This Privacy Policy explains how Harbor To Astro Law processes personal data when you use harbortoastroof.asia. It applies to visitors, prospective clients, and other individuals who communicate with us through the site.
Subject to applicable law, you may have rights to access your data, request correction, ask for deletion, object to certain processing, and request restriction or portability in limited cases. Some requests may not be granted where we must keep information for legal, regulatory, or professional reasons.
To exercise a privacy right, send a clear request using the contact details in this policy and describe the data or right concerned. We may ask for information needed to verify your identity and to assess the request. If a request is complex or numerous, we may respond within the period allowed by law.
We retain personal data for the period necessary to provide the site, handle inquiries, maintain records, meet legal and professional obligations, and resolve disputes. When data is no longer needed, we delete it or anonymise it, unless a longer retention period is required by law or justified by a legitimate business need.
If we make material changes, we will update the policy on the site and may provide additional notice where appropriate. The revised version will apply from the date it is posted unless a different effective date is stated.
We use personal data to operate and secure the website, respond to inquiries, manage client or prospective client communications, assess and handle requests, maintain records, improve site performance, detect misuse, and comply with legal and professional obligations. Where permitted, we may also use data to support internal administration and to defend against claims.
We may share personal data with trusted service providers that support hosting, security, analytics, communications, document handling, or other operational functions. These parties act on our instructions where required and are expected to protect the information they process for us. We do not authorise them to use personal data for their own unrelated purposes.
We may disclose personal data where required by law, court order, or a lawful request from a public authority. We may also share information when necessary to establish, exercise, or defend legal claims, to protect the rights and security of the site, or to comply with professional obligations.
We may collect identification details, contact information, professional or business information, correspondence, technical identifiers, and usage data. In a legal services context, this may also include information submitted in inquiries, intake forms, or case-related communications.
We receive personal data directly from users when they complete forms, send messages, or otherwise interact with the site. We also collect data automatically through device and browser signals, cookies, and similar technologies, and we may derive limited information from the way the site is accessed and used.
The site may use essential cookies to support basic functionality, preference cookies to remember settings, and analytics cookies to understand site performance and usage. Where applicable, cookies may be session-based or persistent, depending on their purpose.
You may refuse or delete cookies through your browser settings. Some cookies are necessary for the site to function, and disabling them may affect certain features. Where a consent tool is provided, you may change your preferences for non-essential cookies at any time.
For users in scope, we process personal data under GDPR principles such as lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. We rely on an appropriate legal basis for each processing activity, which may include performance of a contract, legitimate interests, legal obligations, or consent where required.
Where the GDPR applies, individuals may have rights to access, rectify, erase, restrict, object to processing, and receive data portability in appropriate cases. Where processing is based on consent, consent may be withdrawn at any time without affecting prior processing. A complaint may also be raised with the competent supervisory authority.
