Privacy Policy
What personal data Aspian Alliance collects about you as a visitor or customer, why, and your rights.
Who is responsible
Aspian Alliance Ltd (RC 9444573) is the controller. Contact us about privacy at hello@aspianalliance.com.
What we collect
| Data | When | Why | Lawful basis |
|---|---|---|---|
| Name, work email, organisation, plan and message | You submit the sign-up or contact form | To reply and set up your workspace | Steps before a contract; legitimate interests |
| Account details, passkey public keys, workspace membership | You use Aspian Cloud | To sign you in and record who approved what | Contract |
| Audit records of your actions | You act in a workspace | Tamper-evident change history the service is built on | Contract; legal obligation where it applies |
| Billing details | You pay for a plan | Invoicing. Card details stay with the payment provider | Contract; legal obligation |
| Server logs (IP address, browser, page) | You visit the website | Security and fixing faults | Legitimate interests |
What we do not do
- We do not sell personal data or use it for advertising.
- The website sets no tracking or advertising cookies. See Cookies.
- We do not use your application data to train AI models.
Who else processes it
The providers that handle personal data for us, and the country each processes it in, are on the sub-processor list. Transfers out of Nigeria, the UK or the EU rely on the safeguards each law requires, such as adequacy decisions or standard contractual clauses.
How long we keep it
- Contact and sign-up messages: up to 2 years after the last exchange, unless you become a customer.
- Account data: while the workspace is open, then 30 days for export, then deleted.
- Audit records: for the retention period in your agreement, because they are the evidence the service provides.
- Billing records: as long as tax law requires, usually 6 years.
Your rights
Under the Nigeria Data Protection Act 2023, UK GDPR and EU GDPR you can ask to see, correct, delete, restrict or move your data, and object to processing based on legitimate interests. We reply within one month. You can also complain to the Nigeria Data Protection Commission, the UK Information Commissioner’s Office or your local EU authority.