Last updated: January 2025
This Privacy Policy explains how Openbook Analytics Ltd. ("we", "us", or "our") collects, uses, and protects your personal data when you visit our website, use our services, or interact with us in any capacity. We are committed to protecting your privacy and ensuring your personal data is handled in a transparent, lawful, and secure manner, in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and other relevant legislation.
This Privacy Policy applies to Openbook Analytics Ltd. and all products, services, and platforms offered by us, including but not limited to our website, mobile applications, and any related tools or features.
Our services are intended for users who are at least 18 years old. By using this service, you represent and warrant that you are 18 years of age or older.
We collect and process the following types of personal data about you to provide, improve, and secure our services, as well as to comply with legal obligations:
We do not knowingly collect personal information from individuals under the age of 18.
We collect your personal data when you interact with us through our website, mobile applications, or in person. This data may be collected:
We may collect and use information regarding whether a user has opened an email sent by us, including the recipient's email address, the date and time of email opening, and the device or IP address associated with the action. This information is used solely to improve our communication effectiveness and analyze user engagement.
We process your personal data only for the specific purposes outlined below, and always in compliance with applicable data protection laws:
| Purpose | Description | GDPR Basis |
|---|---|---|
| Service Provision | To provide and manage our services, including account creation, maintenance, and customer support. | Performance of a contract |
| Communication | To contact you about your account, updates, service-related information, and promotional content (where permitted). | Legitimate interests |
| Analytics | To analyze how you interact with our services to improve our offerings, user experience, and operational efficiency. | Legitimate interests |
| Legal Compliance | To comply with legal obligations, such as responding to court orders, law enforcement requests, or other legal requirements. | Legal obligation |
We do not process any special categories of personal data (e.g., racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless explicitly required by law or with your explicit consent.
We may share your personal data with third-party service providers who assist us in operating our services. We only share data with third parties that have agreed to protect your information in accordance with applicable data protection laws.
We do not endorse or guarantee the services, products, or practices of any third-party provider unless explicitly stated in writing. If you are directed to a third-party website via our platform, we are not responsible for the privacy practices of those third parties.
We may transfer your personal data to countries outside of your own. If we do so, we will ensure that appropriate safeguards are in place to protect your personal data, such as adequacy regulations or contractual clauses.
We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it from unauthorized access, disclosure, alteration, or destruction. These measures include encryption, secure access controls, regular system audits, and strict internal policies.
We use trusted third-party service providers:
We will retain your personal data only for as long as is necessary to fulfill the purpose(s) for which it was collected, including legal, accounting, or reporting requirements. Where retention is not required, we will securely delete or anonymize your personal data.
Our security measures include:
In the event of a data breach that affects your personal data, we will notify you without undue delay, typically within 72 hours of becoming aware of the breach. We will also report the breach to the relevant data protection authority as required by GDPR.
Under GDPR, you have the following rights regarding your personal data:
| Right | Description |
|---|---|
| Right to be informed | You have the right to be informed about the collection and use of your personal data. |
| Right to access | You can request a copy of your personal data held by the controller. |
| Right to rectification | You can correct inaccurate or incomplete personal data. |
| Right to erasure | You can request deletion of your personal data under certain conditions. |
| Right to restrict processing | You can limit how your data is used. |
| Right to data portability | You can request your data in a structured format to transfer to another controller. |
| Right to object | You can object to processing your data for direct marketing or other purposes. |
| Rights relating to automated decision-making | You can object to decisions made solely by automated means. |
For the exercise of your rights, you can contact us using the details provided below. For the full text of the GDPR, visit the official ICO website: https://ico.org.uk
This Privacy Policy and any disputes arising from its interpretation or enforcement shall be governed by and construed in accordance with the laws of Scotland. Any legal action or proceeding related to this Privacy Policy shall be exclusively brought in the Courts of Scotland.
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
You may also submit a data subject request by contacting us directly. We will respond to your request within 30 business days. If you believe your data is being processed unlawfully, you may contact the Information Commissioner's Office (ICO).
We may update this Privacy Policy from time to time to reflect changes in our data practices or legal requirements. Any updates will be posted on our website or communicated to you via email. Continued use of our services after such changes constitutes your acceptance of the updated terms.