Legal

PRIVACY
POLICY

Last updated: 15 May 2026

P-Eleven Ltd, trading as P-11 Digital, is the data controller for ASTRÆ. We are committed to protecting your personal data in compliance with the UK GDPR and the Data Protection Act 2018.

This policy explains what data we collect, why we collect it, how we use it, and your rights.

Questions? Contact our Data Controller at privacy@p-eleven.com

1. DATA WE COLLECT

Data TypeWhat it includesWhy we collect it
Account dataEmail address, name, password (hashed)To create and manage your account
Birth dataBirth date, time, and location (optional)To generate natal charts and personalised readings
Subscription dataPlan tier, billing status, period end dateTo manage your subscription and access
Payment dataCard last 4 digits, billing country (via Stripe)To process payments — full card data never touches our servers
Usage dataPages visited, features used, reading requestsTo improve the platform and personalise your experience
Device dataBrowser type, IP address, device typeFor security and fraud prevention

2. LEGAL BASIS FOR PROCESSING

We process your data on the following bases under UK GDPR:

Contract performance — processing necessary to provide the ASTRÆ service you have subscribed to, including generating readings and managing your account.

Legitimate interests — security monitoring, fraud prevention, platform analytics, and improving our AI reading quality.

Consent — marketing communications. You may withdraw consent at any time by unsubscribing from emails or contacting privacy@p-eleven.com.

Legal obligation — retaining transaction records as required by UK tax law.

3. AI-GENERATED READINGS

Personalised readings on ASTRÆ are generated using the Anthropic Claude API. When generating a reading, your zodiac sign and relevant astrological data (not your name or contact details) are passed to Anthropic's API. Anthropic processes this data as a sub-processor under appropriate data processing agreements. No personal identifying information is included in API requests.

4. DATA SHARING

We do not sell your personal data. We share data only with the following processors, each under a Data Processing Agreement:

ProcessorPurposeLocation
SupabaseDatabase and authenticationEU / US (SCCs in place)
StripePayment processingUS (SCCs in place)
AnthropicAI reading generationUS (SCCs in place)
NetlifyWebsite hosting and deliveryUS (SCCs in place)

5. DATA RETENTION

Account data is retained for the duration of your account plus 2 years after deletion, for legal and fraud-prevention purposes. Payment records are retained for 7 years as required by HMRC. Daily horoscope readings cached in our database are retained for 90 days then automatically deleted.

6. YOUR RIGHTS

Under UK GDPR, you have the right to: access your personal data; rectify inaccurate data; erase your data ("right to be forgotten"); restrict processing; data portability; and object to processing. To exercise any right, contact privacy@p-eleven.com. We will respond within 30 days.

7. COOKIES

ASTRÆ uses strictly necessary cookies for session authentication. We do not use advertising or tracking cookies. Analytics data is collected in an aggregated, anonymised form only.

8. CHILDREN

ASTRÆ is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact privacy@p-eleven.com immediately.

9. COMPLAINTS

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

P-Eleven Ltd — Registered in England and Wales
Trading as P-11 Digital
Data Controller contact: privacy@p-eleven.com