Privacy Policy
Last updated
Introduction
Astuco Ltd ("we", "us" or "our") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect when you visit www.astu.co or contact us, how we use it, and the rights you have over it. It should be read alongside our Cookie Policy.
For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), Astuco Ltd is the data controller for the personal data described in this policy.
The data we collect
We may collect and process the following personal data:
- Contact enquiries - when you complete our contact form we collect your name, company, email address, phone number and the contents of your message.
- Recruitment - when you apply for a role you may send us your name, contact details, CV and any other information you choose to provide about your experience and right to work.
- Technical data - limited information collected automatically by our hosting provider to operate and secure the site, such as IP address and basic request logs. See our Cookie Policy for more detail.
We do not knowingly collect special category data through this site. Please do not send us sensitive personal information unless we have specifically requested it.
How we use your data
We use your personal data to:
- respond to your enquiries and provide the information or services you request;
- assess and progress job applications and manage recruitment;
- operate, maintain and secure our website; and
- comply with our legal and regulatory obligations.
Lawful bases for processing
We rely on the following lawful bases under the UK GDPR:
- Legitimate interests - to respond to enquiries, run our business and keep our site secure, where this is not overridden by your rights.
- Consent - where you have voluntarily submitted your details to us, for example through the contact form or a job application. You may withdraw consent at any time.
- Legal obligation - where we are required to process data to comply with the law.
Sharing your data
We do not sell your personal data. We share it only where necessary with trusted service providers who act as our processors, and with authorities where required by law. These providers include:
- Web3Forms - processes contact-form submissions and forwards them to us by email.
- Cloudflare - hosts and delivers the site and protects it against malicious traffic.
Where data is transferred outside the UK, we ensure appropriate safeguards are in place in line with UK data protection law.
How long we keep it
We keep personal data only for as long as necessary for the purposes set out above, after which it is securely deleted. Enquiry correspondence is typically retained for up to 24 months, and recruitment data for the duration of the relevant process and a reasonable period afterwards, unless a longer period is required by law or you agree to us keeping it on file.
Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- request erasure of your data in certain circumstances;
- restrict or object to our processing of your data;
- request portability of data you have provided to us; and
- withdraw consent at any time where we rely on it.
To exercise any of these rights, please contact us using the details below. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Data security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. No method of transmission over the internet is completely secure, but we work to protect your information once it reaches us.
Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "last updated" date.
Contact us
If you have any questions about this Privacy Policy or wish to exercise your rights, please get in touch:
Astuco LtdChristmas Tree Farm, Hangersley Hill, Ringwood, BH24 3JR
contact@astu.co