Astralcove

Effective 15 October 2026

Privacy policy

This policy explains what Astralcove LLC collects when you use astralcove.com, the free website audit and our services, why we collect it, who processes it, how long we keep it and the rights you have.

Who we are

Astralcove LLC, a Delaware limited liability company, 651 N Broad St Suite 201, Middletown, DE 19709, United States. We are the controller of the personal information described here. Contact: [email protected].

What we collect

  • Website address you submit to the audit and the audit results for that site. The audit reads public pages of the site you enter. If the site is not yours, you confirm you are allowed to submit it.
  • Contact details you give us to receive the report, book a call or ask a question: name, email address, phone number if you add it, and the website or company you represent.
  • Country of your connection, taken from the request, used only to decide the cookie consent rule for your region. We do not store your IP address for this purpose.
  • Campaign parameters in the link you arrived from (for example utm_source and utm_campaign) and the page you landed on, stored in a first party cookie so we know which channel brought you.
  • Usage data from analytics and advertising tags (Google Analytics, Google Ads, Meta) where permitted by the cookie rule for your region. See the cookie notice.
  • Call details when you book: the time, your answers to the booking questions and, during an engagement, the information you share about your business.

Why we use it

  • To run the audit and show you the result.
  • To send you the report and the 30 day list you requested, and a short follow up about it.
  • To book and run the call, including confirmation and reminder messages.
  • To send marketing email or text messages where you have agreed to them. You can stop at any time using the link in any email, by replying STOP to a text, or by writing to us.
  • To measure the site and our advertising so we know what works.
  • To deliver services under an engagement and to keep the records a business must keep.

Under the laws of the United Kingdom and the European Union, our legal bases are: performing a contract or taking steps you asked for before one (the audit, the report, the call); your consent (marketing messages, analytics and advertising cookies); and our legitimate interest in running and improving the site and our services, balanced against your rights.

Who processes it

We use these providers, each under its own privacy terms and a data processing agreement where required:

  • Cloudflare (United States): hosts this site, runs the audit engine and stores audit results and lead records.
  • GoHighLevel (United States): our customer relationship system; stores contact details, booking and message history, and sends our email and text messages.
  • Google (United States): Google Analytics, Google Ads, Google PageSpeed data used by the audit, and Google Workspace or Microsoft 365 for email.
  • Meta (United States): advertising measurement when you have agreed to advertising cookies, and the Conversions API for the events described in the cookie notice.

We do not sell personal information and we do not share it for cross context behavioural advertising except through the advertising tags described in the cookie notice, which you can refuse. If we ever change this, we will update this policy and provide an opt out first.

International transfers

Our providers are in the United States. If you are in the United Kingdom, the European Union, Canada or Australia, your information is transferred there. For UK and EU transfers we rely on the providers' standard contractual clauses or the EU US Data Privacy Framework where the provider is certified.

How long we keep it

  • Audit results: 12 months per website, so you can rerun the audit and compare.
  • Contact details and messages: until you unsubscribe or ask us to delete them, or after two years with no activity, whichever is first.
  • Engagement records (contracts, invoices): for as long as the law requires us to keep business records.
  • Analytics data: as set in Google Analytics, 14 months.

Your rights

Wherever you are, you can ask us what we hold about you, ask us to correct or delete it, and stop marketing at any time. Write to [email protected]. We answer within 30 days and may ask you to confirm your identity first.

United States

If you are a resident of California or another state with a consumer privacy law, you have the right to know what personal information we collect, use and disclose, to delete it, to correct it, to opt out of its sale or sharing (we do not sell it), and not to be discriminated against for exercising these rights. We honour Global Privacy Control signals for advertising cookies.

Canada

Under PIPEDA and provincial laws you may access and correct your personal information and withdraw consent, subject to legal or contractual restrictions. Marketing email and text messages follow Canada's anti spam law: we send them only with your express consent, and every message carries an unsubscribe method.

United Kingdom and European Union

Under the UK GDPR and the EU GDPR you have the rights of access, rectification, erasure, restriction, objection and data portability, and the right to withdraw consent at any time without affecting what was done before. You may complain to your supervisory authority, for example the Information Commissioner's Office in the UK.

Australia

Under the Privacy Act 1988 you may ask for access to and correction of your personal information and complain to us, then to the Office of the Australian Information Commissioner if you are not satisfied.

Marketing messages

If you request the audit report, we send it and a short follow up about it. Other marketing email and text messages are sent only where you have agreed to them, with the consent rule for your region applied at the point of sign up. Every email has an unsubscribe link. Reply STOP to any text to stop texts. Message and data rates may apply.

Children

This site and our services are for businesses and are not directed at anyone under 18. We do not knowingly collect information from children.

Security

Information is held with the providers above, which encrypt it in transit and at rest and restrict access. Access on our side is limited to the people who need it to serve you. No method is perfect; tell us at once if you believe your information has been misused.

Changes

We will post any change here with a new effective date. If a change materially affects how we use information you already gave us, we will tell you by email where we can.