Privacy Policy

This policy explains what personal data we collect on astrak.agency, why, who we share it with, how long we keep it, and how to exercise your rights. It applies to the website and to the interactions that stem from it (appointment booking, contact requests, partner program).

Data controller

  • Legoax LLC, which operates the Astrak brand
  • Headquarters: 102 Gold Ave SW, Albuquerque, NM 87102, United States
  • Office in France: 2 rue du Lieutenant Trouflet, 61000 Alençon
  • EIN: 98-1759763
  • Contact for any question about your data: leo@astrak.agency

Astrak provides its services to companies located in the European Union. The General Data Protection Regulation (GDPR) and the French Data Protection Act therefore apply to the data we process.

The data we collect

  • Appointment booking (HubSpot calendar): first name, last name, email address, company, website, and any information you choose to add (phone number, needs, budget).
  • Website forms (partner program, contact): the information you enter, for example name, email, company and message.
  • Business communications : the content of our emails and notes from our calls, so we can follow up on your request.
  • Audience measurement and advertising, only according to your cookie choices: page views, visit source, device, interactions with the site, technical cookie identifiers.

We do not collect sensitive data and we do not sell any personal data.

Why we use it, and on what legal basis

  • Responding to your request and scheduling the appointment : pre-contractual measures taken at your request.
  • Preparing and performing a contract (quotes, support, invoicing): performance of the contract and legal obligations.
  • Contacting you again about our services, as a business professional: our legitimate interest. You may object at any time.
  • Measuring audience and improving the site : your consent, given through the cookie banner.
  • Measuring the effectiveness of our advertising campaigns : your consent to advertising cookies.

Cookies and trackers

The consent banner (CookieYes) lets you accept, refuse or customize cookies. Non-essential cookies are placed only with your consent, and you can change your mind at any time. The tools used are:

  • CookieYes : recording your cookie choices (necessary).
  • Google Tag Manager and Google Analytics 4 : audience measurement.
  • Microsoft Clarity : analysis of browsing behavior (clicks, scrolling) to improve our pages.
  • Google Ads : measurement of conversions generated by our ads.
  • OpenAI (ChatGPT ads): measurement of appointments generated by our ads. Without your consent to advertising cookies, the event sent is anonymous; with your consent, it includes your email address in encrypted (hashed) form.
  • HubSpot : appointment booking calendar and sales relationship tracking.

Recipients and processors

Your data is accessible to the Astrak team handling your request. It is also processed, on our behalf, by the following providers: HubSpot (CRM and appointments), Google (audience measurement and advertising), Microsoft (Clarity), OpenAI (advertising measurement), CookieYes (consent), O2switch (website hosting, in France) and our internal work tools (messaging, project management). These providers use your data only to deliver their service.

Transfers outside the European Union

Legoax LLC is a U.S. company, and several of our providers (HubSpot, Google, Microsoft, OpenAI) process data in the United States. These transfers are governed by the EU–US Data Privacy Framework where the provider participates in it, or otherwise by the European Commission's standard contractual clauses.

Retention periods

  • Prospects : 3 years after our last contact.
  • Clients : throughout the relationship, then 5 years. Accounting records are kept for 10 years.
  • Measurement and advertising cookies : 13 months at most. Your consent choice is kept for 12 months at most.
  • Applications and partners : 2 years after the last contact.

Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw your consent at any time and to set directives on what happens to your data after your death. To exercise them, write to leo@astrak.agency. We respond within one month. Proof of identity may be requested in case of reasonable doubt.

If you believe your rights are not being respected, you may file a complaint with the CNIL, the French data protection authority (www.cnil.fr).

Security

We restrict access to data to the people who need it, use tools with protected access, and encrypt communications with the site (HTTPS).

Updates

This policy may change, for example if we add a tool. Last updated: October 8, 2026. See also our legal notice.