Privacy Policy

Last updated: September 2026

 

This Privacy Policy explains how AstonECO Management (“AstonECO”, “we”, “us” or “our”) collects and uses personal information through the ELSA – Earning Local Support Architecture – website.

ELSA was developed by AstonECO Management.

1. Who is responsible for your information?

AstonECO Management is the data controller for personal information collected through this website.

If you have questions about this Privacy Policy or wish to exercise your data protection rights, you can contact us through our Contact page.

2. Information we collect

We may collect personal information when you:

  • contact us through the website;

  • request an ELSA guide or other resource;

  • subscribe to ELSA Insights or other communications;

  • register interest in an ELSA service, event or CPD programme; or

  • otherwise communicate with us.

Depending on how you interact with us, this may include your name, email address, organisation, role, information you provide in a message or enquiry, and your communication preferences.

We may also receive limited technical information about use of the website, such as browser, device and website activity information, through cookies and similar technologies. Further information is available in our Cookie Policy.

3. How we use your information

We use personal information to:

  • provide resources that you have requested;

  • respond to enquiries;

  • communicate with you about ELSA;

  • send ELSA Insights or other marketing communications where you have chosen to receive them;

  • understand how our website and resources are being used;

  • improve our website, communications and services;

  • administer our relationship with prospective and existing clients; and

  • meet our legal and regulatory obligations.

We do not sell your personal information.

4. Our legal basis for using your information

Under the General Data Protection Regulation (GDPR), we rely on different legal bases depending on the circumstances.

Where you have subscribed to ELSA Insights or other optional marketing communications, we generally rely on your consent. You can withdraw that consent at any time by using the unsubscribe link in our emails.

Where you contact us or ask us to take steps in relation to a potential service or engagement, processing may be necessary in order to respond to your request or take steps before entering into a contract.

We may also process limited information where this is necessary for our legitimate interests, for example to administer and improve our website, understand interest in ELSA and manage our professional relationships, provided those interests do not override your rights and interests.

In some circumstances, we may process information where necessary to comply with a legal obligation.

5. ELSA resources and email communications

Requesting an ELSA resource does not automatically mean that you must subscribe to ongoing ELSA marketing communications.

Where we offer you the option to receive ELSA Insights or similar communications, you can choose whether to opt in.

You can unsubscribe from these communications at any time using the unsubscribe link included in our emails.

We may still send communications that are necessary to respond to an enquiry or provide something that you have specifically requested.

6. Service providers

We use trusted service providers to operate our website and communications.

The ELSA website and associated forms and email systems are hosted using Kajabi, which processes information on our behalf in connection with the operation of the website and our communications.

We may also use other professional, technical, analytics or communications providers where necessary to operate our business.

We require service providers processing personal information on our behalf to handle that information appropriately and in accordance with applicable data protection requirements.

7. International transfers

Some of the technology providers we use may process information outside the European Economic Area.

Where personal information is transferred internationally, we take appropriate measures to protect it in accordance with applicable data protection law. These measures may include adequacy decisions or contractual safeguards such as the European Commission's Standard Contractual Clauses.

8. How long we keep information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet any applicable legal, accounting or regulatory requirements.

For example:

  • information associated with an active enquiry may be retained while the enquiry or professional relationship remains relevant;

  • email subscription information is retained until you unsubscribe or we determine that it is no longer required; and

  • where you unsubscribe, we may retain limited information necessary to record and respect that preference.

Retention periods may vary depending on the nature of the information and our relationship with you.

9. Your data protection rights

Under applicable data protection law, you may have the right to:

  • access personal information we hold about you;

  • ask us to correct inaccurate information;

  • request deletion of your information in certain circumstances;

  • request restriction of processing;

  • object to certain processing;

  • withdraw consent where processing is based on consent; and

  • receive certain information in a portable format where applicable.

To exercise any of these rights, please contact us using the details above.

You also have the right to lodge a complaint with the Irish Data Protection Commission or another relevant supervisory authority.

10. Cookies

We use cookies and similar technologies where necessary to operate the website and, depending on your choices, for other purposes such as analytics.

Non-essential cookies will only be used where the required consent has been obtained.

Please see our Cookie Policy for further information and for details of how you can manage your preferences.

11. Third-party websites

Our website may contain links to third-party websites, including the AstonECO website and other external resources.

Those websites operate under their own privacy policies, and we are not responsible for their privacy practices.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our activities, technology or legal requirements.

The latest version will always be published on this page together with the date it was last updated.