top of page

GDPR Policy

Effective Date: Oct 2023

 

At ASPA, we are committed to protecting the privacy and personal data of our users in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This GDPR Policy outlines how we collect, use, disclose, and store personal data when you access or use our website ("Website") and any services or content provided by ASPA ("Service"). By accessing or using the Service, you agree to the collection and processing of your personal data as described in this GDPR Policy. If you do not agree with any part of this GDPR Policy, you may not access or use the Service.

 

1. Data Controller

ASPA, located in Bournemouth Dorset, is the data controller responsible for the collection, processing, and protection of your personal data.

 

2. Collection and Use of Personal Data

a. Personal Data We Collect: We collect personal data that you voluntarily provide to us when you create an account, interact with the Service, or communicate with us. This may include your name, email address, postal address, phone number, and payment information.

b. Purposes of Processing: We collect and process your personal data for the following purposes:

   i. Providing and maintaining the Service.

   ii. Personalizing and improving the Service.

   iii. Communicating with you about the Service, including responding to inquiries and providing customer support.

   iv. Delivering relevant content, advertisements, and promotions based on your interests.

   v. Conducting research, analytics, and measuring the performance of the Service.

   vi. Complying with legal obligations and enforcing our policies.

c. Lawful Basis for Processing: We rely on the following lawful bases for processing your personal data:

 

  1. .Performance of a Contract: Processing is necessary for the performance of a contract with you or to take steps at your request        prior to entering into a contract.

  2. Legitimate Interests: Processing is necessary for our legitimate interests, such as providing and improving the Service, ensuring the security of the Website, and communicating with you about relevant updates and offers. We will always consider your rights and interests when processing personal data based on legitimate interests.

  3. Consent: We may obtain your consent for specific processing activities, such as sending marketing communications. You have the right to withdraw your consent at any time.

 

3. Data Retention and Security

a. Data Retention: We retain your personal data for as long as necessary to fulfil the purposes outlined in this GDPR Policy, unless a longer retention period is required or permitted by law. We will delete or anonymize your personal data when it is no longer necessary for the purposes for which it was collected and there are no legal obligations requiring us to retain it.

b. Data Security: We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These measures include encryption, access controls, regular security assessments, and staff training. However, please note that no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee the absolute security of your personal data.

 

4. Data Sharing and Transfers

a. Third-Party Service Providers: We may share your personal data with trusted third-party service providers who assist us in delivering the Service, such as hosting providers, payment processors, and customer support providers. These providers are authorized to process your personal data only as necessary to provide the requested services and are obligated to protect your data.

b. Legal Requirements and Safety: We may disclose your personal data if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect the rights, property, or safety of ASPA or our users.

5. Deleting my profile

a. If you would like to remove your profile from ASPA then please use the contact form providing your email address and a message confirming that would like your account to be deleted. We will send an email to this email address to confirm that you own the email and then will delete the account. Please note that this is not reversible. 

bottom of page