Privacy Policy

Last updated: 7 August 2026

Asteria International Ltd (“Asteria International”, “we”, “us” or “our”) is committed to protecting and respecting your privacy and ensuring that personal information is handled lawfully, fairly and transparently.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, make an enquiry, engage our services, work with us as a client, contractor, consultant or supplier, or otherwise interact with Asteria International.

We process personal information in accordance with applicable UK data protection and privacy legislation, including the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, the Privacy and Electronic Communications (EC Directive) Regulations 2003 (“PECR”), as amended, including by the Data (Use and Access) Act 2025, and other applicable UK legislation concerning privacy and the processing of personal information.

---

1. Who We Are

Asteria International Ltd is an engineering, project and construction management consultancy providing professional services across engineering, energy, infrastructure, industrial and public-sector projects.

For the purposes of applicable UK data protection legislation, Asteria International Ltd will normally act as the data controller in respect of personal information covered by this Privacy Policy.

Questions concerning this Privacy Policy or the way we process personal information should be directed to Asteria International using the contact details provided in Section 19 below.

---

2. Personal Information We May Collect

The personal information we collect will depend upon the nature of your relationship and interaction with us.

This may include:

• your name, job title and organisation;
• business or personal contact information, including email address, telephone number and postal address;
• information provided when you contact us through our website;
• correspondence, enquiries and records of communications with us;
• information contained within quotations, proposals, contracts, purchase orders and other commercial documentation;
• information relating to clients, consultants, contractors, suppliers and other project stakeholders;
• professional qualifications, employment information and experience where relevant to an engagement or business relationship;
• information necessary to administer contractual, commercial and financial relationships;
• technical information associated with your use of our website, which may include IP address, browser type, device information and website usage information;
• cookie, analytics and similar technology information where applicable; and
• any other personal information that you voluntarily provide to us.

We aim only to collect personal information that is relevant and reasonably necessary for the purpose for which it is being processed, consistent with UK data protection principles including data minimisation and purpose limitation.

---

3. How We Collect Personal Information

We may obtain personal information directly from you when you:

• submit an enquiry through our website;
• contact us by telephone, email or other communication;
• request information about our services;
• engage Asteria International to provide professional services;
• provide services to Asteria International;
• participate in a project or programme involving Asteria International;
• provide information during a tender, procurement or prequalification process;
• attend meetings, events or professional networking activities involving us; or
• otherwise communicate or conduct business with us.

We may also receive professional or business contact information from clients, contractors, consultants, suppliers, publicly available professional sources and other legitimate business sources.

Where we obtain personal information indirectly, we will provide applicable privacy information where required by law.

---

4. How We Use Personal Information

We may process personal information for purposes including:

• responding to enquiries;
• communicating with existing and prospective clients;
• providing engineering, project management, construction management, commercial management, project controls, risk management and related professional services;
• preparing proposals, quotations and tenders;
• establishing and managing client and supplier relationships;
• managing contracts, projects and programmes;
• coordinating consultants, contractors and project stakeholders;
• administering procurement and supply-chain activities;
• managing invoices, payments and financial records;
• maintaining business and project records;
• managing health, safety, quality and regulatory obligations where applicable;
• maintaining the security and operation of our website and information systems;
• understanding how our website and services are used;
• improving our services and business operations;
• protecting our legal rights and managing disputes or claims;
• complying with legal, regulatory, contractual and professional obligations; and
• conducting appropriate business-to-business marketing activities where permitted by law.

We will not use personal information for purposes that are incompatible with those for which it was originally collected unless such processing is permitted or required by law.

---

5. Lawful Bases for Processing

We will only process personal information where we have an appropriate lawful basis.

Depending upon the circumstances, these may include:

Contract — where processing is necessary to enter into or perform a contract with you.

Legal obligation — where processing is necessary for us to comply with a legal or regulatory obligation.

Legitimate interests — where processing is necessary for our legitimate business interests, or those of another organisation, and those interests are not overridden by the rights and interests of the individual concerned.

Our legitimate interests may include operating and developing our business, responding to business enquiries, managing professional relationships, administering projects and contracts, protecting our organisation and systems, establishing or defending legal rights and conducting appropriate business-to-business communications and marketing.

Consent — where you have given us valid consent to process information for a particular purpose. Where processing relies upon consent, you may withdraw that consent at any time.

Other lawful bases may apply in particular circumstances where permitted under applicable UK data protection legislation.

---

6. Business-to-Business Communications and Marketing

Asteria International primarily operates within a business-to-business environment.

We may use professional business contact information to communicate with organisations and individuals about our services, capabilities, projects and matters that we reasonably believe may be relevant to their professional responsibilities.

Where we rely upon legitimate interests for such processing, we will consider the nature of the communication, our relationship with the recipient and the potential impact upon their privacy.

Where PECR or other applicable legislation requires consent for a particular type of electronic marketing communication, we will comply with those requirements.

You may ask us to stop sending direct marketing communications at any time.

Nothing in this section affects an individual’s applicable right to object to processing of their personal information for direct marketing purposes.

---

7. Sharing Personal Information

We do not sell personal information.

We may share personal information where reasonably necessary with:

• employees and authorised representatives of Asteria International;
• clients and prospective clients where appropriate;
• professional consultants and advisers;
• contractors, subcontractors and suppliers;
• project partners and other organisations involved in delivering projects;
• IT, website hosting, email, cloud storage and other technology providers;
• accountants, insurers, legal advisers and other professional advisers;
• government departments, regulatory authorities and law-enforcement organisations where required or permitted by law; and
• other organisations where disclosure is reasonably necessary to establish, exercise or defend legal rights.

Where third parties process personal information on our behalf, we take reasonable steps to ensure that appropriate contractual, organisational and security arrangements are in place.

---

8. International Transfers

Some service providers or technology platforms used by Asteria International may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer complies with applicable UK data protection legislation.

Depending upon the circumstances, this may include reliance upon UK adequacy regulations, recognised contractual safeguards or another transfer mechanism or exception permitted under UK law.

---

9. Data Security

We take appropriate technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Measures may include, where appropriate:

• access controls;
• password protection and authentication;
• security software;
• secure IT and cloud-based systems;
• data backups;
• restrictions on access to personal information; and
• appropriate organisational procedures.

However, no internet transmission, electronic communication or electronic storage system can be guaranteed to be completely secure.

---

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including satisfying legal, contractual, accounting, insurance and regulatory requirements.

Retention periods may vary depending upon the nature of the information and our relationship with the individual or organisation concerned.

When determining an appropriate retention period, we may consider:

• the nature and sensitivity of the information;
• the purpose for which it is held;
• contractual requirements;
• applicable statutory limitation periods;
• regulatory and professional requirements;
• insurance requirements;
• project record and document-retention requirements; and
• whether the information may be required to establish, exercise or defend legal claims.

Information that is no longer required will be securely deleted, destroyed or anonymised where appropriate.

---

11. Cookies and Website Technologies

Our website may use cookies and similar storage or access technologies to enable website functionality, maintain security, remember preferences, understand website usage and improve website performance.

Some technologies may be necessary for the operation or security of the website. Others may be used for purposes such as website analytics, functionality or embedded third-party content.

Where consent is required under applicable law, visitors will be provided with appropriate controls to accept, reject or manage relevant technologies.

Further details about technologies used by this website may be provided through our Cookie Policy and/or website cookie management controls.

---

12. Links to Other Websites

Our website may contain links to websites, platforms or online services operated by third parties.

Asteria International is not responsible for the privacy practices, security or content of third-party websites.

We recommend reviewing the privacy information provided by the relevant third party before providing personal information to them.

---

13. Your Data Protection Rights

Depending upon the circumstances and the lawful basis upon which personal information is processed, UK data protection legislation provides individuals with a number of rights.

These may include:

• the right to be informed about how personal information is collected and used;
• the right of access to personal information held about you;
• the right to rectification of inaccurate or incomplete personal information;
• the right to erasure in certain circumstances;
• the right to restrict processing in certain circumstances;
• the right to data portability where applicable;
• the right to object to certain processing; and
• rights relating to certain forms of automated decision-making and profiling.

Not every right applies in every circumstance and some rights are subject to exemptions and qualifications under UK law.

Where processing is based upon your consent, you may also withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

---

14. Exercising Your Rights

If you wish to exercise any of your data protection rights or have questions regarding personal information we hold about you, please contact Asteria International using the details provided in Section 19.

We may need to verify your identity before responding to a request in order to protect personal information from unauthorised access or disclosure.

We will consider and respond to valid requests in accordance with the requirements and timescales established by applicable UK data protection legislation.

---

15. Complaints

If you have concerns about the way Asteria International processes your personal information, please contact us in the first instance so that we have an opportunity to investigate and respond to your concerns.

You also have the right to raise a concern or lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent regulator responsible for data protection and information rights.

Information Commissioner’s Office

---

16. Automated Decision-Making

Asteria International does not currently use personal information collected through this website to make solely automated decisions that produce legal or similarly significant effects upon individuals.

Should our use of automated decision-making change materially, we will update our privacy information and provide any additional information or safeguards required by applicable law.

---

17. Children’s Privacy

Our website and professional services are intended primarily for organisations, businesses and professionals and are not directed towards children.

We do not knowingly seek to collect personal information from children through our website.

---

18. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to:

• our business activities;
• our services;
• our website and technology;
• the way we process personal information;
• legal or regulatory requirements; or
• our data protection and privacy practices.

The latest version will be published on this website and the “Last updated” date at the top of this Privacy Policy will be amended accordingly.

---

19. Contact Us

If you have any questions about this Privacy Policy, how Asteria International processes personal information, or wish to exercise any of your data protection rights, please contact:

Alternatively, you can contact us using the enquiry form on our Contact page.