Privacy notice

Osiris IT Ltd (“Osiris”, “we”, “us”) is the data controller for personal data collected through this website, through enquiries you make to us, and in the course of the services we provide. We are a company registered in England and Wales, with our registered office in Norwich, United Kingdom.

This notice explains what personal data we collect, why we hold it, who we share it with, how long we keep it, and the rights you have. If you have any questions about it, contact us using the details at the end.

Enquiries and call bookings: your name, email address, phone number where you provide it, and anything you add to your message or booking notes. Call scheduling is handled on our behalf by Calendly LLC.

Client engagements: contact details for the people we work with at your organisation, plus any data shared with us so that we can deliver the service, including access to systems where the engagement requires it.

Website and technical data: IP address, browser and device information, and request metadata captured in standard server and security logs. Where you consent, we also collect analytics data about how you use the site (see Cookies and analytics below).

We do not intentionally collect special category data (such as health or ethnicity) through this website. Please do not include such information in enquiry messages.

To respond to your enquiry and route it to the right consultant, and to take steps at your request before entering a contract. Lawful basis: legitimate interests and, where relevant, steps prior to a contract.

To deliver, manage, and support the services you engage us for. Lawful basis: performance of a contract.

To keep our systems and this website secure and to prevent abuse. Lawful basis: legitimate interests.

To understand and improve how the website is used, through analytics. Lawful basis: your consent, which you give or decline on the cookie banner and can change at any time.

To meet our legal, regulatory, and accounting obligations. Lawful basis: legal obligation.

We do not sell or rent personal data, and we do not use it for third-party advertising.

Essential cookies needed to make the site work do not require consent. Beyond those, with your consent we use Microsoft Clarity to understand how visitors use the site: which pages and links get used, and anonymised session replays, so we can improve it.

These analytics cookies are not set, and no analytics data is sent to Microsoft, until you accept them on the cookie banner. You can change or withdraw your choice at any time using the Cookie settings link in the footer. We do not use cookies for advertising.

We use a small number of trusted service providers who process personal data on our behalf, under contract and only on our instructions. These include Calendly LLC (call scheduling), Microsoft Corporation (Microsoft Clarity analytics, where you consent, and the Microsoft 365 services we run our business on), and Cloudflare, Inc. (website hosting, content delivery, and security).

We may also disclose personal data where we are required to by law, or to establish, exercise, or defend legal claims. We do not otherwise share your data with third parties.

Some of our service providers are based outside the UK, including in the United States. Where personal data is transferred outside the UK, we rely on appropriate safeguards recognised under UK data protection law, such as UK adequacy regulations (including the UK extension to the EU-US Data Privacy Framework) or the International Data Transfer Agreement, together with additional protections where needed.

Enquiry records: up to 24 months from your last contact, unless you ask us to delete them sooner. Engagement records: for the duration of our relationship and for the period after it required by our contractual, legal, and accounting obligations.

Server and security logs: a short technical window, typically 30 to 90 days. Analytics data is retained in line with Microsoft Clarity's own retention settings.

Under UK data protection law you have the right to access the personal data we hold about you, to correct inaccuracies, to ask us to delete it (subject to our retention obligations), to restrict or object to processing, to data portability, and, where processing is based on consent, to withdraw that consent at any time.

To exercise any of these rights, contact us using the details below. We will respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk), though we would welcome the chance to resolve any concern first.

We may update this notice from time to time to reflect changes in how we work or in the law. The date it was last reviewed is shown at the top of this page.

For any privacy question, or to exercise your rights, email hello@osirisit.co.uk or write to the Data Protection lead, Osiris IT Ltd, Norwich, United Kingdom.