Privacy Policy
Effective 16 September 2026. This policy explains what personal data Instilus collects, why, and your rights.
1. Who is responsible for your data
A Star Supply, trading as Instilus, is the data controller for personal data collected through this site, and is registered with the UK Information Commissioner's Office under registration number ZC173663.
Instilus is a trading name of A Star Supply, a sole trader business based in the United Kingdom. Instilus is not a limited company.
Business address for correspondence and service of documents
A Star Supply
Office 8665NV
182–184 High Street North
Area 1/1
East Ham
London
E6 2JA
United Kingdom
Contact
astarsupply@gmail.com
2. What we collect, why, and our lawful basis
| What | Why | Lawful basis |
|---|---|---|
| Site usage: pages and free tools used, and which link or ad brought you (for example a campaign name). Not linked to your identity. | To understand which pages and campaigns are useful | Legitimate interests |
| Purchases: your email address, billing address, any name and business VAT number you enter, your order details and any promotion code used. Card details go to Stripe only. | To take payment, deliver your product and support you | Contract; legal obligation (accounting records) |
| Email sign-ups: your email address and the topic you signed up for | To send you what you asked for | Consent, which you can withdraw at any time |
| Copies you ask us to email you from a free tool (for example your label text or calculator result): your email address and that text | To send you that copy, once. We do not add you to any mailing list | Your request (steps before a contract / legitimate interests) |
| Intelligence Brief and Store Audit orders: the company, competitor or store details you give | To research and write your brief or audit | Contract |
| Emails you send us | To reply and resolve your query | Legitimate interests |
| Technical logs kept by our hosting provider, such as IP addresses | Security and keeping the site running | Legitimate interests |
If you give us someone else's contact details, such as your manufacturer's or Responsible Person's, you confirm you are entitled to share them with us for this purpose.
3. Cookies and tracking
This site sets no advertising or analytics cookies, uses no tracking pixels, and stores nothing on your device for tracking. Stripe's checkout pages, which are run by Stripe, use cookies Stripe needs for payment security and fraud prevention. Some guidance pages include one of our videos: nothing is loaded from YouTube until you press play, and the video then plays from YouTube's privacy-enhanced player (youtube-nocookie.com), under Google's privacy policy.
4. Who we share data with
We never sell personal data. We share it only with the service providers that run the site for us, and only as needed:
- Stripe: payments (Stripe privacy policy)
- Railway: website hosting and database
- Resend: sending order and delivery emails
- Anthropic: the AI service that researches and writes Intelligence Briefs and Store Audit summaries from the business details you give at checkout
- Google: our support email inbox
- European Commission (VIES): confirming that an EU VAT number is valid, for purchases from EU countries
We may also disclose data where the law requires it.
5. International transfers
Some of these providers process data in the United States or elsewhere outside the UK. Where they do, the transfer is covered by legally recognised safeguards, such as the UK International Data Transfer Addendum or Agreement, EU Standard Contractual Clauses, or the UK-US data bridge.
6. How long we keep it
- Purchase and payment records: 6 years, to meet UK tax record-keeping rules
- Email sign-ups: until you unsubscribe or ask us to delete them
- Site usage data: up to 24 months
7. Your rights
You have the right to access your personal data, to have it corrected or deleted, to restrict or object to how we use it, to receive a copy in a portable format, and to withdraw consent at any time. To use any of these rights, email astarsupply@gmail.com. We will reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. If you are in the EU, you can also contact your local data protection authority.
8. Automated decisions
We do not make decisions about you by automated means that have legal or similarly significant effects.
9. Children
Instilus sells business products and is not intended for children.
10. Changes to this policy
We may update this policy. The current version is always on this page.