Privacy Policy

1. Who We Are

Meridian Advisory Group Ltd ("Meridian", "we", "us", or "our") is a strategic coaching and consulting firm registered in England and Wales (Company No. 06847291). Our registered office is at 40 Bank Street, Canary Wharf, London, E14 5NR.

We are the data controller for the personal data we process. This means we are responsible for deciding how we hold and use your personal information. If you have any questions about how we handle your data, please contact us at hello@astrumcorecluster.com.

2. Data We Collect

We may collect and process the following categories of personal data:

Information You Provide Directly

• Identity data: Full name, title, job role, and employer
• Contact data: Email address, telephone number, and postal address
• Enquiry data: Information you include when completing contact forms, booking consultations, or corresponding with us
• Coaching and engagement data: Notes, assessments, development plans, and other materials created during our professional engagement with you
• Feedback data: Testimonials, survey responses, and programme evaluations

Information Collected Automatically

• Technical data: IP address, browser type and version, operating system, time zone, and device information
• Usage data: Pages visited, time spent on pages, navigation paths, and referral sources
• Cookie data: Information collected through cookies and similar tracking technologies (see our Cookie Policy for details)

Information From Third Parties

• Referral data: Contact details and context provided by a colleague, HR department, or other professional contact who has referred you to our services
• Publicly available data: Professional information from public sources such as LinkedIn, Companies House, or your employer's website

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your enquiries, provide quotes, and manage the booking of consultations and discovery calls
• To deliver our coaching, consulting, and advisory services under contract
• To administer and manage our client relationships, including invoicing and account management
• To send you relevant insights, articles, event invitations, and service updates where you have opted in or where we have a legitimate interest
• To improve our website, services, and client experience through analytics
• To comply with legal and regulatory obligations
• To establish, exercise, or defend legal claims

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we rely on the following lawful bases to process your personal data:

• Contract: Processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering a contract (e.g., booking a discovery call, delivering coaching services)
• Legitimate interests: Processing is necessary for our legitimate interests or those of a third party, provided your rights do not override those interests (e.g., marketing to existing clients, improving our services, website analytics)
• Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., subscribing to our newsletter)
• Legal obligation: Processing is necessary for compliance with a legal obligation to which we are subject

5. Data Sharing & Third Parties

We do not sell your personal data to any third party. We may share your data with the following categories of recipients where necessary:

• Service providers: Companies that assist us with IT infrastructure, email delivery, payment processing, website hosting, and analytics (e.g., Google Analytics)
• Professional advisers: Lawyers, auditors, accountants, and insurers who provide professional services to us
• Coaching associates: Approved associate coaches or consultants who may deliver services on our behalf, subject to strict confidentiality agreements
• Regulatory and legal authorities: Where we are required to do so by law, regulation, or court order
• Corporate sponsors or employers: Where your coaching engagement is sponsored by your employer, we may share summary progress reports as agreed at the outset of the engagement, but never the confidential content of coaching sessions

All third parties are required to respect the security of your data and treat it in accordance with applicable data protection legislation.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Our standard retention periods are:

• Client engagement records: 7 years following the end of the engagement, in line with our professional indemnity insurance and regulatory requirements
• Marketing data: Until you withdraw your consent or unsubscribe, at which point we will delete or anonymise your data within 30 days
• Website analytics data: 26 months from the date of collection
• Enquiry data (non-clients): 2 years from the date of your last interaction with us

7. Your Rights Under GDPR

Under the UK GDPR, you have the following rights in relation to your personal data:

• Right of access: You have the right to request a copy of the personal data we hold about you
• Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data
• Right to erasure: You have the right to request that we delete your personal data, subject to certain legal exceptions
• Right to restrict processing: You have the right to request that we temporarily or permanently stop processing all or some of your personal data
• Right to data portability: You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests
• Rights related to automated decision-making: You have the right not to be subject to a decision based solely on automated processing, including profiling

To exercise any of these rights, please contact us at hello@astrumcorecluster.com. We will respond to your request within one month of receipt. There is no fee to exercise your rights, although we may charge a reasonable administrative fee if your request is manifestly unfounded or excessive.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

8. International Data Transfers

We primarily store and process your personal data within the United Kingdom and the European Economic Area (EEA). Where we transfer your data outside the UK or EEA, we ensure appropriate safeguards are in place, including:

• Transfers to countries that have been deemed to provide an adequate level of data protection by the UK Secretary of State
• Standard contractual clauses (SCCs) approved by the Information Commissioner's Office
• Binding corporate rules or other legally recognised transfer mechanisms

9. Cookies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyse site usage. For full details on the cookies we use, their purposes, and how to manage them, please refer to our Cookie Policy.

10. Children's Privacy

Our services are designed for business professionals and are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or regulatory guidance. Any material changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

Meridian Advisory Group Ltd
40 Bank Street, Canary Wharf
London, E14 5NR
United Kingdom

Email: hello@astrumcorecluster.com
Telephone: +44 (0) 20 7946 0832