Privacy Policy

This Privacy Policy explains how Altura Space Ltd uses the personal data we collect from you when you use our website.

Who We Are

Altura Space Ltd is responsible for your personal data

What Data We Collect

We collect and process different types of personal data about you:

Personal Information: We may collect personal information such as your name, email address, and telephone number when you register for our services, request a quote, or contact us via email.
Non-Personal Information (Technical and Usage): We collect data such as your IP address, device type, and usage information to perform analytics and improve our services.

How We Collect Your Data

We collect your data using different methods:

Direct Interactions: You provide us with your data by filling in forms, registering on our site, subscribing to our service, participating in a promotion, or contacting us directly.
Automated Technologies or Interactions: As you interact with our website, we may automatically collect Technical Data and Usage Data via cookies, server logs, and other similar technologies. (See our separate Cookie Policy section).
Third Parties: We may receive data from third parties such as analytics providers (e.g., Google Analytics), advertising networks, and search information providers.

How We Use Your Data and Our Lawful Basis

We will only process your personal data when we have a lawful basis to do so, as required by the UK GDPR. Below, we outline the purposes of our processing and the relevant legal bases:

To register you as a new client: Our lawful basis is the Performance of a Contract with you.
To process and deliver your order (including managing payments, fees, and collections): Our lawful basis is the Performance of a Contract with you.
To manage our relationship with you (service notifications, changes to terms or policies): Our lawful basis is a Legal Obligation (e.g., informing of changes) or our Legitimate Interests (keeping our records updated).
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system support, fraud prevention): Our lawful basis is our Legitimate Interests (security, fraud prevention, IT operations).
To deliver relevant content and advertising to you and measure or understand its effectiveness: Our lawful basis is our Legitimate Interests (to study how clients use our products/services to develop them) or your Consent (for non-essential cookies and targeted marketing).
To send you direct marketing communications: Our lawful basis is Consent (explicit opt-in), except where the Privacy and Electronic Communications Regulations (PECR) permits a ‘soft opt-in’ for existing clients.

Who We Share Your Data With

We may share your personal data with the following parties, where necessary and lawful:

Service Providers: Who act as Data Processors (e.g., website hosting providers, payment platforms, delivery services, email marketing platforms).
Professional Advisors: (e.g., lawyers, accountants, auditors) based in the UK who provide professional services.
HMRC, Regulators, and Other Authorities: Who require reporting of processing activities in certain circumstances.

International Transfers

If we transfer your personal data outside of the United Kingdom (UK) or the European Economic Area (EEA), we ensure a similar degree of protection is afforded by ensuring at least one of the following safeguards is implemented:

We will only transfer your data to countries deemed to provide an adequate level of protection for personal data by the UK data protection authority (ICO).

Where we use certain service providers, we may use specific contracts approved by the UK government that give personal data the same protection it has in the UK.

Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We limit access to your personal data only to those employees, agents, contractors, and other third parties who have a business need to know.

Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Your Legal Rights (Data Subject Rights)

Under the UK GDPR, you have rights over your personal data. You can exercise these rights by contacting us via the email provided in Section 1.1:

Right to be Informed (the purpose of this policy).
Right of Access to your personal data (Subject Access Request – SAR).
Right to Rectification if the data is inaccurate or incomplete.
Right to Erasure (the ‘right to be forgotten’).
Right to Restrict Processing.
Right to Object to Processing.
Right to Data Portability.
Rights in relation to Automated Decision Making and Profiling.
Right to withdraw Consent at any time, where processing is based on consent.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.

We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us first via contact@alturaspace.com