Privacy Policy
1. Who we are
Opsemble Ltd (company number 17387116, registered office 27 Garratt Way, Thorne, Doncaster, DN8 5EW) operates OpSemble. For data protection queries contact support@opsemble.co.uk. Our ICO registration number will be shown here once issued.
2. The two roles we play
As a controller, we handle personal data about visitors to this website, people who submit an order or enquiry, and our business contacts at customer companies (names, work emails, correspondence, billing records).
As a processor, we host the data our customers put into the OpSemble platform — for example their CRM contacts, employee records, incident reports and invoices. The customer company is the controller of that data; our processing of it is governed by our Data Processing Agreement, and requests about it should go to the relevant company. This policy's sections 3–5 cover the data we control ourselves.
3. What we collect and why (as controller)
| Data | Purpose | Lawful basis |
|---|---|---|
| Order / enquiry details (name, work email, company, phone, chosen modules and seat numbers) | Responding, product updates you've asked for | Legitimate interests / consent |
| Account and billing records for customers | Providing and charging for the Service | Contract |
| Platform account details of Users (username, email, login and audit events) | Authentication, security, audit trail | Contract / legitimate interests (security) |
| Website analytics (pages viewed, referring site, approximate location from IP, browser and device, and a recording of how you scroll and click on a page) | Seeing which pages are useful and where visitors get stuck, so we can improve the site | Consent — nothing is collected unless you accept analytics cookies |
| Support correspondence | Resolving issues | Contract / legitimate interests |
4. Sharing and international transfers
We use the service providers listed in our subprocessor list (hosting on Microsoft Azure (database in the UK South region; application and file storage in the West Europe (EU) region), email delivery via Azure Communication Services, AI processing by Anthropic, content delivery by Cloudflare, and payments by Stripe/GoCardless when live). If you accept analytics cookies on this website, Google (Google Analytics) and Microsoft (Clarity) also receive website usage data. Where a provider processes data outside the UK, we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum with that provider; Google and Microsoft transfer to the United States under the UK Extension to the EU–US Data Privacy Framework. We do not sell personal data.
5. Retention
Order and enquiry data is kept until you ask us to remove it or after 12 months of inactivity. Customer account and billing records are kept for the subscription term plus the periods required by tax law (typically 6 years). Platform data belonging to customers is retained per the DPA and deleted after termination per the Terms. Website analytics data is kept for up to 14 months in Google Analytics, and Microsoft Clarity deletes its recordings after 30 days.
6. Your rights
Under UK GDPR you can request access, correction, deletion, restriction, portability and object to certain processing, and withdraw consent where consent is the basis. Contact support@opsemble.co.uk. You can complain to the Information Commissioner's Office (ico.org.uk). If your data lives inside a customer's OpSemble tenant, contact that company — the platform gives them DSAR export and erasure tools to respond.
7. Cookies and similar technologies
The OpSemble application uses only strictly-necessary storage (session tokens and preferences) to sign you in and run the app; these do not require consent.
This marketing website asks before setting anything that is not strictly necessary. Analytics and marketing scripts are not loaded at all until you accept them, and you can change or withdraw your choice at any time from the cookie settings link in the footer of every page. Declining costs you nothing — the site works exactly the same either way.
| Category | What it does | Set by | Consent |
|---|---|---|---|
| Strictly necessary | Remembers your cookie choice, in your browser's local storage. It is never sent to us or anyone else. | OpSemble | Not required |
| Analytics | Google Analytics 4 counts visits, pages viewed and referring sites. Microsoft Clarity records how you scroll and click so we can see where the site is confusing; it masks the text you type by default. | Google, Microsoft | Required — off unless you accept |
| Marketing | Would let advertising services tell whether an ad brought you here. We run no advertising at present, so nothing is currently set in this category. | — | Required — off unless you accept |
We use Google Consent Mode, so Google's tags are told your choice before they run. If you decline, no analytics or advertising identifiers are stored on your device. Blocking cookies in your browser settings has the same effect.
8. Security
Data is encrypted in transit, hosted on Microsoft Azure, isolated per tenant with fail-closed access controls, protected by role-based permissions and optional enforced two-factor authentication, and every sign-in and data change is written to a tamper-evident audit log. Details are in the DPA security annex.
9. Changes
We will post updates here and, for material changes affecting platform users, notify in-app or by email.