Privacy Policy

Who we are and how to reach us.

Asta LLC ("Asta," "we," "us," or "our") operates this website. Our principal place of business is in the Commonwealth of Virginia, United States. For any privacy-related inquiry, including a request to exercise the rights described in this policy, you may write to us at [email protected] with "Privacy Inquiry" in the subject line.

What we collect.

We collect three categories of information. The first is information you provide directly when you submit a brief through the contact form: your name, your email address, the name of your company or fund, your role, the engagement type you are inquiring about, the stage of your company or the capital sought, a free-text description of your need, and how you heard about Asta. Each field is described in the form. Only the name and email fields are required; the others are optional. The second category is information we receive automatically when you visit the site: standard server log information including your internet protocol address, the type of browser and operating system you used, the pages you visited, the date and time of each visit, and the referring page. The third category is information collected through analytics, if and when we wire analytics into the site; this is described in the section on cookies and analytics below.

How we use the information.

We use the information you provide for three purposes only: to respond to your inquiry, to evaluate whether Asta is the right firm for the work you are weighing, and to maintain a record of the inquiry for our internal client-relationship and conflicts-management purposes. We do not use your information for any unrelated purpose. We do not sell your information. We do not share your information with marketing partners. We do not use your information to train any artificial intelligence model.

Cookies and analytics.

We currently use only the cookies necessary for the site to function. We do not currently run any third-party analytics tools, advertising tracking, or remarketing scripts on the site. If we add analytics in the future, the analytics will be limited to first-party measurement (Google Analytics 4 with anonymized internet protocol addresses, or a privacy-first equivalent such as Plausible), and we will update this policy and the cookie banner before activation. You will see a cookie consent prompt on first visit, and you can decline non-essential cookies without losing access to the site.

How we share information.

We share information only in three circumstances. First, with service providers who help us operate the site and respond to inquiries, such as the form-handling provider that delivers the contact form submission to our inbox; these service providers are bound by confidentiality and data-protection obligations and are limited to processing the information for the specific service. Second, with senior affiliates of the firm who are brought into a specific engagement and need to see the information to evaluate or perform the work; affiliates are bound by Asta's confidentiality obligations under the engagement letter. Third, where required by law, by court order, or to protect the legal rights of Asta or any third party.

How long we keep information.

We keep contact-form submissions for as long as necessary to respond to the inquiry and, if an engagement results, for the duration of the engagement and for a reasonable period thereafter to satisfy our professional, regulatory, and tax-record obligations. If no engagement results, we retain the inquiry for up to twenty-four months unless you ask us to delete it sooner. Server logs are retained for a shorter period, typically not more than ninety days, except where retained for security or legal reasons.

Your rights under California law (CCPA / CPRA).

If you are a California resident, the California Consumer Privacy Act and the California Privacy Rights Act give you the following rights: to know what personal information we have collected about you, to receive a copy of the personal information you provided to us, to request that we correct inaccuracies in your information, to request that we delete your personal information, and to opt out of any sale or sharing of your personal information for cross-context behavioral advertising. We do not sell or share your personal information for cross-context behavioral advertising, so the opt-out is automatic. To exercise the other rights, write to [email protected] with "California Privacy Rights Request" in the subject line. We will respond within forty-five days. We will not discriminate against you for exercising any of these rights.

Your rights under Virginia law (VCDPA).

If you are a Virginia resident, the Virginia Consumer Data Protection Act gives you the right to confirm whether we are processing your personal data, to access the personal data we have collected, to correct inaccuracies, to request deletion, to obtain a portable copy of the data, and to opt out of processing for purposes of targeted advertising or sale. We do not engage in targeted advertising and do not sell personal data, so the opt-out is automatic. To exercise the other rights, write to [email protected] with "Virginia Privacy Rights Request" in the subject line. We will respond within forty-five days.

Your rights under European law (GDPR).

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation gives you rights of access, rectification, erasure, restriction of processing, data portability, and objection to processing. The lawful basis on which we process your personal data is your consent, given when you submit a brief, and our legitimate interest in evaluating whether to enter into an engagement with you. Asta acts as the data controller for the information you submit. To exercise any of these rights, write to [email protected] with "GDPR Rights Request" in the subject line. You also have the right to lodge a complaint with your national data-protection authority.

Children.

The Asta website is intended for adult business audiences. We do not knowingly collect personal information from anyone under the age of eighteen. If we learn that we have inadvertently received personal information from a minor, we will delete it.

Security.

We use commercially reasonable technical and organizational measures to protect the information we hold against unauthorized access, alteration, disclosure, or destruction. The site is served over HTTPS. The contact form is delivered through a third-party service that meets industry-standard data-protection requirements. No internet transmission or electronic storage is one hundred percent secure; we cannot guarantee absolute security.

International transfers.

Asta is based in the United States. If you are accessing the site from outside the United States, please be aware that information you provide will be transferred to and stored in the United States. By using the site or providing information to us, you consent to this transfer.

Changes to this policy.

We may update this policy from time to time. The "Last updated" date at the top of the policy reflects the date of the most recent change. We will post any material change at the top of the policy and, where appropriate, by other means.

Contact.

For any privacy-related inquiry or to exercise any of the rights described above, write to [email protected].