1. Who we are
Ad Astra Human Performance Ltd ("Ad Astra", "we", "our", "us") is a private limited company registered in England and Wales. Our registered office address is in London, United Kingdom. We are the data controller responsible for any personal data we process about you under UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you have any questions about this policy or want to exercise your rights, contact us at info@adastra-hp.com or by post at our registered office.
2. What we collect
We only collect personal data when you choose to give it to us. Specifically:
- Contact form & email enquiries. Your name, role, organisation, email address, sector, and the contents of any message you send us.
- Discovery call bookings. The same details as above, plus the date and time slot you select. Calendar entries are generated on your device and emailed to us when you submit.
- Workplace Profile assessment. Your assessment responses are processed entirely in your browser and are not transmitted to us unless you choose to copy and send the results yourself. We have no automated access to your data.
- Server logs. Standard web server access logs (IP address, browser type, pages visited, timestamps). These are retained for security, anti-abuse, and aggregate analytics purposes only.
We do not knowingly collect special-category personal data. We do not collect data from children under 16.
3. Why we collect it — lawful bases
We rely on the following lawful bases under UK GDPR Article 6:
- Consent — when you submit a contact form, request a discovery call, or sign up for any future mailing list.
- Legitimate interests — to respond to direct enquiries, to maintain the security of our website, and to administer our client relationships.
- Contract — once we are working with you under a written engagement, processing necessary to deliver that engagement.
- Legal obligation — to comply with tax, accounting, or regulatory requirements.
4. How we use your data
- To respond to your enquiry or call request.
- To deliver training, consulting, or assessment services you have engaged us for.
- To send service-related communications (e.g. confirming a booked call, sending course materials to participants).
- To improve our website and services in aggregate, non-identifying ways.
- To meet our legal and regulatory obligations.
We do not sell your data. We do not share it with third parties for marketing purposes. We do not use automated decision-making or profiling.
5. Who we share it with
We share personal data only with carefully selected service providers acting on our behalf as data processors, including:
- Our email provider, for sending and receiving correspondence.
- Our calendar and meeting-software providers.
- Our accountants and legal advisers, where necessary for the running of the business.
- Our hosting provider, which operates the servers on which this website runs.
All processors are bound by written agreements requiring them to handle your data securely and only in accordance with our instructions.
6. International transfers
Where any of our processors are located outside the United Kingdom, we ensure transfers are protected by appropriate safeguards — either an adequacy decision under UK GDPR, or by relying on the UK International Data Transfer Agreement (IDTA) or the EU Standard Contractual Clauses (SCCs) with the UK addendum.
7. How long we keep it
We keep your data only as long as we need it for the purposes set out above, or as required by law:
- Contact-form enquiries that don't progress: deleted within 12 months.
- Client engagement records: retained for 7 years (UK tax/accounting requirement).
- Server logs: rotated automatically every 90 days.
8. How we protect it
We use appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS/TLS), access controls, and regular review of our security posture. No system is perfectly secure; we will notify you and the ICO promptly in the unlikely event of a notifiable breach.
9. Your rights
Under UK GDPR you have the following rights, free of charge in most circumstances:
- Access — ask for a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete your data ("right to be forgotten"), subject to legal retention requirements.
- Restriction — ask us to limit how we process your data.
- Portability — ask for your data in a structured, commonly used format.
- Objection — object to processing carried out on the basis of legitimate interests.
- Withdraw consent — for any processing based on consent, at any time.
- Complain — lodge a complaint with the UK Information Commissioner's Office at ico.org.uk.
To exercise any of these rights, email info@adastra-hp.com. We will respond within one month.
10. Cookies
This website uses a minimal set of cookies:
- Strictly necessary cookies that keep the site working (e.g. remembering you've dismissed a banner). These do not require consent.
- We do not currently use third-party analytics, advertising, or tracking cookies. If we add web analytics in future, we will update this policy and provide a clear opt-in.
You can configure your browser to refuse or delete cookies at any time. Doing so will not break the site.
11. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top of this page tells you when. Material changes will be flagged on the home page or by direct email to current clients.
12. Contact us
For any privacy question or to exercise your rights:
Email info@adastra-hp.com
Phone +44 (0)20 7088 8164
Post Ad Astra Human Performance Ltd, London, United Kingdom