Privacy Policy

OSM Cloud Services Ltd is the controller of personal information described in this policy. The company is registered in England and Wales under company number 13471538.

Privacy questions and rights requests can be sent to [email protected].

• Enquiries and correspondence: your name, work contact details, organisation and the information you include when you email us.
• Service and account information: details needed to discuss, supply and support a service, including authorised contacts and commercial correspondence.
• Technical information: internet protocol address, browser and device information, requested pages, timestamps and security events that may be processed when the website is delivered.

The current signup form operates only in your browser and does not transmit or store the information entered. The current login form also does not transmit or store usernames or passwords. If these functions are connected to customer systems in future, this policy will be updated before that processing begins.

• To respond to enquiries and take steps requested before entering into a service agreement.
• To administer customer relationships, supply agreed services and provide support under a contract.
• To operate, secure and improve the website and protect against misuse, based on our legitimate interests.
• To keep records and meet legal, regulatory, accounting and tax obligations.
• To send optional communications where you have consented; consent can be withdrawn at any time.

This website does not intentionally use advertising or analytics cookies. The website delivery and security provider may use strictly necessary technologies to deliver pages, protect the service and distinguish legitimate traffic from abuse.

We disclose personal information only where needed to operate the business and supply services. Recipients may include website, infrastructure, communications and professional-service providers, as well as regulators, courts or public authorities where disclosure is legally required.

Providers are expected to handle personal information under appropriate contractual and security obligations. We do not sell personal information.

Some providers may process information outside the United Kingdom. Where UK data protection law requires it, we use an adequacy regulation or appropriate contractual safeguards and supplementary measures for those transfers.

We keep personal information only for as long as needed for the purpose for which it was collected. Retention is determined by the status of an enquiry or customer relationship, contractual needs, security requirements and applicable legal, accounting and tax obligations. Information is deleted or anonymised when it is no longer required.

Depending on the circumstances, UK data protection law may give you rights to access, correct, erase or restrict personal information; to object to processing; to receive portable information; and to withdraw consent.

Contact us to exercise a right. You can also complain to the Information Commissioner's Office.

We use proportionate technical and organisational measures designed to protect personal information. No internet service can guarantee absolute security.

We may update this policy when our website, services or legal obligations change. The date at the top shows the latest revision.