Privacy Policy

Introduction

astralfoundry Ltd ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains the data we collect when you use our professional certification platform and related services, how we use your information, and your rights regarding your personal data.

This policy applies to all users of our website, certification programmes, and related services. By using our services, you acknowledge that you have read and understood this Privacy Policy.

Data Controller Information

astralfoundry Ltd is the data controller for the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Collection

We collect personal data that you provide directly to us and information that is automatically collected when you use our services. The data we collect includes:

Information You Provide

• Contact information (name, email address, phone number, postal address)
• Account registration details (username, password, profile information)
• Educational and professional background information
• Course enrollment and certification data
• Payment and billing information
• Communications with our support team
• Survey responses and feedback

Automatically Collected Information

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, learning progress)
• Location data (general geographic location based on IP address)
• Cookies and similar tracking technologies

How We Use Your Information

We process your personal data for the following purposes, based on legitimate interests, contractual necessity, and your consent:

• Providing and managing our certification programmes and services
• Processing enrollments and managing your learning progress
• Issuing certificates and maintaining certification records
• Processing payments and managing billing
• Communicating with you about our services and your account
• Providing customer support and responding to enquiries
• Improving our services and developing new programmes
• Conducting research and analytics to enhance user experience
• Complying with legal obligations and regulatory requirements
• Protecting our rights and preventing fraud or misuse

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about our use of cookies, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal data to third parties except in the following circumstances:

• Service providers who assist us in operating our platform (payment processors, hosting providers, analytics services)
• Professional bodies and employers for certification verification purposes (with your consent)
• Legal authorities when required by law or to protect our rights
• Business transfers (in the event of merger, acquisition, or sale of assets)

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, including adequacy decisions, standard contractual clauses, or other approved mechanisms under GDPR.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account information: Retained for the duration of your account plus 7 years after closure
• Certification records: Retained permanently for verification purposes
• Payment data: Retained for 7 years for accounting and tax purposes
• Marketing data: Retained until you withdraw consent or unsubscribe
• Website analytics: Aggregated data retained for 3 years

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

• Right of access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data in certain circumstances
• Right to restrict processing: Request limitation of processing in specific situations
• Right to data portability: Receive your data in a structured, commonly used format
• Right to object: Object to processing based on legitimate interests or direct marketing
• Right to withdraw consent: Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at privacy@astralfoundry.world or +353 91 527 5025. We will respond to your request within one month of receipt.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Staff training on data protection and security
• Incident response and breach notification procedures

Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Irish Data Protection Commission if you believe your data protection rights have been violated. Contact information for the Data Protection Commission can be found at www.dataprotection.ie.