Privacy Policy
Last updated 18 October 2026
Who is responsible
Ashcombe Leadership is the controller of the personal data described here. Contact: [email protected]. [Legal entity name and address to be added before launch.]
What we collect
- Booking details: name, work email, organisation, optional VAT number, and the courses, dates and numbers booked.
- Participant names and emails you send us for joining instructions.
- Enquiry details you send through the contact form.
- Payment records from Stripe. We do not see or store full card details.
We do not ask for health information. Please do not share sensitive personal details in forms or sessions.
Why we use it and our legal basis
| Purpose | Legal basis |
|---|---|
| Taking and managing bookings, sending joining instructions and certificates | Contract |
| Replying to enquiries | Legitimate interests |
| Accounting and tax records | Legal obligation |
| Keeping the site secure | Legitimate interests |
Who processes it for us
- Stripe: payments
- Zoom: live sessions
- Cloudflare: website hosting and security
- Formspree: contact form delivery
- CPD Accreditation Bureau: issuing CPD certificates (participant name, course and date)
- Our email provider: correspondence
Transfers outside the EEA
Some of these providers may process data outside the European Economic Area. Where they do, they rely on safeguards such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
How long we keep it
- Booking and payment records: 10 years, for tax and accounting.
- Participant and attendance records: 3 years after the course.
- Enquiries that do not lead to a booking: 12 months.
Your rights
You can ask to access, correct, delete or move your data, object to or restrict how we use it, and withdraw consent where we rely on it. Email [email protected]. We reply within one month.
Complaints
You can complain to the Information and Data Protection Commissioner (IDPC) in Malta at idpc.org.mt. We would appreciate the chance to help first.