Privacy policy
How we look after your data.
The purpose of this policy is to explain how we control, process, handle and protect your personal information while browsing or using this website, including your rights under current laws and regulations.
Key definitions
- "We", "our" or "us" refer to Open Digital Consulting Co.
- "You" and "the user" refer to the person using this website.
- GDPR: the General Data Protection Regulation. PECR: the Privacy and Electronic Communications Regulations. ICO: the Information Commissioner's Office.
Processing of your personal data
We are registered with the ICO under the Data Protection Register; registration number Z5707409. We control and process personal information under the following lawful bases.
Consent
Used for general newsletters and mailing lists. We process your information by manual categorisation and addressing of messages, until you withdraw consent. We do not share your information with third parties.
Contract
Used to service our contract with you, processing information as necessary to meet our obligations, until the contract between us ends. We do not share your information with third parties without permission.
Legal obligation
Used to maintain statutory records, retained in line with statutory requirements plus one year. We do not share your information with third parties unless required to maintain statutory requirements.
Legitimate interests
Used to maintain professional relationships, for communications, retained for three years or until an objection is made. We do not share your information with third parties.
If the lawful basis on which we process your personal information changes, we will notify you of the change and of any new lawful basis. We shall stop processing your personal information if the lawful basis used is no longer relevant.
Your rights
Under the GDPR you have the right to be informed; of access; to rectification; to erasure; to restrict processing; to data portability; to object; and not to be subject to automated decision-making including profiling. You may complain to the ICO if you feel there is a problem with the way we are handling your data. We handle subject access requests in accordance with the GDPR.
Cookies and analytics
This website sets no third-party cookies and uses no third-party analytics or advertising services. A small first-party cookie or browser storage entry may be used to remember your colour-mode preference and, where applicable, to keep you signed in. Visitor statistics are produced from the website's own access log with visitor addresses anonymised at the point of recording.
Data security and protection
We ensure the security of personal information we hold by using secure data storage technologies and precise procedures for how we store, access and manage that information, meeting GDPR compliance requirements.
Email marketing
Where you subscribe to a newsletter or mailing list we rely on consent, and every message provides an easy way to withdraw consent or manage your preferences. Within our email management system we hold your name, email address, IP address, and subscription time and date.