AstroNat Pte Ltd ("AstroNat", "we", "us", "our") is incorporated in Singapore and operates the AstroNat platform, including the web and mobile application, astrocartography reading services, and educational workshops and courses (collectively, the "Services").
We are committed to protecting the personal data of our users, clients, and students ("you") in accordance with the Singapore Personal Data Protection Act 2012 (No. 26 of 2012), as amended by the Personal Data Protection (Amendment) Act 2020 ("PDPA"), and, where applicable, the European Union General Data Protection Regulation (2016/679) ("GDPR") and UK GDPR.
This Privacy Policy sets out how we collect, use, disclose, and protect your personal data in connection with the Services. Please read it carefully. By accessing or using any AstroNat Service, you acknowledge that you have read and understood this policy.
If you do not agree with this policy, you should discontinue use of the Services.
This policy applies to:
- The AstroNat web and mobile application available at astronat.io
- Astrocartography reading and consultation services booked through astronat.io
- Workshops, courses, and digital products offered through astronat.io or affiliated delivery platforms
- Marketing communications, waitlists, and lead capture forms operated by AstroNat
- All other interactions you have with AstroNat through its website or digital channels
This policy does not apply to third-party websites, services, or platforms linked to or from our Services. We are not responsible for the privacy practices of those third parties.
The data controller responsible for your personal data is:
AstroNat Pte Ltd
UEN: 202619354G
Data Protection Officer: Natalia Hau
For users in the European Economic Area or United Kingdom, AstroNat Pte Ltd is the data controller for the purposes of the GDPR and UK GDPR respectively.
We collect personal data that you provide to us directly, data generated through your use of the Services, and in limited cases, data derived from third-party sources.
Full name, email address, and country of residence, collected when you create an account, make a booking, or subscribe to communications.
Date of birth, time of birth, and place of birth (city and country). This data is the primary input for all astrological calculation and interpretation services. Without it, we cannot deliver the core functionality of the App or a reading. Birth data is treated with the highest level of care within our systems and is used exclusively for the purposes described in Section 5.
Information you submit in pre-reading questionnaires, intake forms, or rectification worksheets, including life history notes, geographic history, and details of significant events you choose to share. This information is provided voluntarily and assists us in delivering your chosen service.
Billing name and address submitted at checkout. Full payment card details are processed directly by our payment processor and are not stored on AstroNat systems.
Correspondence submitted via email, contact forms, or support channels, including feedback and complaints.
When you use the App, we collect data about features accessed, city searches performed, session frequency and duration, and interaction patterns. This data is used to maintain and improve the Service.
IP address, browser type and version, operating system, device identifiers, and referring URLs. This data is collected automatically via server logs and analytics tools.
Approximate geographic location derived from IP address, at country and city level only. We do not collect precise GPS location data.
As described in Section 9.
AstroNat does not collect or process the following categories of data:
- National registration identity card (NRIC) numbers, passport numbers, or other government-issued identifiers
- Medical records or health information
- Full payment card numbers or banking credentials
- Biometric data
- Personal data of individuals under the age of 16, except with verified parental or guardian consent
We use personal data only for the purposes set out in this section, on the legal bases indicated.
Note on the AstroNat predictive model: AstroNat's interpretive engine is built on, and continuously refined by, a dataset of documented astrological case studies cross-referenced with real-world outcomes. Where your data contributes to this dataset, it is fully anonymised before use — all direct identifiers (name, email, account ID) are removed. Anonymised data cannot be traced back to you.
Note on marketing communications: You may withdraw consent for marketing communications at any time by using the unsubscribe link in any email we send, or by contacting [hello@astronat.io]. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
We engage the following categories of third-party service providers who process personal data on our behalf, under binding data processing agreements:
[Stripe / PayPal] — process payment transactions. They receive billing identity and payment data only. They do not receive birth data or reading content.
[Podia & Owwlish] — hosts workshop recordings and digital course materials. They receive name and email to administer access.
[Resend] — delivers transactional and marketing email communications. They receive name and email address.
Billing name and address submitted at checkout. Full payment card details are processed directly by our payment processor and are not stored on AstroNat systems.
[Supabase / Vercel / Webflow] — store application data. All providers are bound by data processing agreements and operate under internationally recognised security standards.
[Zapier] — provides usage analytics. Data is anonymised or pseudonymised where possible.
We may disclose personal data to government authorities, regulators, or law enforcement where required by applicable law or a valid court order, or where we reasonably believe disclosure is necessary to protect the rights, safety, or property of AstroNat, our users, or the public.
Where legally permitted to do so, we will notify you of such a request.
n the event of a merger, acquisition, restructuring, or sale of assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.
We will notify you of any such transfer via email or a prominent notice on our website.
We retain personal data for no longer than is necessary for the purposes for which it was collected, and in compliance with applicable legal requirements.
Upon account deletion, all identifiable personal data is removed or anonymised within 30 days. Anonymised data retained for model improvement cannot be attributed to any individual and is exempt from deletion obligations.
AstroNat is incorporated and operates in Singapore. Personal data collected from users outside Singapore — including from the European Economic Area (EEA) and United Kingdom — may be transferred to and processed in Singapore and in countries where our service providers are located.
Singapore's PDPA governs cross-border data transfers under the Data Protection Obligations for Overseas Transfer. For transfers of personal data from EEA or UK users, we rely on appropriate safeguards including, where applicable, the European Commission's Standard Contractual Clauses or the UK International Data Transfer Agreement.
By using our Services, you acknowledge that your personal data may be processed outside your country of residence, in jurisdictions that may have different data protection laws.
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:
Required for the platform to function. These cannot be disabled without affecting core functionality.
Used to understand how users interact with the platform, so we can maintain and improve it. These may be disabled through your browser settings or our cookie management tool.
Used to measure the effectiveness of paid campaigns and personalise advertising. These may be disabled through our cookie consent banner.
You may manage your cookie preferences at any time through your browser settings or the cookie management panel available on the AstroNat website. Note that disabling certain cookies may affect your experience of the platform.
AstroNat implements technical and organisational measures appropriate to the nature of the data processed to protect against unauthorised access, disclosure, alteration, or destruction. These measures include:
- Encryption of data in transit using TLS 1.2 or higher
- Encryption of data at rest
- Hashed and salted password storage — AstroNat cannot access your password in plain text
- Role-based access controls limiting staff access to personal data to those with a need to process it
- Regular review of security practices across internal systems and third-party providers
No method of data transmission or storage is entirely secure. In the event of a personal data breach that is likely to result in significant harm to affected individuals, AstroNat will notify the Personal Data Protection Commission (PDPC) within 3 business days in accordance with the mandatory breach notification obligations under the PDPA (as amended), and will notify affected individuals as required.
Depending on your jurisdiction, you may have the following rights with respect to your personal data.
Under the PDPA, you have the right to:
- Access — request information about the personal data we hold about you and how it has been used or disclosed within the past year
- Correction — request correction of inaccurate or incomplete personal data
- Withdrawal of consent — withdraw consent for the collection, use, or disclosure of your personal data, subject to legal or contractual restrictions
In addition to the above, EEA and UK users have the right to:
- Erasure — request deletion of personal data where it is no longer necessary for the purpose for which it was collected, subject to retention obligations
- Restriction — request that we restrict processing in certain circumstances
- Portability — receive personal data in a structured, commonly used, machine-readable format
- Objection — object to processing based on legitimate interests, including for direct marketing
- Withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing
- Lodge a complaint — with your local data protection supervisory authority
To exercise any of these rights, submit a written request to [hello@astronat.io]. We will respond within 30 days of receipt. We may request verification of identity before processing a request.
The Services are not directed at individuals under 16 years of age. AstroNat does not knowingly collect personal data from children under 16 without verified parental or guardian consent.
If we become aware that personal data has been collected from a child under 16 without appropriate consent, we will take immediate steps to delete that data. If you have reason to believe such data has been collected, contact us at [hello@astronat.io].
We reserve the right to update this Privacy Policy from time to time to reflect changes in our practices, Services, or applicable law.
Material changes will be communicated by email to registered users and by a prominent notice on the AstroNat website, no less than 14 days before the effective date of the change. The updated date at the top of this document will reflect the most current version.
Continued use of the Services following the effective date of a revised policy constitutes acceptance of the updated terms. If you do not agree to a revised policy, you should cease use of the Services and may request deletion of your account.
For queries, rights requests, or complaints regarding this Privacy Policy or the handling of your personal data:
Data Protection Officer
AstroNat Pte Ltd
hello@astronat.io
Response time: within 5 business days for general queries; within 30 days for formal rights requests.
If you are dissatisfied with our response, you may direct your complaint to the relevant supervisory authority:
Singapore: Personal Data Protection Commission (PDPC) — www.pdpc.gov.sg
EEA: Your national data protection authority — edpb.europa.eu/about-edpb/about-edpb/members_en
United Kingdom: Information Commissioner's Office (ICO) — ico.org.uk
Clarify anything.
Based in Singapore.
