Legal

Privacy policy

Last updated: June 2026

This policy explains what personal data Operosus Limited (company number 16186997, "we", "us") collects when you use operosus.com, why we collect it, and the rights you have over it. We are the data controller for the personal data described here.

What we collect

We only collect personal data you give us through the forms on this site: contact, consultation, training, beta waitlist and newsletter forms. Depending on the form, that means:

  • Your name
  • Your email address
  • Your company name and, where you provide it, company or team size
  • Your message, including any details you choose to share about your project
  • Campaign parameters attached to the link you arrived on (UTM parameters and ad click identifiers), which tell us how you found us

We do not require an account, and we do not collect anything beyond what the forms ask for.

How we use it

We use this data to:

  • Reply to your enquiry and have the conversation you asked for
  • Schedule and prepare for consultations or training sessions you request
  • Send you the newsletter, if and only if you subscribed to it
  • Understand which channels bring people to us, using the campaign parameters

Our lawful basis is legitimate interest in responding to enquiries you initiate, and consent for the newsletter. You can unsubscribe from the newsletter at any time using the link in any issue, or by emailing us.

Where it is stored

Form submissions are processed and stored in Supabase, our database provider, which acts as a data processor on our behalf. Data is stored securely and access is limited to people at Operosus who need it to respond to you.

What we do not do

  • We do not sell your data to anyone
  • We do not share your data with third parties for their own marketing
  • We do not add you to mailing lists you did not ask to join

How long we keep it

We keep enquiry data for as long as the conversation, or any resulting work, requires, and review stored data periodically. Newsletter data is kept until you unsubscribe. If you want your data deleted sooner, email us and we will remove it.

Your rights under UK GDPR

You have the right to:

  • Access a copy of the personal data we hold about you
  • Have inaccurate data corrected
  • Have your data deleted
  • Restrict or object to our processing of your data
  • Receive your data in a portable format
  • Withdraw consent at any time, where consent is the basis for processing

To exercise any of these rights, email dc@operosus.com. If you are not happy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk).

Cookies and analytics

This site does not currently use advertising or tracking cookies. If we enable analytics in future, we will use it to understand aggregate site usage, update this policy, and ask for consent where the law requires it.

Changes to this policy

If we change this policy, we will update this page and the date at the top. Significant changes that affect how we use your data will be flagged clearly.

Contact

Operosus Limited, company number 16186997. Questions about this policy or your data: dc@operosus.com.