, audit, or public authorities as required

Data Retention & Security

We retain personal data only as long as needed:

• Client inquiries & contracts: up to 6 years (per UK statute of limitations)
• AI/Analytics data: anonymized when no longer needed
• Support logs: 2 years from resolution

We use appropriate technical and organisational safeguards, such as encryption, access controls, regular audits, and industry-standard security measures.

Your Rights

Under the UK GDPR, EU GDPR, and other international laws, you have rights including:

• Access, correction, deletion, restriction, portability
• Object to processing (including for marketing or AI)
• Withdraw consent at any time
• Challenge automated decision-making
• Lodge a complaint with the ICO, EU DPA, or relevant authority

To exercise your rights, contact us at privacy@astonebyte.co.uk.

Changes to This Policy

We may update this policy periodically. We’ll post the updated version here and notify you when changes are material.

The "Last Updated" date at the top indicates the latest revision.

Contact & Data Protection Officer

For questions or to exercise your rights, contact:

If you’re in the UK, you can also lodge a complaint with the ICO. EU residents may contact their local DPA.