OUR OPT WEBSITE ENQUIRY PRIVACY NOTICE

OurOpt Ltd is responsible for your enquiry information. Contact our director at
support@ouropt.com with privacy questions, requests or complaints.

We use your name (a preferred name is sufficient), email, selected service and
problem description to assess and respond to your request and prepare requested
work. Without a reply address and sufficient detail we may not be able to help.
This service is intended for adults. Please do not send passwords, access codes,
payment information, identity documents or sensitive personal information.
Attachments are not accepted. An enquiry does not book work or authorise payment.
We do not use these details for marketing, paid AI processing or automatic
customer decisions. Enquiries are reviewed by the director before acceptance.

Where necessary to take steps you request before a possible contract with you
personally, we rely on the contractual-steps basis. For company representatives
and other ordinary enquiries, we rely on our legitimate interests in answering
your request and managing the requested business discussion. We limit the data
and its use and balance these interests against your rights. You can object to
processing based on legitimate interests by contacting us.

Cloudflare supplies hosting, encrypted storage and Turnstile abuse protection.
Your enquiry is sent over an encrypted connection. Cloudflare's intake Worker
processes the submitted fields before encrypting the enquiry for storage. We keep
the private decryption keys locally, but this does not prevent Cloudflare from
processing the initial submission or technical connection information. Encryption
does not make all processing anonymous. Turnstile also processes technical signals as an independent controller
for improving bot detection. Its own processing and rights information is at:
https://www.cloudflare.com/turnstile-privacy-policy/
EU database placement does not guarantee EU-only request or security processing.
Cloudflare, Inc. participates in the UK Extension to the EU-US Data Privacy
Framework for covered transfers. Its DPA also describes contractual transfer
safeguards, including standard contractual clauses with the UK Addendum where
applicable. Information about these safeguards is available at
https://www.cloudflare.com/cloudflare-customer-dpa/ or from support@ouropt.com.

The approved intake retention policy is seven days for hosted encrypted content,
followed by seven further days for hosted notice/deduplication metadata. Local
quarantine content has a 30-day limit from first import. Operational audit rows
(record IDs and event dates, without enquiry text) have a 30-day limit after
verified quarantine exit. Separate restore-protection metadata includes record
IDs, fingerprints and current retention/deletion status needed to prevent an old
backup from reintroducing deleted or expired records. These identifiers may still
be personal data. They are not used for marketing or to recreate enquiry text.
We keep restore-protection metadata only while a backup could restore the related
record, then remove it within 30 days. If backup coverage is unknown, restoration
remains blocked and we review the metadata every 30 days. Existing archives are
preserved pending separate decisions. This is a separate retention clock from
the operational audit limit; that deadline does not erase all identifying metadata.
Future local encrypted enquiry backups have a maximum 30-day recovery window.
Provider recovery history is separate: deleted D1 rows may remain recoverable
within the Free-plan Time Travel window. Our limits do not set Cloudflare's
independent security-signal retention. Restore procedures must reapply expiry and
deletion decisions before restored records are used.

Only necessary information for accepted work will move into separate job records,
after their retention policy is approved and the transfer authorised. Their
retention will be explained separately. Legal/review holds must be justified and
reviewed; they are not permission for indefinite routine retention.

You may request access, correction, deletion or restriction and, where applicable,
portability. Rights depend on the circumstances and processing basis. Contact
support@ouropt.com; the director handles requests and complaints. You may also
complain to the Information Commissioner's Office: https://ico.org.uk/make-a-complaint/