◆ Legal
Privacy Policy
Astravar Ltd · Last updated: May 2026
1. Who We Are
Astravar Ltd is a company registered in England and Wales (Company Number: 16188101) with registered address at 20 Wenlock Road, London, N1 7GU.
We are the data controller for personal data collected through this website and our commercial activities. Contact: info@astravar.com · +44 (0) 800 596 0769
2. What Data We Collect
We collect the following categories of personal data:
- Identity data: name, job title, company name
- Contact data: email address, telephone number, postal address
- Enquiry data: the content of enquiries submitted via our contact forms
- Academy data: course enrolment information, assessment results, certification records
- Technical data: IP address, browser type, pages visited, time on site (collected via privacy-compliant analytics — no cookies required)
- Marketing data: preferences regarding communications (where consent given)
3. How We Collect Your Data
- Through our website contact and enquiry forms
- Through Academy enrolment and certification processes
- Through direct correspondence by email or telephone
- Through business card exchange or networking
We do not purchase data from third parties.
We do not use tracking cookies or Google Analytics. Our analytics are provided by Plausible Analytics — cookieless, GDPR-compliant, no personal data collected.
4. How We Use Your Data
- Enquiry data: to respond to your enquiry — legal basis: legitimate interests
- Academy data: to administer your training and issue certificates — legal basis: performance of contract
- Technical data: to maintain and improve website performance — legal basis: legitimate interests
- Marketing communications: only where you have provided explicit consent, which you may withdraw at any time
We will never sell your personal data to any third party.
5. Data Retention
- Enquiry data: 2 years from last contact
- Academy/certification records: 7 years (to support certificate verification)
- Marketing consent records: until consent withdrawn + 1 year
- Technical data: 12 months in aggregated, anonymised form
6. Your Rights Under UK GDPR
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request erasure (“right to be forgotten”)
- Restrict or object to processing
- Data portability
- Withdraw consent at any time where processing is based on consent
- Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113
To exercise any of these rights: info@astravar.com
7. Cookies
This website does not use tracking or marketing cookies. We use a single session cookie for contact form functionality only. No cookie consent banner is required as no consent-dependent cookies are used.
8. Third-Party Processors
We use the following third-party processors, all operating under appropriate data processing agreements:
- Plausible Analytics — website traffic analytics. No personal data collected. EU-hosted. GDPR compliant.
- Email infrastructure — for transactional email delivery (enquiry confirmations). Contact us for specific provider details.
- MissionOpsAI — AI-enabled compliance infrastructure for operational reporting. Data processed under a data processing agreement.
9. International Transfers
We do not transfer personal data outside the UK or EEA without appropriate safeguards in place.
10. Changes to This Policy
We may update this policy to reflect changes in law or our practices. Material changes will be notified on this page with an updated date.
11. Contact
Data Controller: Astravar Ltd
Address: 20 Wenlock Road, London, N1 7GU
Email: info@astravar.com
Phone: +44 (0) 800 596 0769
ICO Registration: [to be confirmed on registration]
