Privacy Policy

This policy is issued by [legal entity name, e.g. "Ascendry Ltd"], registered at [registered business address] ("Ascendry", "we", "us"). We are the data controller for the personal data described in this policy.

If you are a UK-based controller processing personal data at any real volume, you likely need to be registered with the ICO (Information Commissioner's Office) and pay the annual data protection fee unless a specific exemption applies — worth confirming this is in place, it is a real legal requirement separate from having this policy published.

From anyone visiting this website

• Standard technical data (IP address, browser type, device type) via normal web server logs.
• Session cookies from Supabase (our authentication/database provider) if you log in.
• Interaction data from the embedded Wistia video player (play, pause, watch duration).

From people who book a call with us

• Name, email address, and phone number, collected via our Calendly booking form.
• Any answers you give to the booking questions we ask (e.g. current situation, goals).

From clients who engage our services

• Contact and account details, stored in our CRM (built on Supabase).
• Payment and billing information, processed directly by Stripe — we never see or store full card numbers on our own servers.
• Business data you share with us in the course of the work (revenue figures, sales process details, etc).

From prospective clients we identify ourselves

Separately from the above, we identify potential clients to contact by analysing publicly available profile information on platforms like Instagram and YouTube (name, bio, follower count, and similar public profile data), using a third-party data tool (Apify). We do this to find businesses that may be a genuine fit for our services — see Section 5 for the legal basis and how to opt out.

• To respond to enquiries and run booked calls.
• To deliver our services to clients and manage the ongoing working relationship.
• To process payments for services rendered.
• To identify and reach out to businesses that may benefit from our services.
• To meet our own legal, accounting, and tax obligations.

• Contract — processing needed to deliver services you've engaged us for, or to take steps at your request before entering a contract (e.g. a discovery call).
• Legitimate interests — for identifying and contacting potential clients (Section 5), and for basic website analytics, balanced against your right to object.
• Legal obligation — where we must keep records for tax, accounting, or other legal reasons.

If you have never contacted us but received an outreach message from Ascendry, your contact details were most likely sourced this way. We rely on legitimate interests as our legal basis: reaching out to genuinely relevant businesses is a normal and expected part of B2B outreach, we only use information you've made publicly available on your own professional profile, and we do not use it for any purpose beyond evaluating and initiating a potential business relationship.

You have the right to object to this processing at any time, free of charge. If you'd like us to stop processing your data or delete what we hold, contact us at [privacy contact email] and we will action this promptly.

We use the following third-party processors to run our business. Each only receives the data needed to perform their function:

• Supabase — database, authentication, and file storage.
• Calendly — call scheduling.
• Wistia — video hosting.
• Stripe — payment processing.
• Apify — public-profile data collection for prospecting (Section 5).
• Render — website hosting.

We do not sell personal data to anyone. Some of these providers may process data outside the UK/EEA (typically the United States); where they do, they rely on their own approved safeguards (such as Standard Contractual Clauses) — confirm this against each provider's current DPA before publishing.

This site uses cookies that are strictly necessary for it to function (e.g. keeping you logged in), plus cookies set by Calendly, Wistia, and Stripe when those embeds are used.

There is currently no cookie consent banner on this site. Under UK PECR, non-essential cookies (which likely includes at least some of what Calendly/Wistia set) generally require consent before they load, separately from GDPR itself. Worth treating as a real follow-up, not just this policy page.

We keep client and financial records for as long as required by UK tax law (currently six years after the end of the relevant accounting period), and other personal data only for as long as it's needed for the purpose it was collected for, or until you ask us to delete it (subject to Section 9). Exact retention periods per data type: [set these deliberately rather than leaving them open-ended].

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Ask us to delete your data ("right to be forgotten").
• Restrict or object to certain processing, including the prospecting use described in Section 5.
• Receive your data in a portable format, where applicable.
• Complain to the ICO if you think we've mishandled your data.

To exercise any of these, contact [privacy contact email].

We may update this policy as our tools or practices change. Material changes will be reflected with a new "last updated" date at the top of this page.

Questions about this policy or how your data is handled: [privacy contact email].