Privacy Policy

1) Data Controller & Contact

Ozytherionyx Ltd is the data controller for personal data processed via this website and our services.

2) Data We Collect

We collect only the data necessary to deliver our services and operate our website:

• Contact & Identity: name, email address, phone number, company name.
• Billing: transaction details (processed by Stripe — we don’t store full card numbers).
• Service Data: information you share during sessions, forms, or emails (business context, goals, assets).
• Usage & Device: pages viewed, clicks, IP address, browser, approximate location, via cookies/analytics (see Cookies).
• Communications: messages, notes, support requests, scheduling data.

We do not intentionally collect special category data (e.g., health, religious beliefs). Please avoid sending such data unless strictly necessary.

3) How We Use Your Data (Legal Bases)

We process your personal data under the following legal bases:

4) Cookies & Similar Technologies

We use essential cookies for core functionality and, with your consent, analytics and marketing cookies to improve your experience. You can change or withdraw consent at any time via our cookie banner or browser settings.

For detailed information (types, purposes, durations), see our Cookie Policy.

5) Analytics & Advertising

We may use analytics (e.g., Google Analytics) to understand website performance and advertising platforms (e.g., Google/Meta) to reach interested audiences. Where required, these run only with your cookie consent.

• Pseudonymisation: Where possible, we aggregate or pseudonymise data.
• Controls: You can opt out via our cookie banner or platform-level ad settings.
• Data sharing: Limited to providers as processors per their policies and our agreements.

6) Data Sharing & Disclosures

We share data only when necessary:

• Service providers (processors): hosting, email, analytics, scheduling, document delivery, and payment processing (Stripe).
• Professional advisors & legal authorities: where required by law or to protect our rights.
• Business changes: in a merger, acquisition, or restructuring, your data may transfer under the same protections.

We do not sell your personal data.

7) International Transfers

When we or our processors transfer personal data outside the UK, we rely on lawful safeguards such as UK adequacy regulations, International Data Transfer Agreements (IDTAs), or Standard Contractual Clauses (SCCs) with additional measures where appropriate.

8) Data Retention

We retain personal data only as long as necessary for the purposes described in this Policy:

• Client & service records: generally up to 6 years after last interaction (to comply with tax/accounting and contractual claims periods).
• Marketing data: until you withdraw consent or become inactive for a reasonable period.
• Cookies/analytics: per our Cookie Policy.

We will securely delete or anonymise data when retention periods expire.

9) Data Security

We implement technical and organisational measures to protect your data, including access controls, encryption in transit, and least-privilege principles. No method is 100% secure, but we continuously review and improve our safeguards.

10) Your Rights

Under UK GDPR, you have the following rights (subject to conditions and legal exceptions):

• Access: request a copy of your personal data.
• Rectification: correct inaccurate or incomplete data.
• Erasure: ask us to delete your data in certain cases.
• Restriction: request limited processing.
• Portability: receive your data in a structured, commonly used format.
• Object: object to processing based on legitimate interests or to direct marketing.
• Consent withdrawal: withdraw consent at any time, without affecting prior processing.
• Complain: you can lodge a complaint with the UK ICO (ico.org.uk) or your local authority.

To exercise your rights, email ozytherionyx@gmail.com. We may need to verify your identity before responding.

11) Children’s Privacy

Our website and services are intended for business users and are not directed to children under 16. We do not knowingly collect data from children. If you believe a child has provided personal data, contact us to remove it.

12) Third-Party Links

Our website may include links to third-party sites. We are not responsible for their content or privacy practices. Please review their policies before providing personal data.

13) Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technologies, or legal requirements. When we make material changes, we will update the “Effective Date” and, where appropriate, notify active clients.