Privacy Policy
PRIVACY POLICY
Effective Date: 25/02/2026
Company Name: Ostara TechnologiesRegistered Address: 4A6 80 Hamilton House, Bristol, BS1 3QY, United KingdomContact Email: info@ostara.io
1. Introduction
Ostara ("we", "us", "our") provides farm control software and automation solutions for polytunnel and controlled-environment agriculture.
This Privacy Policy explains how we collect, use, store and protect personal data when you:
- Visit our website
- Book a demo
- Contact us
- Use our software platform and related services
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect
2.1 Information You Provide Directly
- Full name
- Company name
- Email address
- Phone number (if provided)
- Messages submitted via contact forms
- Demo booking information
- Account login credentials (for customers)
2.2 Technical & Usage Information
- IP address
- Browser type and version
- Device information
- Pages visited and time spent
- Date and time of access
- Cookie and analytics data
2.3 Customer Operational Data
Where you use the Ostara platform, we may process:
- Environmental sensor data (temperature, humidity, VPD, CO₂, etc.)
- Irrigation and environmental control data
- Automation settings and system logs
- User activity within the platform
This data is treated as confidential business information.
3. How We Use Your Information
We use personal data to:
- Respond to enquiries and demo requests
- Provide and maintain our services
- Create and manage user accounts
- Deliver technical and customer support
- Improve our website and software
- Send service updates and marketing communications (where lawful)
- Comply with legal obligations
We do not sell personal data.
4. Legal Basis for Processing
We rely on the following legal bases under UK GDPR:
- Contractual necessity (to provide services)
- Legitimate interests (to operate and improve our business)
- Consent (for marketing communications and non-essential cookies)
- Legal obligation
5. Cookies
We use cookies and similar technologies to:
- Ensure website functionality
- Analyse website traffic
- Improve user experience
We will obtain consent before placing non-essential cookies on your device. You may manage cookie preferences through your browser settings or cookie banner controls.
6. Data Sharing
We may share data with:
- Cloud hosting providers
- IT and software service providers
- Professional advisers
- Regulatory authorities where required by law
All third-party processors are required to implement appropriate safeguards.
7. International Transfers
Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including:
- Transfers to countries with UK adequacy decisions
- UK-approved Standard Contractual Clauses
8. Data Security
We implement appropriate technical and organisational measures, including:
- Secure cloud infrastructure
- Encrypted communications where appropriate
- Role-based access controls
- Authentication protections
No system can guarantee absolute security.
9. Data Retention
We retain personal data only as long as necessary for:
- Responding to enquiries (typically up to 24 months)
- Providing contracted services (duration of contract plus legal retention period)
- Compliance with legal obligations
Operational farm data is retained in accordance with customer agreements.
10. Your Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Request correction
- Request erasure
- Restrict processing
- Object to processing
- Data portability
- Withdraw consent where applicable
You may contact us at [Insert contact email] to exercise these rights.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
11. Children
Our services are not intended for individuals under 16. We do not knowingly collect personal data from children.
12. Updates to This Policy
We may update this Privacy Policy periodically. The updated version will be published on this page with a revised effective date.