Privacy policy
This policy explains how OMNIXCO ("we", "us", "our") collects and uses personal data when you use this website or enquire about our services. We are the data controller for that information.
What we collect
- Information you give us. Your name, email address, telephone number, company name and anything you write in an enquiry or discovery-call booking.
- Booking information. The date and time you select for a discovery call, and a booking reference.
- Technical information. Standard server and CDN logs, including IP address, browser type and pages requested. These are used to keep the site secure and available.
- Analytics. Only if you accept optional cookies. See our cookie policy.
Why we use it, and our lawful basis
- To respond to your enquiry and hold the call you booked — necessary to take steps at your request before entering a contract.
- To provide services you've engaged us for — performance of a contract.
- To keep the website secure and working — our legitimate interest in running a safe service.
- To measure how the site is used — your consent, which you can withdraw at any time.
Who we share it with
We do not sell your personal data. We share it only with service providers who help us operate: Amazon Web Services (hosting, storage, form processing and email delivery) and Google (our email inbox). We also use a local business workspace to manage enquiries. Client data is supplied to AI providers only within an agreed delivery scope and with the required client authorisation.
Where your data is held
Our website and contact-form database use AWS US East (N. Virginia). Our local business workspace is in the UK. Google processes email using its service infrastructure. These services can involve international processing; contact us for details of the applicable provider arrangements and safeguards.
How long we keep it
Website contact enquiries expire from our AWS form database after 90 days. Local enquiry records are removed after 90 days. We review email copies within 90 days and remove them when no longer needed. Booking records and client, contract and accounting records follow the retention agreed for that service and applicable legal requirements. Contact-function logs are retained for seven days.
Your rights
Under UK GDPR you have the right to access your data, have it corrected or erased, restrict or object to how we use it, request portability, and withdraw consent at any time. To exercise any of these, contact us through the contact page and we'll respond within one month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Business outreach
Where we contact a business about a relevant service, we record the public source of its contact details, the reason for contact and the applicable lawful-basis assessment or consent. We identify ourselves and offer a reply-based opt-out. Any reply stops automated follow-ups; objections are added to our suppression list. Unconverted prospect records are reviewed and removed after 90 days; minimal suppression details are kept to respect objections. Our business mailbox is connected for relevant business outreach and monitored for replies. We qualify recipients before sending and do not contact people who have objected.
Changes
If we change this policy we'll update the date at the top of this page.
Website enquiries and our agency workflow
Enquiries submitted through our forms are processed in AWS in the US East (N. Virginia) region and copied to our local business workspace on the Mac Mini. Our existing site uses this region. Contact details, your message and enquiry reference are used to respond to your request and manage a potential engagement. AWS SES delivers an alert to our business owner’s verified Gmail inbox. Please do not include passwords, API keys or sensitive personal information in the form.
Enquiry records are set to expire from the form database after 90 days. We review local enquiry records and email copies within 90 days and remove them when no longer needed; client, contract and accounting records may require longer retention. A short-lived pseudonymous network identifier is used for rate limiting. We do not subscribe you to marketing by submitting an enquiry. Contact mahir.gilani@omnixco.com for privacy requests. Where data is transferred internationally, applicable safeguards must be maintained by our service providers.