Privacy Policy

Last updated: September 21, 2026

This Privacy Policy explains how Asmatk ("Asmatk", "we", "us" or "our") collects, uses, stores and protects personal data when you visit https://asmatk.com (the "Site"), contact us through the Site, or subscribe to our newsletter. It also explains the rights you have over your personal data and how to exercise them.

We have written this policy to be as plain and specific as possible. The Site is a static website: it has no user accounts, no logins, no payment pages and no public comment sections. As a result, the amount of personal data we handle through the Site is small, and we only collect what you choose to give us or what is technically necessary to deliver web pages to your browser.

Who we are (the data controller)

For the purposes of the EU General Data Protection Regulation (GDPR), the UK GDPR and similar laws, Asmatk is the controller of the personal data described in this policy. That means we decide why and how your personal data is processed and we are responsible for handling it lawfully.

• Operator: Asmatk
• Website: https://asmatk.com
• Contact email for privacy matters: [email protected]
• Contact page: contact.html

Personal data we collect

We collect personal data in three ways: when you give it to us directly, when your browser automatically sends technical information to our hosting provider, and when your browser stores your cookie choice locally on your own device.

Data you provide through the contact form

When you send us an enquiry through the contact form on our contact page, we collect the following information:

• Name (required) so we know how to address you.
• Email address (required) so we can reply.
• Phone number (optional) if you prefer to be contacted by phone.
• Website (optional) so we can understand the site you want help with.
• Service of interest (for example, a technical SEO audit, local SEO or content work) so we can route and prepare our reply.
• Budget range so we can suggest a realistic scope of work.
• Message containing whatever details you choose to share about your enquiry.
• Consent confirmation, recorded when you tick the consent checkbox, together with the date and time the form was submitted.

Please do not include sensitive information (such as health data, financial account details or government identification numbers) in your message. We do not need it to respond to a marketing or SEO enquiry.

Data you provide through the newsletter signup

If you subscribe to our newsletter, we collect your email address and the date and time of your subscription. Where our email provider supports it, we also record your confirmation of the subscription and basic delivery information, such as whether an email was delivered or bounced, so that we can maintain a healthy mailing list.

Technical data collected automatically

Like every website, our Site is delivered by a web server. When your browser requests a page, our hosting provider automatically receives standard technical information, which may include your IP address, the date and time of the request, the page requested, the referring page, your browser type and version, and your operating system. This information typically appears in server logs, which are used to deliver the Site, keep it secure, diagnose errors and prevent abuse. We do not use server logs to build profiles of individual visitors.

Your cookie-banner choice

When you make a choice in our cookie banner, the Site stores that choice in your browser's localStorage under the key asmatk_cookie_consent. This value stays on your device and is not sent to us. It exists so that we do not ask you the same question on every page. Our Cookie Policy explains this in more detail.

Legal bases for processing

Under Article 6 of the GDPR and UK GDPR, we must have a valid legal basis for each way we use personal data. We rely on the following bases:

• Consent (Article 6(1)(a)): for sending you our newsletter, for processing your contact-form submission where you have ticked the consent checkbox, and for any optional analytics that may be enabled in the future. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Contract and pre-contractual steps (Article 6(1)(b)): where you contact us about our services, we process your enquiry in order to take steps at your request before potentially entering into an agreement, such as preparing a proposal.
• Legitimate interests (Article 6(1)(f)): for operating, securing and maintaining the Site, keeping server logs, preventing spam and abuse of our forms, and keeping records of our correspondence. We have balanced these interests against your rights and consider them proportionate because the data is limited and the processing is expected by visitors.
• Legal obligation (Article 6(1)(c)): where we need to retain or disclose information to comply with applicable law, such as responding to a lawful request from a public authority.

How we use your personal data

The table below summarizes each purpose, the data involved and the legal basis we rely on.

How long we keep your data

We keep personal data only for as long as we need it for the purpose it was collected for, plus any period required by law or needed to resolve disputes. The periods below are our standard retention periods.

When retention periods end, we delete or anonymize the data. If you ask us to delete your data sooner, we will do so unless we have a legal reason to keep it, in which case we will explain why.

Who we share your data with

We do not sell, rent or trade your personal data. We only share it with the following categories of recipients, and only to the extent necessary:

• Hosting provider: the company that hosts the Site and processes server logs and form submissions on our behalf, acting as a data processor.
• Email provider: the company that provides our email inbox and, where applicable, the service we use to send the newsletter, acting as a data processor.
• Professional advisers: such as accountants or legal advisers, where needed and subject to confidentiality obligations.
• Public authorities: where we are required to disclose information by law, court order or other legal process.
• Successors: if Asmatk is ever involved in a reorganization, merger or transfer of its business, personal data may be transferred to the successor, who will be bound by this policy or an equivalent one.

Our processors may only process your personal data on our documented instructions and under written agreements that require them to keep it confidential and secure, as required by Article 28 of the GDPR.

International data transfers

Our hosting and email providers may store or process data on servers located outside your country, including outside the European Economic Area (EEA) or the United Kingdom. Where personal data is transferred to a country that has not been recognized as providing an adequate level of protection, we make sure appropriate safeguards are in place. These normally take the form of the European Commission's Standard Contractual Clauses (SCCs) and, for UK data, the UK International Data Transfer Addendum or an equivalent approved mechanism, together with any supplementary measures that are needed.

You may request more information about the safeguards we rely on by contacting us at [email protected].

How we protect your data

We take reasonable technical and organizational measures to protect personal data against accidental loss, unauthorized access, alteration and disclosure. These measures include:

• Serving the entire Site over HTTPS so data you submit is encrypted in transit.
• Using a static architecture with no databases of user accounts, which reduces the attack surface.
• Restricting access to enquiries and subscriber lists to the people who need it to do their work.
• Using strong, unique passwords and multi-factor authentication on the accounts that hold personal data where available.
• Choosing reputable hosting and email providers that maintain their own security programs.
• Deleting data that we no longer need, in line with our retention periods.

No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, you, in accordance with applicable law.

Your rights under the GDPR and UK GDPR

If you are in the EEA or the United Kingdom, you have the following rights over your personal data. Many other privacy laws grant similar rights, and we will honor reasonable requests from visitors wherever they live.

• Right of access: to obtain confirmation of whether we process your personal data and to receive a copy of it.
• Right to rectification: to have inaccurate data corrected and incomplete data completed.
• Right to erasure: to have your data deleted where there is no good reason for us to keep it.
• Right to restriction: to ask us to pause processing while, for example, the accuracy of the data is checked.
• Right to data portability: to receive data you provided to us in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible.
• Right to object: to object to processing based on legitimate interests, and to object at any time to direct marketing.
• Right to withdraw consent: where processing is based on consent, you can withdraw it at any time. For the newsletter, use the unsubscribe link in any email or contact us.
• Right to complain: to lodge a complaint with a supervisory authority, in particular in the country where you live, work or where an alleged infringement took place. In the UK this is the Information Commissioner's Office (ICO). We would appreciate the chance to address your concern first.

How to exercise your rights

Send your request to [email protected]. We will respond within one month of receiving it. That period may be extended by up to two further months for complex or numerous requests, in which case we will tell you why. We may ask you to confirm your identity before acting on a request, for example by replying from the email address you used to contact us. Exercising your rights is free of charge unless a request is manifestly unfounded or excessive.

California privacy rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, "CCPA") may give you additional rights. This section applies to the extent the CCPA applies to Asmatk.

Categories of personal information collected in the last 12 months: identifiers (name, email address, phone number, IP address); internet or other electronic network activity information (server log data); and professional or commercial information you choose to include in an enquiry (such as your website, service of interest and budget range). These are collected from you directly or from your browser, for the business purposes described in this policy.

No selling or sharing: we do not sell your personal information and we do not "share" it for cross-context behavioral advertising, as those terms are defined in the CCPA. We have not done so in the preceding 12 months. We do not knowingly sell or share the personal information of consumers under 16.

Your rights: subject to the law, you have the right to know what personal information we collect, use and disclose; to request deletion; to request correction of inaccurate information; to opt out of sale or sharing (which we do not do); and not to be discriminated against for exercising your rights. You may submit a request by emailing [email protected]. You may also use an authorized agent, in which case we may require proof of the agent's authority and verification of your identity.

Children's privacy

The Site is intended for business owners, marketers and professionals. It is not directed to children under 16, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Automated decision-making and profiling

We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you. Every enquiry is read and answered by a person.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in how the Site works, in the providers we use or in applicable law. When we make changes, we will update the "Last updated" date at the top of this page. If a change materially affects how we use personal data you have already given us, we will take reasonable steps to let you know, for example by email if you are a newsletter subscriber. We encourage you to review this page periodically. You may also want to read our Terms of Service and Disclaimer.

How to contact us

If you have any questions about this Privacy Policy, want to exercise your rights or have a concern about how we handle your personal data, please contact us:

• Email: [email protected]
• Contact form: asmatk.com/contact.html