Privacy notice

Who we are

Opsenium Ltd is the data controller for personal data collected through this website. Contact for privacy matters: privacy@opsenium.com. Registered office and Companies House details are published on the supplier information page as they are confirmed.

What we collect and why

Enquiries

When you use the contact form or email us, we collect the details you provide: name, work email, organisation, role, phone number if given, and the description of your enquiry. We use this to respond to you and, if an engagement follows, to set it up. The lawful basis is our legitimate interest in responding to business enquiries, and where relevant the steps needed to enter into a contract.

Enquiry data is held for up to 24 months after our last contact, unless an engagement follows, in which case it is kept for the duration of the relationship and the retention period in the contract.

We do not add enquirers to a mailing list and we do not send marketing email.

AppCheck requests

When you request an AppCheck, we collect the answers you give in the questionnaire: your name, work email, company or project, country, details of your product and how it should be tested, and your chosen review date. We use them to assess whether AppCheck is suitable, to hold and confirm your review date, to plan and carry out the review, to write your report and to contact you about it. The lawful basis is taking steps at your request before entering into a contract, and then performing that contract.

Requests are stored in Opsenium's Microsoft Azure subscription and sent to Opsenium's mailbox. To limit abuse of the form, we keep a one-way hash of your IP address, not the address itself, and delete it within a few days. Request data is held for up to 24 months after our last contact, or for the duration of the engagement and the retention period that applies to it. Please do not include passwords, keys or customer data in the questionnaire.

Payment for AppCheck is taken by Stripe on a Stripe-hosted page. Stripe processes your payment details under its own privacy policy and sends your receipt; Opsenium does not see or store your card details.

Website analytics

This website uses Microsoft Azure Application Insights, configured without cookies, to count page views, referrers, devices and browser errors in aggregate. No cookies are set, no personal identifiers are stored by us, and no data is shared with advertising networks. Telemetry is held in Opsenium's Azure subscription in the UK and retained for 90 days. Because no cookies or similar technologies are used for analytics, no consent banner is shown.

Server logs

Our hosting provider records standard request logs, including IP address, user agent and the pages requested, for security and operational purposes. These are retained for a short period and are not used to identify individuals.

Cookies

This website sets no cookies for tracking, advertising or analytics. If a strictly necessary cookie is ever introduced, for example to protect a form against abuse, it will be described here.

Who we share data with

Enquiry and AppCheck request data is processed by Opsenium and the providers we use to run email, hosting and storage, which are Microsoft services hosted in the UK or the EU. AppCheck payments are handled by Stripe, as described above. We do not sell personal data and we do not share it with third parties for their own purposes.

Client systems

When Opsenium builds and operates a system for a client, the client is the data controller for the data in that system and Opsenium acts as a processor under a written data processing agreement. This notice does not cover those systems; their privacy notices are published by the client.

Your rights

Under UK GDPR you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, and to data portability where applicable. To exercise any of these rights, email privacy@opsenium.com. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

Changes

This notice is reviewed when our practices change. The date at the top of the page is updated when it is revised.