Privacy Policy

1. Introduction

Welcome to Ombiy ("we," "us," "our"). We are committed to protecting and respecting your privacy when you use our website at https://www.ombiy.com/ (the "Site"), services, products, and any related interactions (collectively, the "Services").

This Privacy Policy explains:

• What personal data we collect,
• How and why we use it,
• With whom we share it,
• Your rights and choices regarding your personal data.

This policy is provided for your information. It describes how we handle personal data — it is not a contract you are asked to agree to, and where the law requires your consent we will ask for it separately.

2. Who We Are

Ombiy is operated by Ombiy Limited, a company incorporated in England & Wales (Company No. 11897938).

Ombiy Limited is the data controller for the personal data described in this policy. For any data protection question, or to exercise the rights set out in section 10, contact us at hello@ombiy.com.

3. Information We Collect

We may collect personal data that you provide directly or that is generated automatically when you interact with our Site or Services.

Personal Data You Provide

Examples include:

• Name, job title, and company name
• Email address and phone number
• Anything you choose to tell us when booking a call or getting in touch

The Site itself contains no forms and collects nothing from you directly. This data reaches us only when you:

• Email us at hello@ombiy.com
• Book a demo or call through our scheduling provider, Calendly, which collects your details on its own site
• Opt in to receive updates or marketing from us

Technical Data

The Site is a set of static pages hosted on AWS Amplify. As with any website, our hosting provider records standard server logs when a page is requested, which include:

• IP address and browser or device information,
• The page requested, and the date and time of the request.

These logs exist to deliver the Site, keep it secure, and diagnose faults. They are held by our hosting provider and are not combined with any other data to build a profile of you.

We do not run analytics or tracking on the Site. We do not measure which pages you visit, how long you spend on them, or what you click, and we do not set cookies. See our Cookie Policy for the full detail.

4. How We Use Your Data

We use your personal data for purposes such as:

Providing Services & Support

• Responding to your inquiries and requests
• Managing accounts and access
• Delivering demos, updates, and product communications

Operational Purposes

• Improving our Site and Services
• Keeping the Site available and secure, and diagnosing faults

Marketing (with consent where required)

• Sending newsletters or promotional messages
• Where you have opted in to receive them

Legal Compliance

• Complying with applicable laws and regulations

5. Legal Bases for Processing (UK GDPR)

We process your personal data based on one or more of the following:

• Contractual necessity: To perform services you request.
• Legitimate interests: To improve services and protect our systems.
• Consent: Where you have agreed (e.g., newsletters).
• Legal obligation: To comply with applicable law.

6. Cookies and Tracking Technologies

We do not set cookies on this Site and we do not use analytics, advertising or social media tracking technologies.

Third-party cookies can only be set if you take a deliberate action that loads a third-party service — pressing play on an embedded video, or following a link to book a call through Calendly. Embedded videos are not loaded until you press play.

Our Cookie Policy sets out each of these cases in full. You can also control or disable cookies through your browser settings.

7. Sharing and Disclosure

We may share your data with:

Service Providers

Third-party partners who help us operate the Site and respond to you — currently our hosting provider (AWS Amplify), our scheduling provider (Calendly), and our email provider. We do not share your data with analytics or advertising providers, because we do not use any.

Legal Requirements

If required by law, court order, or government authority.

Business Transfers

If Ombiy undergoes a merger, acquisition, or sale of assets, personal data may be transferred.

We do not sell your personal data.

8. Data Security

We implement technical and organisational measures to protect personal data from unauthorised access, disclosure, or alteration.

Ombiy operates an Information Security Management System (ISMS) that is certified to ISO/IEC 27001, providing independent assurance of the controls we apply to information security.

However, no internet transmission is 100% secure, and we cannot guarantee absolute protection.

9. Data Retention

We retain your data only as long as necessary:

• To provide services,
• To comply with legal obligations,
• For legitimate business purposes.

Retention periods depend on the type of data and how it was collected.

10. Your Rights

Depending on applicable law, you may have rights including:

• Accessing the personal data we hold,
• Correcting inaccurate data,
• Requesting deletion,
• Restricting processing,
• Objecting to processing,
• Withdrawing consent (where applicable).

To exercise your rights, please contact us using the details below.

11. International Transfers

If personal data is transferred outside the UK/EEA, we will ensure appropriate safeguards are in place.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top will reflect changes.

We encourage you to review this page from time to time. If we ever begin processing your data in a way that requires your consent, we will ask for it before we start rather than relying on your continued use of the Site.

13. Contact Us

For privacy questions or to exercise your rights:

Email: hello@ombiy.com