If we emailed you

Last updated October 2026

We email owners of small businesses in the US and the UK to show them a demo website we built for them and to offer a meeting. This page explains what we hold about you and your business if you got one of those emails, and how to make us stop.

Who we are

Asteroid QA LLC, a limited liability company registered in New Mexico, USA. Postal address: 1209 Mountain Road Pl NE, Ste 13413, Albuquerque, NM 87110, USA. We decide how your details are used (we are the controller). Contact for anything about your data: arfaan@asteroidqa.com.

What we hold

Business contact details only: your name (if it is published with your business), your business email address, your business name, website, phone number and address, the type of business, and other public business information such as company registration details. We also note what we found when we looked at your website (for example, that it has no booking form), the email we sent you and any reply. If you open the demo website we built for you, we record that visit: time, pages viewed, approximate location from your IP address, and browser and device type.

Where it came from

Public sources: your own business website, public business directories and map listings, and public company registers such as Companies House. We check that the email address works before we write to you. We do not buy contact lists.

Why we use it, and our lawful basis

To offer our services to your business: one email showing a demo website and a problem we found on your current site, and, only if you opened that demo website, one short follow-up. Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)): it is in our interest, and we believe in yours, to tell a business about a website we have already built for it. We keep it to business details and a small number of messages, and you can object at any time. We use automated checks to choose which businesses to contact and to spot website problems; none of this has a legal or similarly significant effect on you.

Who sees it

Our own team, and the companies that run our systems for us: our email providers (sending and receiving mail), our website and hosting providers (the demo websites and visit records) and our database hosting. We do not sell, rent or share your details with anyone for their own marketing. Our team works from the USA, the UK and Qatar, so your details may be handled outside the UK.

How long we keep your business details

If you do not reply, we delete your details within 12 months of our email. The demo website we built for you is taken down 30 days after our email, unless you reply or ask us to keep it. If you tell us to stop, we keep only your email address and business name on a do-not-contact list, so we never email you again.

Your rights

You can ask us to show you what we hold, correct it, delete it or limit how we use it, and you can object to our use of it at any time. Objecting to marketing always works: we stop straight away, no reasons needed. Write to arfaan@asteroidqa.com and we will answer within one month.

How to opt out

Reply "stop" to any email from us, use the unsubscribe link in the email, or write to arfaan@asteroidqa.com. You will not hear from us again.

Complaints

If you are unhappy with how we handled your data, please tell us first so we can put it right. You can also complain to the UK Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, phone 0303 123 1113.

Changes

We may update this notice. The date above tells you when we last did.