Legal
Privacy & Cookies
What happens to your personal data when you visit this website or get in touch with us.
1Who we are
OE Services Ltd is a company registered in England and Wales, number 5113216, with its registered office at Studio 21, Sum Studios, 1 Hartley Street, Sheffield S2 3AQ.
We are the data controller for personal data collected through this website. We are registered with the Information Commissioner's Office under number ZA119678. For anything to do with your data, email privacy@oe-services.com.
2What this policy covers
This policy is about this website. It explains what we collect when you browse it or contact us, and what we do with that.
It does not cover the management systems we host for clients. If you use one of our systems through your employer, the records in it belong to your employer, who decides how they are used. Please ask them about your data. If you ask us, we will pass your request to them and tell you we have done so.
We follow the UK GDPR and the Data Protection Act 2018, and the EU GDPR where it applies to visitors in the European Economic Area.
3What we collect, and why
| What | When | Why, and our lawful basis |
|---|---|---|
| Your IP address, browser and device type, the pages you view and the time | Every visit | To serve the site and keep it secure — our legitimate interests |
| Your name, company, email, telephone, number of sites, product of interest and your message | When you use our contact form, email or call us | To reply and arrange a demonstration — steps taken at your request before a contract, and our legitimate interests in answering business enquiries |
| Your name, company and email | If we send you information about our systems | Marketing — our legitimate interests, and your consent where the law requires it. You can stop it at any time |
The website itself keeps no database of visitors or enquiries. When you send us a message, the details are emailed straight to us and from that point they sit in our email system.
We do not ask for, and this website does not collect, information about health, race, religion, politics or anything else that counts as special category data.
4Cookies
A cookie is a small file placed on your device when you visit a website.
This website does not set any cookies. We use no analytics, advertising or tracking cookies, and we do not profile visitors. There is nothing for you to accept or refuse, which is why you are not asked about cookies when you arrive.
Our host keeps short-term server logs, described in sections 3 and 7, but those do not involve cookies or browser storage.
5Who we share it with
We do not sell your data, and we do not share it for anyone else's marketing. We share it only with:
- Vercel, which hosts this website, serves the pages and keeps short-term server logs;
- Resend, which sends your enquiry from the website to us;
- Zoho Mail, which stores your enquiry in our mailbox;
- our professional advisers, where they need it; and
- law enforcement, regulators or courts, where we are legally required to.
Each of these acts under a written contract that requires them to keep your data secure and use it only as we instruct.
6Where your data is stored
This website does not store your data. It has no database of visitors or enquiries — when you contact us your message is emailed to us, and from then on it sits in our email system.
We host this site with Vercel and send enquiry emails using Resend, both configured to use the European Economic Area. Our mailbox is provided by Zoho Mail, on its European data centre. Your personal data is processed in the UK and the EEA.
Vercel and Resend are United States companies. Where that means personal data could be accessed from outside the UK or the EEA, we rely on the safeguards the law allows — the EU Standard Contractual Clauses and the ICO's UK Addendum. Ask us if you want the details.
7How long we keep it
| What | Kept for |
|---|---|
| Enquiries that do not lead to anything | 24 months from our last contact |
| Enquiries that become business | For as long as we work together, then as set out in our contract with you |
| Server and security logs | 30 days |
| Marketing contacts | Until you unsubscribe or object |
| A record that you asked not to be contacted | Indefinitely, so we can honour it |
8How we protect it
This site is served over an encrypted connection, access to enquiry data is limited to the people who need it, and our staff are bound by confidentiality. No website can be guaranteed completely secure, but if a breach occurred that put your rights at risk we would report it to the ICO within 72 hours and tell you where the law requires.
9Your rights
You have the right to ask us to:
- give you a copy of the personal data we hold about you;
- correct it, if it is wrong or incomplete;
- delete it, in certain circumstances;
- stop or limit what we do with it;
- send you, or someone else, a copy in a portable format; or
- stop using it — including for marketing, which you can stop at any time, for any reason.
Where we rely on your consent, you can withdraw it whenever you like. Email privacy@oe-services.com and we will reply within one month. It costs nothing, though we may ask you to confirm who you are first.
10Links to other sites
This site links elsewhere, including to our client portal at risk-mngr.ai and to guidance published by the Health and Safety Executive. We are not responsible for how other sites handle your data, so do read their policies.
11Changes to this policy
We review this policy at least once a year, and whenever we change how we handle personal data. The version and date at the top show when it last changed.
12Contact and complaints
If you have a question, or you are unhappy with how we have handled your data, please tell us first — we would rather put it right.
- privacy@oe-services.com
- Telephone
- +44 20 8720 7015
- Post
- Data Protection, OE Services Ltd
Studio 21, Sum Studios, 1 Hartley Street
Sheffield S2 3AQ, United Kingdom
You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113, without contacting us first. If you are in the EEA, you may complain instead to the data protection authority where you live or work — the European Data Protection Board lists them all.