Legal
Privacy notice
Last updated:
This notice explains what personal data we collect through omidris.com, why we collect it, who processes it for us, how long we keep it and the rights you have. We keep data collection to the minimum the site needs to work and to reply to you.
01Who we are
The controller responsible for your personal data is Omidris Ltd, a company registered in England and Wales under company number 17577353, with its registered office at 128 City Road, London, EC1V 2NX, United Kingdom (“Omidris”, “we”, “us”).
For any question about this notice or your personal data, email us at [email protected] or write to us at our registered office.
02What we collect
When you use the contact form: your name, your email address and the content of your message, plus anything else you choose to include in it. Please don't send us sensitive information (for example about health) through the form.
When you visit the site: to deliver pages and protect the site, our network provider (Cloudflare) and our server process technical data. This includes your IP address, browser type, the pages requested and the date and time of each request. To monitor the site, our server keeps technical logs of each request (time, page, response code, browser type) without your IP address. When a request causes an error, the error log may also record the IP address.
Spam protection: when you send the form, we use your IP address to limit how many messages can be sent in a short time. This record is held in server memory only and is discarded within 10 minutes.
We do not use analytics, advertising or tracking tools, and we do not buy personal data from third parties.
03How we use it and our lawful basis
Under the UK General Data Protection Regulation (UK GDPR), we rely on the following lawful bases:
| Purpose | Lawful basis |
|---|---|
| Reading and replying to your enquiry | Our legitimate interest in responding to people who contact us. If your enquiry is about working with us, steps taken at your request before entering into a contract. |
| Running a project with you, if your enquiry leads to one | Performance of a contract, and compliance with our legal obligations (for example accounting and tax records). |
| Keeping the site and the form secure, and preventing spam and abuse | Our legitimate interest in protecting our website and our inbox. |
| Establishing, exercising or defending legal claims | Our legitimate interest in protecting our legal rights. |
Where we rely on legitimate interests, we have considered that our interests are not overridden by yours, given the limited data involved and what you would reasonably expect when you contact us. We do not use your data for marketing, we do not sell it, and we do not make decisions about you by automated means.
04Who processes it for us
We share personal data only with the service providers below, which process it on our behalf and under our instructions:
| Provider | Role | Location |
|---|---|---|
| Contabo GmbH | Hosts the virtual server that runs the website and processes the contact form. | Data centre in the European Union |
| Cloudflare, Inc. | Domain name system, network security and content delivery for omidris.com. All visits pass through Cloudflare. Also forwards email sent to our omidris.com addresses to our mailbox. | Global network; company in the United States |
| Resend (Resend, Inc.) | Sends the messages submitted through the contact form to our mailbox. | Sending region in the European Union (Ireland); company in the United States |
| Google (Gmail) | Hosts the mailbox where we receive and answer enquiries. | United States and other countries |
We may also disclose personal data if required by law, to a court or regulator, or to professional advisers (such as lawyers or accountants) bound by confidentiality. If Omidris is ever reorganised or sold, data may transfer to the new owner under the same protections.
05International transfers
Some of the providers above are based in, or process data in, countries outside the UK. When personal data leaves the UK, it is protected by one of the following:
- for the European Union, the UK adequacy regulations, which recognise EU data protection as equivalent to UK standards;
- for the United States, the UK Extension to the EU-US Data Privacy Framework (the “UK-US data bridge”) where the provider is certified, or otherwise the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
You can ask us for more information about these safeguards.
06How long we keep it
- Enquiries: 24 months after our last exchange with you, then deleted.
- If your enquiry leads to a project: for the duration of our working relationship and 6 years after it ends, to meet our legal, accounting and tax obligations.
- Spam-protection records: held in memory for no more than 10 minutes.
- Server logs: deleted automatically after 14 days.
- Network data: kept by Cloudflare for a limited period under its own retention policy, and used only to deliver and secure the site.
07How we protect it
The site is served only over encrypted connections (HTTPS), including between Cloudflare and our server. The server is maintained and updated by us, and access to enquiries is restricted to the people at Omidris who need it to reply. No method of transmission or storage is completely secure, but we take appropriate measures to protect your data.
08Your rights
Under UK data protection law, you have the right to:
- access the personal data we hold about you and get a copy of it;
- have inaccurate data corrected or incomplete data completed;
- have your data erased in certain circumstances;
- restrict how we use your data in certain circumstances;
- object to processing based on our legitimate interests;
- receive data you provided to us in a portable format and have it transferred, where processing is based on a contract with you.
To exercise any of these rights, email [email protected]. We may need to confirm your identity. We will reply within one month, and there is normally no charge.
If you are unhappy with how we handle your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113. If you live in the European Union, you can also contact your local data protection authority.
09Cookies and local storage
omidris.com does not set its own cookies and does not use analytics or advertising trackers. Our fonts are served from our own domain.
Cloudflare may set strictly necessary security cookies (such as __cf_bm or cf_clearance) when it needs to tell people and automated traffic apart. These are used only to protect the site and do not track you across other websites.
The site also stores one value in your browser's session storage (omidris-intro) so the logo animation plays only once per visit. It contains no personal data, is never sent to us, and is deleted automatically when you close the tab.
10Children
This website is intended for adults and businesses. We do not knowingly collect personal data from children through it. Some of our products are designed for families. Each product has its own privacy notice covering how it handles data.
11Changes to this notice
We may update this notice from time to time, for example if we change providers. The date at the top of this page shows when it was last changed. See also our terms of use.