Introduction, Scope & Responsibility
Aspyra is committed to protecting personal data and respecting privacy rights. This Privacy Statement explains how personal information is collected, used, shared, and protected across our UK and US operations. This document is structured by jurisdiction to reflect different legal requirements.
Data Controllers
Aspyra Technologies Ltd acts as the data controller under UK data protection law.
Aspyra, LLC is responsible for personal information processed in connection with US, Caribbean and Asia-Pacific operations.
Personal Information We Collect & How We Use It
Information We Collect
- Identity and contact details
- Business and contractual information
- Communications and correspondence
- Technical data such as IP address, device or browser
- Transaction or account-related information
We only collect information that is relevant, necessary and proportionate.
How We Use Personal Information
- Provide and manage services
- Communicate with customers, partners and suppliers
- Fulfil contractual obligations
- Comply with legal and regulatory requirements
- Improve products, services and operations
Legal Bases, International Transfers & Individual Rights
Lawful Bases for Processing
Contractual necessity · Legal obligation · Legitimate interests · Consent
International Transfers
Where personal data is transferred outside the UK, appropriate safeguards are applied in accordance with UK GDPR.
Individual Rights
Access · Correction · Erasure · Restrict or object · Data portability · Withdraw consent
Complaints may be raised with Aspyra Technologies Ltd or the UK ICO.Aspyra, LLC processes personal information in accordance with applicable US federal and state laws.
Access personal information · Request deletion · Opt out of certain data uses
Data Sharing, Security, Retention & Contact
Personal information may be shared with service providers, professional advisers, corporate group companies, and legal or regulatory authorities where required by law. We do not sell personal information.
We implement administrative, technical, and organisational safeguards to protect personal information from unauthorised access, loss, or misuse.
Personal information is retained only for as long as necessary to meet legal, contractual, or operational requirements.
