Privacy notice
This notice explains how Ottomo collects and uses personal data, where it comes from, and the rights you have. It applies to people at businesses we contact about our services, people who contact us, and visitors to this website.
Who we are
Ottomo is a trading name of a sole trader business in the United Kingdom. The sole trader who runs Ottomo is the controller of the personal data described in this notice.
For any question about this notice or your data, email [email protected]. We have not appointed a data protection officer, as we are not required to.
Your right to object. You can object at any time to our use of your details for direct marketing. Reply “no thanks” to any of our emails, or email [email protected], and we will stop contacting you. You do not need to give a reason.
Businesses we contact about our services
We send a small number of introductory emails to UK limited companies and limited liability partnerships that we believe may benefit from our services. We do not send unsolicited marketing emails to sole traders or ordinary partnerships.
- What we hold: the business name, business email address, business telephone number, business address and website, and, where they are published, the names and roles of the business’s directors or contacts. We also keep a record of the emails we have sent and any reply.
- Where it comes from: publicly accessible sources only: the business’s own website, public business and trade directories, and the Companies House register, which we use to confirm that a business is a limited company. We do not buy contact lists.
- Why, and our lawful basis: to introduce our services and, if you reply, to continue the conversation. Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)). Our interest is in telling businesses about a service that is relevant to their work. We keep this proportionate: we use business contact details only, send a short sequence of no more than four emails, and stop as soon as anyone asks.
If you contact us
If you email us, we keep your name, email address, any telephone number you give us and the content of your message, so that we can reply and, if you wish, discuss our services with you. Our lawful basis is legitimate interests, or taking steps at your request before entering into a contract (Article 6(1)(b)).
Our clients’ customers
When we run automated messages for a client business, we handle its customers’ details on that business’s instructions, as its processor. The client business is responsible for that data, and its own privacy notice applies.
Visitors to this website
This website does not use cookies, analytics or any other tracking, and it does not load content from other websites. Our hosting provider processes technical information such as your IP address in order to deliver the pages and protect the site against misuse.
Who we share it with
We do not sell personal data or share it for others’ marketing. It is held by service providers who act on our behalf, such as our email provider, our website host and the software we use to keep our records. We may disclose data where the law requires it.
Some of these providers are based in, or use servers in, other countries, including the United States. Where personal data is transferred outside the UK, the transfer is covered by UK adequacy regulations or by appropriate safeguards, such as the UK International Data Transfer Addendum. You can email us for more information.
How long we keep it
- Businesses we contact: we keep your details while our introductory emails to your business are in progress, and delete them once our outreach has ended unless you have replied and asked us to keep in touch.
- Opt-out records: if you ask us not to contact you, we keep only the business name and email address on a suppression list, for as long as we carry out outreach, so that we do not contact you again by mistake.
- Enquiries: for as long as needed to deal with your enquiry and any discussion that follows.
- Clients: for the length of the contract and afterwards for as long as tax and accounting law requires.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct or complete it;
- ask us to delete it, or to restrict how we use it;
- object to our use of it, including for direct marketing (see above);
- ask for data you have given us to be transferred to you or to another organisation, where this applies.
To make a request, email [email protected]. We will respond within one month. We do not make decisions about you using only automated processing.
Complaints
If you are unhappy with how we have handled your data, please email [email protected] first. We will acknowledge your complaint within 30 days and tell you the outcome without undue delay.
You also have the right to complain to the UK regulator, the Information Commission (which continues to use the ICO name), at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this notice
We will update this notice when our practices change. The date at the top shows when it was last revised.