Legal
Privacy Policy
1. Who we are
This website (opsuro.co.uk and opsuro.com) is operated by [Opsuro Compliance Systems Ltd], a company registered in England and Wales under company number [00000000], with its registered office at Orebank House, Bigrigg, Egremont, Cumbria, CA22TE
We are the data controller for personal data collected through this website. Our data protection contact is Dan Cassidy, reachable at dan@opsuro.co.uk. This policy applies to visitors of this website and to people who enquire about our services. Personal data we process on behalf of our clients inside their compliance systems (for example, operator names and check completions) is governed by the Data Processing Agreement within our Master Service Agreement, not by this policy. When you submit the demo, pilot or proposal form we collect: full name, work email address, phone number, company or site name, your industry sector, the approximate size of your operator and engineering team, what you are interested in, and whether you asked for the sample Executive Compliance Pack. If you email us directly we hold the content of that correspondence and any attachments. Our hosting provider (Cloudflare) records standard server logs including IP address, browser type, requested pages and timestamps for security and performance purposes. If we enable bot protection (Cloudflare Turnstile) on the form, it analyses browser signals to distinguish people from automated traffic. We do not use advertising trackers. We do not sell personal data and we do not use it for automated decision-making that produces legal or similarly significant effects. We use a small number of service providers who process data on our instructions under written terms: We may also disclose data where required by law, to our professional advisers, or to a successor if the business is sold or restructured. Some of the providers above are based in, or store data in, the United States. Where personal data leaves the UK we rely on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or on the UK–US Data Bridge where the provider is certified. Under UK GDPR you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to processing (including objecting to direct marketing at any time), and to data portability where applicable. To exercise any of these, email dan@opsuro.co.uk. We will respond within one month. This website sets no marketing or analytics cookies. Cloudflare may set a strictly necessary cookie (for example The website is served over HTTPS only. Form submissions are transmitted encrypted and held in access-controlled mailboxes. We apply the same engineering sign-off and change-control discipline to our own systems as we do to client deployments. No method of transmission is entirely secure, and we cannot guarantee absolute security. Questions about this policy: dan@opsuro.co.uk, or write to us at the registered address in section 1. If you are unhappy with how we have handled your data you have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We would appreciate the chance to resolve the matter first. We may update this policy from time to time. The date at the top shows when it was last revised.2. Data we collect
Data you give us
Data collected automatically
3. Why we use it and our lawful basis
Purpose Data used Lawful basis (UK GDPR Art. 6) Responding to your enquiry, booking a demo, scoping a pilot or proposal Form submissions, correspondence Steps at your request prior to entering a contract (6(1)(b)); legitimate interests in responding to B2B enquiries (6(1)(f)) Sending the sample Executive Compliance Pack you requested Work email Your request (6(1)(b)) / legitimate interests (6(1)(f)) Occasional follow-up about Opsuro services relevant to your sector Work email, sector Legitimate interests in B2B marketing (6(1)(f)); you can opt out at any time Keeping the website secure and available Server logs, Turnstile signals Legitimate interests (6(1)(f)) Meeting legal, accounting and regulatory obligations Correspondence, contract records Legal obligation (6(1)(c)) 4. Who we share it with
5. International transfers
6. How long we keep it
7. Your rights
8. Cookies and tracking
__cf_bm or cf_clearance) to protect the site from abuse; these do not require consent. 9. Security
10. Contact and complaints