{"id":24300,"date":"2020-08-27T08:23:10","date_gmt":"2020-08-27T08:23:10","guid":{"rendered":"https:\/\/astraemaya.com\/privacy-policy-2\/"},"modified":"2026-09-02T08:25:38","modified_gmt":"2026-09-02T08:25:38","slug":"politique-de-confidentialite","status":"publish","type":"page","link":"https:\/\/astraemaya.com\/fr\/politique-de-confidentialite\/","title":{"rendered":"Politique de confidentialit\u00e9"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

ASTRAE LTD \u2013 PRIVACY POLICY<\/b><\/p>

This privacy policy applies to Astrae Ltd (<\/span>we<\/b>, <\/span>us<\/b> or <\/span>our<\/b>). We are committed to protecting your privacy. This policy explains how we collect, use and share your personal data. It applies to all personal data we handle, whether we collect it through our website, in person, or through other means.\u00a0<\/span><\/p>

Information we collect<\/b><\/p>

Identity and contact details<\/span><\/p>

  • Full name, email address, phone number and postal address (where we need to attend you in person or send materials)<\/span><\/li>
  • Date of birth (where relevant to your requested service, for example numerology sessions)<\/span><\/li>
  • Passport or identity document details (where required for international retreats, for example in India)<\/span><\/li>
  • Professional details<\/span><\/li><\/ul>

    Service-related information<\/span><\/p>

    • Booking and appointment details, including services booked and session history<\/span><\/li>
    • Messages or enquiries you send us through our website contact form<\/span><\/li>
    • Your preferences, including any newsletter sign-up<\/span><\/li>
    • Feedback and complaints<\/span><\/li><\/ul>

      Financial and payment information<\/span><\/p>

      • Payment details processed through our payment provider, Stripe<\/span><\/li><\/ul>

        Retreat and travel information<\/span><\/p>

        • Travel and accommodation details required to organise retreats, including flights, hotels and, where applicable, passport information<\/span><\/li>
        • Dietary requirements and any religious or cultural dietary needs relevant to retreat catering<\/span><\/li><\/ul>

          Digital information<\/span><\/p>

          • IP address and general location information derived from your IP address\u00a0<\/span><\/li>
          • Search and browsing behaviour and user journeys<\/span><\/li>
          • Website usage patterns<\/span><\/li>
          • Cookie preferences and tracking<\/span><\/li><\/ul>

            Recordings<\/span><\/p>

            • Call recordings<\/span><\/li>
            • Records of meetings and decisions<\/span><\/li><\/ul>

              Professional information (for job applicants and workers)<\/span><\/p>

              • Employment history<\/span><\/li>
              • Professional experience<\/span><\/li>
              • Required authorisations and licences<\/span><\/li>
              • Professional registrations<\/span><\/li>
              • Information about your right to work in the UK<\/span><\/li><\/ul>

                Special category data<\/span><\/p>

                This is special information that the law says is more sensitive (sometimes called \u201csensitive personal data\u201d). We handle special category data with extra care and protection, and we only collect and use these where legally permitted. This includes:<\/span><\/p>

                • Health information, including medical conditions or physical considerations relevant to yoga, meditation or retreat activities<\/span><\/li>
                • Dietary requirements connected to religious or philosophical beliefs<\/span><\/li><\/ul>

                  We only collect this information where you choose to provide it (for example, ahead of a yoga class or retreat) and we rely on your explicit consent to collect and use it. We use it solely to deliver the relevant service safely (for example, adapting a class or catering arrangement) and we do not retain it for longer than necessary for that purpose.<\/span><\/p>

                  How we collect personal data<\/b><\/p>

                  • Directly from you when you:<\/b> when you book a session, complete our website contact form, sign up for a retreat or workshop, or otherwise contact us<\/span><\/li>
                  • Automatically when you:<\/b> visit our website, use our technologies, interact with our online services.<\/span><\/li>
                  • From third parties:<\/b> service providers, business partners, previous employers, government organisations and organisations or people authorised by you.<\/span><\/li><\/ul>

                    How we use your information<\/b><\/p>

                    Data protection law requires us to have proper legal reasons for using your personal data. We can only use your information when we have one or more of these legal bases.<\/span><\/p>

                    • Consent<\/b> – You have clearly agreed to us using your personal data for a specific purpose.<\/span><\/li>
                    • Performance of a contract<\/b> – We need to use your information to fulfil a contract with you, or because you’ve asked us to do something before entering into a contract.<\/span><\/li>
                    • Legal duty<\/b> – We must use your information to comply with the law.<\/span><\/li>
                    • Vital interests<\/b> – We need to use your information to protect someone’s life.<\/span><\/li>
                    • Public interest<\/b> – We need to use your information to perform a task in the public interest or carry out official functions that have a clear legal basis.<\/span><\/li>
                    • Legitimate interests<\/b> – We have a genuine business reason to use your information, or a third party does, but only if this doesn’t unfairly override your rights and interests. Where we rely on legitimate interests as our legal basis, we have conducted balancing tests to ensure our interests do not override your fundamental rights and freedoms. These assessments consider:<\/span>
                      • The nature of our legitimate interest<\/span><\/li>
                      • The impact on you<\/span><\/li>
                      • Any safeguards we can implement<\/span><\/li>
                      • Your reasonable expectations<\/span><\/li>
                      • The broader context of our relationship<\/span><\/li><\/ul><\/li><\/ul>

                        Note that we may process your personal data for more than one legal basis depending on the specific purpose for which we are using your data. We have listed the reasons we process your data and the legal basis below. Please reach out to us if you need further details about the specific legal basis we are relying on to process your personal data.<\/span><\/p>

                        Managing your account and providing our services<\/b><\/p>

                        What we use your information for:<\/span><\/p>

                        • To manage bookings made through Calendly and process payments through Stripe<\/span><\/li>
                        • To deliver the wellness service you have booked, whether online (for example, via video call) or in person<\/span><\/li>
                        • To organise retreats, including arranging travel, accommodation and liaising with hotels or partners in the host country<\/span><\/li>
                        • To respond to enquiries or messages sent through our website<\/span><\/li>
                        • Internal record-keeping, invoicing and administration<\/span><\/li><\/ul>

                          Legal basis for using this information:<\/span><\/p>

                          • Performance of a Contract<\/span><\/li>
                          • Legal Duty (for billing and record-keeping requirements)<\/span><\/li>
                          • Legitimate interests<\/span><\/li><\/ul>

                            Types of information we use:<\/span>\u00a0<\/span><\/p>

                            • Identity and contact details<\/span><\/li>
                            • Service related information<\/span><\/li>
                            • Financial Information<\/span><\/li>
                            • Digital information<\/span><\/li>
                            • Retreat and travel information<\/span><\/li>
                            • Special category data (Health Information and religious and philosophical beliefs)<\/span><\/li><\/ul>

                              Client onboarding and verification<\/b><\/p>

                              What we use your information for:<\/span><\/p>

                              • To assess whether to take you on as a new client, including performing anti-money laundering, anti-terrorism, sanction screening, fraud and other background checks<\/span><\/li><\/ul>

                                Legal basis for using this information:<\/span><\/p>

                                • Performance of a Contract<\/span><\/li>
                                • Legal Duty<\/span><\/li>
                                • Public Interest<\/span><\/li>
                                • Legitimate interests<\/span><\/li><\/ul>

                                  Types of information we use<\/span>:<\/span><\/p>

                                  • Identity and contact details<\/span><\/li>
                                  • Financial information\u00a0<\/span><\/li><\/ul>

                                    Website enquiries and customer service<\/b><\/p>

                                    What we use your information for:<\/span><\/p>

                                    • To contact and communicate with you about any enquiries you make with us via our website<\/span><\/li><\/ul>

                                      Legal basis for using this information:<\/span><\/p>

                                      • Legitimate interests<\/span><\/li><\/ul>

                                        Types of information we use:<\/span>\u00a0<\/span><\/p>

                                        • Identity and Contact Data<\/span><\/li>
                                        • Digital Information<\/span><\/li><\/ul>

                                          Business improvement and development<\/b><\/p>

                                          What we use your information for:<\/span><\/p>

                                          • Analytics including profiling on our website<\/span><\/li>
                                          • Market research and business development<\/span><\/li>
                                          • To operate and improve our services, associated applications and associated social media platforms<\/span><\/li><\/ul>

                                            Legal basis for using this information:<\/span><\/p>

                                            • Legitimate interests<\/span><\/li><\/ul>

                                              Types of information we use:<\/span>\u00a0<\/span><\/p>

                                              • Digital Information<\/span><\/li><\/ul>

                                                Marketing and communications<\/b><\/p>

                                                What we use your information for:<\/span><\/p>

                                                • To send you promotional information about our events and experiences and information that we consider may be of interest to you<\/span><\/li>
                                                • To run promotions, competitions and offer additional benefits to you<\/span><\/li>
                                                • To send you information about our retreats, workshops and services where you have agreed to receive this (for example, by ticking a consent box when booking or paying)<\/span><\/li><\/ul>

                                                  Legal basis for using this information:<\/span><\/p>

                                                  • Legitimate interests<\/span><\/li><\/ul>

                                                    Types of information we use<\/span>:<\/span><\/p>

                                                    • Identity and Contact Data<\/span><\/li>
                                                    • Digital Information<\/span><\/li><\/ul>

                                                      Recruitment and employment purposes<\/b><\/p>

                                                      What we use your information for:<\/span><\/p>

                                                      • To consider your application if you have applied to work with us and to keep you up to date with its progress<\/span><\/li>
                                                      • In relation to self-declared disabilities in order for us to make a reasonable adjustments to support your application and any possible future employment<\/span><\/li>
                                                      • In relation to any diversity or equal opportunities monitoring questionnaire data, to monitor and report on our equality and diversity composition and ensure fairness in the recruitment process<\/span><\/li>
                                                      • In relation to any right to work information we collect, in order to ensure we comply with the law in employing you<\/span><\/li>
                                                      • To keep you updated on any other suitable vacancies<\/span><\/li><\/ul>

                                                        Legal basis for using this information:<\/span><\/p>

                                                        • Legitimate interests<\/span><\/li>
                                                        • Legal Duty<\/span><\/li>
                                                        • Consent<\/span><\/li>
                                                        • Performance of a Contract<\/span><\/li><\/ul>

                                                          Types of information we use:\u00a0<\/span><\/p>

                                                          • Identity and Contact Data<\/span><\/li>
                                                          • Professional Data<\/span><\/li><\/ul>

                                                            Legal compliance<\/b><\/p>

                                                            What we use your information for:<\/span><\/p>

                                                            • Comply with our legal obligations or if otherwise required or authorised by law<\/span><\/li><\/ul>

                                                              Legal basis for using this information:<\/span><\/p>

                                                              • Legal Duty<\/span><\/li><\/ul>

                                                                Types of information we use:<\/span>\u00a0<\/span><\/p>

                                                                • All relevant Personal Data<\/span><\/li><\/ul>

                                                                  Our disclosures of personal data to third parties<\/b><\/p>

                                                                  We may disclose personal data to:<\/span><\/p>

                                                                  Service providers<\/b><\/p>

                                                                  • IT service providers\u00a0<\/span><\/li>
                                                                  • Data storage providers\u00a0<\/span><\/li>
                                                                  • Web hosting and server providers<\/span><\/li>
                                                                  • Payment processors including Stripe<\/span><\/li>
                                                                  • Marketing and advertising providers<\/span><\/li>
                                                                  • Analytics providers<\/span><\/li>
                                                                  • Hotels, accommodation providers and in-country partners, where necessary to organise retreats<\/span><\/li><\/ul>

                                                                    Professional advisers<\/b><\/p>

                                                                    • Bankers<\/span><\/li>
                                                                    • Auditors<\/span><\/li>
                                                                    • Insurers and insurance brokers<\/span><\/li>
                                                                    • Legal advisers<\/span><\/li><\/ul>

                                                                      Business partners<\/b><\/p>

                                                                      • Our existing or potential agents<\/span><\/li>
                                                                      • Our business partners or contractors<\/span><\/li><\/ul>

                                                                        Corporate transactions<\/b><\/p>

                                                                        If we merge with or are acquired by another company, or sell our business assets:<\/span><\/p>

                                                                        • Your information may be disclosed to our advisers<\/span><\/li>
                                                                        • Your information may be disclosed to the potential purchaser’s advisers<\/span><\/li>
                                                                        • Your information may be included in the transferred assets<\/span><\/li><\/ul>

                                                                          Legal and regulatory bodies<\/b><\/p>

                                                                          • Courts and tribunals<\/span><\/li>
                                                                          • Regulatory authorities including as required for reporting obligations<\/span><\/li>
                                                                          • Law enforcement officers<\/span><\/li><\/ul>

                                                                            Other parties<\/b><\/p>

                                                                            • Third parties you have authorised<\/span><\/li>
                                                                            • Emergency services when necessary<\/span><\/li>
                                                                            • Any other parties as required or permitted by law<\/span><\/li><\/ul>

                                                                              Overseas transfers<\/b><\/p>

                                                                              Where we store and access your information<\/b><\/p>

                                                                              We store your personal data in the United Kingdom. However, your information may be transferred to locations outside the United Kingdom in these circumstances:<\/span><\/p>

                                                                              • When our service providers are located overseas<\/span><\/li>
                                                                              • When we work with overseas business partners<\/span><\/li>
                                                                              • When using cloud-based services or data storage solutions<\/span><\/li>
                                                                              • When required by law or legal proceedings<\/span><\/li><\/ul>

                                                                                Our approach to overseas transfers<\/b><\/p>

                                                                                When we transfer your personal data outside the United Kingdom, we ensure it receives appropriate protection by:<\/span><\/p>

                                                                                • Only transferring your information to countries that UK data protection law recognises as providing adequate protection for personal data, or<\/span><\/li>
                                                                                • Putting in place a contract with the third party that means they must protect personal data to the same standards as the UK.<\/span><\/li>
                                                                                • Transferring personal data to organisations that are part of specific agreements on cross-border data transfers with the UK.<\/span><\/li><\/ul>

                                                                                  What this means for you<\/b><\/p>

                                                                                  We only transfer the minimum amount of personal data necessary and require all recipients to:<\/span><\/p>

                                                                                  • Protect your information to the same standards required by UK law<\/span><\/li>
                                                                                  • Use your information only for the purposes we’ve agreed<\/span><\/li>
                                                                                  • Allow us to monitor how they handle your information<\/span><\/li>
                                                                                  • Provide you with the same rights over your information that you have under UK law<\/span><\/li><\/ul>

                                                                                    Children\u2019s Personal Data<\/b><\/p>

                                                                                    We do not knowingly collect or process personal data from children under 13 years of age without appropriate parental or guardian consent.<\/span><\/p>

                                                                                    If you are under 13, please do not provide personal data to us without first asking your parent or guardian for permission.<\/span><\/p>

                                                                                    If we become aware that we have collected personal data from a child under 13 without verified parental consent, we will take steps to delete that information as quickly as possible.<\/span><\/p>

                                                                                    Parents and guardians have the right to:<\/span><\/p>

                                                                                    • Review any personal data we hold about their child<\/span><\/li>
                                                                                    • Request correction or deletion of their child’s personal data<\/span><\/li>
                                                                                    • Refuse or withdraw consent for further collection or use of their child’s data<\/span><\/li>
                                                                                    • Contact us with any concerns about their child’s privacy<\/span><\/li><\/ul>

                                                                                      If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us immediately using the details provided in this policy.<\/span><\/p>

                                                                                      Data retention<\/b><\/p>

                                                                                      How long we keep your information<\/b><\/p>

                                                                                      We only keep your personal data for as long as we need it to:<\/span><\/p>

                                                                                      • Provide our services to you<\/span><\/li>
                                                                                      • Meet our legal, tax, accounting or regulatory obligations<\/span><\/li>
                                                                                      • Handle any complaints or legal issues that may arise<\/span><\/li><\/ul>

                                                                                        We may keep your information for longer periods if:<\/span><\/p>

                                                                                        • You make a complaint that we need to investigate or respond to<\/span><\/li>
                                                                                        • We reasonably believe legal action involving our relationship with you might occur<\/span><\/li>
                                                                                        • The law requires us to keep it for specific timeframes<\/span><\/li><\/ul>

                                                                                          How we decide retention periods<\/b><\/p>

                                                                                          When determining how long to keep your information, we consider:<\/span><\/p>

                                                                                          • How much information we have and how sensitive it is<\/span><\/li>
                                                                                          • The risk of harm if the information was accessed without permission<\/span><\/li>
                                                                                          • Whether we can achieve our purposes in other ways<\/span><\/li>
                                                                                          • What legal, regulatory, tax or accounting rules require<\/span><\/li>
                                                                                          • The nature of our relationship with you and the services we provide<\/span><\/li><\/ul>

                                                                                            What happens when we no longer need your information<\/b><\/p>

                                                                                            Once we no longer need your personal data, we will securely delete or destroy it in accordance with our data retention policies and legal requirements.<\/span><\/p>

                                                                                            Your Rights<\/b><\/p>

                                                                                            You can request information about retention periods for your data and ask for early deletion where legally possible.<\/span><\/p>

                                                                                            Your privacy rights and choices<\/b><\/p>

                                                                                            Providing information<\/b><\/p>

                                                                                            You can choose whether to provide personal data to us, however, if you don’t provide certain information, we may not be able to provide some services. Let us know if you don\u2019t want to provide information and we will let you know when information is required versus optional.<\/span><\/p>

                                                                                            Right of Access<\/b><\/p>

                                                                                            You have the right to ask us for copies of your personal data. You can request other information such as details about where we get personal data from and who we share personal data with. There are some exemptions which means you may not receive all the information you ask for.<\/span><\/p>

                                                                                            Right to Rectification<\/b><\/p>

                                                                                            You have the right to ask us to correct or delete personal data you think is inaccurate or incomplete.<\/span><\/p>

                                                                                            Right to Erasure (\u201cRight to be forgotten\u201d)<\/b><\/p>

                                                                                            You can request deletion of your personal data in certain limited circumstances as set out in data protection law, such as where the data is no longer necessary or has been unlawfully processed. This right is not absolute and we may be required or entitled to retain your data for legal, regulatory or legitimate business reasons.<\/span><\/p>

                                                                                            Right to Restrict Processing<\/b><\/p>

                                                                                            You can ask us to suspend processing where:<\/span><\/p>

                                                                                            • You contest the accuracy of the data<\/span><\/li>
                                                                                            • Processing is unlawful but you don’t want erasure<\/span><\/li>
                                                                                            • We no longer need the data but you need it for legal claims<\/span><\/li>
                                                                                            • You’ve objected to processing pending verification of our legitimate grounds<\/span><\/li><\/ul>

                                                                                              Right to opt-out of marketing communications<\/b><\/p>

                                                                                              You can opt-out of receiving marketing communications at any time. Each marketing communication will include an unsubscribe option. You can change your marketing preferences by contacting us. We will process your request as soon as practicable.<\/span><\/p>

                                                                                              Right to Data Portability<\/b><\/p>

                                                                                              Where technically feasible, you can receive your personal data in a structured, commonly used format or have it transmitted to another controller where:<\/span><\/p>