LEGAL
Privacy Notice
Last updated: 1 November 2026
This Privacy Notice explains how Astrashine collects and uses personal information when you visit our website, create an account, use our travel discovery features or interact with links to travel partners.
Astrashine is operated by Astrashine and Company LTD, a company registered in Kenya. The business operates online, with its business location in Nairobi, Kenya. The operator remains responsible for confirming and meeting all applicable data protection obligations.
1. Who operates Astrashine?
Astrashine is a travel discovery and referral platform intended to help people explore travel options and connect with independent travel providers.
Legal operator: Astrashine and Company LTD
Business address: Online office; business location: Nairobi, Kenya
Privacy contact: info@astrashine.co.ke
For purposes of applicable data protection laws, the operator will act as the data controller for personal information where it determines why and how that information is processed.
2. Information we collect
The information processed depends on how you use Astrashine. It may include:
- Account information: email address, first name, last name, account role and account status.
- Authentication information: password hashes and session-related security information. Passwords are not intended to be stored in readable form.
- Search information: travel category, origin, destination and other search details submitted through the platform.
- Referral and click information: the travel category, partner or provider reference, destination link, referral tracking reference and the date and time of a click.
- Technical information: information automatically supplied by your browser or required to operate, secure and troubleshoot the website, such as request and security logs where generated by the hosting environment.
- Communications: information you provide if you contact the business through a communication channel that it makes available.
Please do not submit sensitive personal information, payment-card details, passport details or other highly confidential information through general search or account fields.
3. How we use information
Subject to applicable law, Astrashine may use personal information to:
- Create and administer customer accounts.
- Authenticate users and maintain secure login sessions.
- Provide travel search and discovery features.
- Remember and display relevant account activity, such as recent searches and referral clicks.
- Record referrals and attribute eligible partner traffic for affiliate reporting and commission administration.
- Maintain, secure, troubleshoot and improve the platform.
- Detect misuse, investigate suspected fraud and enforce our Terms of Use.
- Comply with legal obligations and respond to lawful requests.
4. Legal grounds for processing
Where required by applicable data protection law, we will identify and rely on an appropriate legal basis for each processing purpose. Depending on the circumstances, this may include:
- Taking steps at your request or performing our agreement with you, such as creating and maintaining your account.
- Our legitimate interests in operating, securing and improving the platform, where those interests are not overridden by your rights and freedoms.
- Compliance with legal obligations.
- Your consent, where consent is legally required or is the appropriate basis for a particular activity.
Where we rely on consent, you may withdraw it as permitted by law. Withdrawal does not make earlier lawful processing invalid.
5. Search activity and referral tracking
When you submit a travel search, the platform may record the search category, origin, destination and associated search details. If you are signed in, the search may be associated with your account.
When you follow a partner link, Astrashine may record a click event, including the relevant provider or link reference, travel category, referral tracking information and timestamp. This helps us measure referrals and, where applicable, attribute affiliate commissions.
Referral links may take you to an independent provider's website. That provider may collect information directly from you under its own privacy notice and terms.
6. Travel partners and bookings
Astrashine is a discovery and referral platform. A partner may provide its own search results, prices, availability, booking process and customer support.
At the date of this notice, bookings made on external partner websites are not automatically imported into or synchronised with Astrashine customer accounts. We do not claim to hold a complete record of your bookings with those partners.
When you leave Astrashine, the partner's privacy notice and terms govern its collection and use of information. Please review those documents before providing personal or payment information or completing a booking.
7. Cookies and similar technologies
Astrashine uses an authentication session cookie to support signed-in account functionality. The session cookie is configured as HTTP-only, uses a SameSite setting and is configured to use secure transmission in production.
Cookies or similar technologies may also be used by the hosting environment or by third-party websites you visit. The availability and operation of those third-party technologies are controlled by the relevant provider.
We do not describe advertising or analytics cookies as active unless and until those technologies are implemented. If we introduce optional analytics, advertising or other non-essential tracking, we will update this notice and provide any choices or consent mechanisms required by law.
You can manage cookies through your browser settings. Disabling essential session cookies may prevent account sign-in or other account features from working properly.
8. When information may be shared
We may disclose relevant information, subject to applicable law and appropriate safeguards, to:
- Website hosting: Astrashine uses TrueHost Kenya as its website hosting provider. Depending on the services and deployment configuration used, the hosting provider may process technical information necessary to host, secure and maintain the website. Further details about the specific services and processing arrangements will be provided where applicable.
- Travel partners when you choose to follow a link or otherwise interact with a partner. The partner may receive referral information and may independently collect information from you.
- Professional advisers and service providers who assist with legal, accounting, technical or operational matters and are subject to appropriate confidentiality obligations.
- Authorities and other parties where disclosure is required by law, legal process or necessary to protect rights, safety and the integrity of the platform.
- Business successors in connection with a proposed or completed restructuring, merger, financing or transfer, subject to appropriate protections and applicable law.
We do not describe personal information as being sold or shared for targeted advertising unless such activity is actually introduced and properly disclosed.
9. International processing and transfers
Astrashine is intended for international use. Our infrastructure or service providers, and the independent travel partners you choose to visit, may operate in countries other than your own.
Where personal information is transferred across borders, the operator must identify the applicable legal requirements and implement an appropriate transfer basis and safeguards. For individuals protected by Kenyan law, this includes the requirements governing transfers of personal data outside Kenya.
We will update this notice with material information about relevant processing locations and safeguards as the operator and its service-provider arrangements are confirmed.
10. Data retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including account administration, referral attribution, security, dispute handling and legal compliance.
Retention periods may differ by information type. For example, account records, authentication sessions, search events and referral records may require different retention periods.
The operator must establish and apply a documented retention and deletion schedule. Information may be retained for longer where required by law or reasonably necessary to establish, exercise or defend legal claims, and will then be securely deleted or anonymised where appropriate.
11. Security
We use technical and organisational measures intended to protect information against unauthorised access, alteration, disclosure, loss or destruction. These include access controls and security measures within the application.
No website, internet transmission or storage system can be guaranteed to be completely secure. You should use a unique password, keep your login details confidential and notify the operator if you suspect unauthorised access to your account.
12. Your privacy rights
Your rights depend on the data protection laws that apply to you. Where Kenyan law applies, rights may include the right to be informed about the use of your personal data, access it, object to processing, request correction of false or misleading data and request deletion of false or misleading data. Other applicable laws may provide additional rights.
You may submit a privacy request using the privacy contact stated in section 1. We may need to verify your identity and will respond within the time required by applicable law. Some information may need to be retained where a lawful exception applies.
If you are in Kenya and are not satisfied with the handling of your data protection concern, you may contact the Office of the Data Protection Commissioner through its official website.
13. Children's privacy
Astrashine is not designed to knowingly collect personal information directly from children without the authorisation or involvement required by applicable law. If you believe a child has provided personal information improperly, contact the operator using the privacy contact in section 1.
14. Third-party websites
Our website may contain links to independent travel providers and other third-party websites. We do not control their privacy practices, security, content or terms. Review the relevant third-party notices before using those websites.
15. Changes to this notice
We may update this Privacy Notice to reflect changes in the platform, our processing activities or applicable law. The revised version will be published on this page with an updated date. Where required, we will provide additional notice or obtain consent.
16. Contact
For questions, privacy requests or complaints about Astrashine's handling of personal information, contact:
Astrashine and Company LTD
Privacy email: info@astrashine.co.ke
Business location: Online office, Nairobi, Kenya