Privacy Policy & Cookie Notice

Last updated: 02 October 2025

This notice explains how OMNIS FOR CONSULTING LTD (“we”, “us”, “our”) processes personal data when you use our website and services. We are the data controller for this processing.

Privacy contact: privacy@omnis-training.com

1) Data we collect

Information you provide

  • Enquiry details submitted via our forms (e.g., name, work email, organisation, role, message content, and any files you choose to upload).

  • Information shared so we can provide a GDPR readiness check, proposal, or services.

  • Your marketing preferences (if you choose to opt in).

Information collected automatically

  • Basic technical information produced by your browser or device (e.g., IP address, device type, pages viewed, timestamps) and security signals used to protect the site from abuse.

Third-party sources

  • If you are referred to us by a partner, we may receive limited business contact details to arrange an introduction.

  • Anti-spam/anti-abuse tools may generate signals that help us determine whether a request is legitimate.

We do not intentionally collect special category data via the website and we do not target children.

2) How and why we use your data (lawful bases)

We process personal data only where we have a lawful basis under UK GDPR:

  • To respond to enquiries and provide proposals
    We use the information you submit to contact you, answer questions, and discuss potential work.
    Lawful basis: Legitimate interests (reasonable B2B communications) and, where you ask us to take steps before entering a contract, Contract.

  • To deliver services and manage our relationship
    This includes providing agreed deliverables, communicating about the engagement, and handling billing.
    Lawful basis: Contract.

  • To operate, secure, and improve our website and services
    We use technical and security data to run the site, detect abuse, and understand aggregate usage so we can improve content and reliability.
    Lawful basis: Legitimate interests (operation, security, service improvement).

  • To send optional updates
    If you choose to receive insights or event information, we use your details to send these communications. You can withdraw at any time.
    Lawful basis: Consent.

  • To meet legal obligations
    We may process data where required by law (for example, record-keeping or responding to lawful requests).
    Lawful basis: Legal obligation.

When we rely on legitimate interests, we consider what data we need, your reasonable expectations, and the impact on your privacy. You can object to processing based on legitimate interests—see Your rights below.

3) Sharing your data

We use carefully selected service providers (processors) to host our systems, manage enquiries, provide secure document storage/e-signature, protect the site from abuse, schedule meetings (if you choose), and support analytics where consented. These providers act on our instructions and are bound by confidentiality and data-protection terms. We do not sell personal data.

4) International transfers

If personal data is processed outside the UK/EEA, we use appropriate safeguards (for example, the UK International Data Transfer Addendum or EU Standard Contractual Clauses), supported by risk assessment and, where appropriate, technical measures such as encryption.

5) Retention

We keep personal data only as long as needed for the purposes above, then delete or anonymise it.

  • Enquiry/contact data: normally up to 12 months from the last interaction unless an engagement follows.

  • Contract and billing records: retained as required by law.

  • Service deliverables and project artefacts: retained for the contract term and a reasonable support/evidence period agreed with you.

  • Security logs: retained for a limited period necessary to investigate and prevent abuse.

  • Marketing preferences: retained until you withdraw consent or we cease campaigns.

6) Your rights

You can access, rectify, erase, restrict, and object to processing of your personal data, and request data portability. Where we rely on consent, you may withdraw it at any time.

To exercise your rights, contact privacy@omnis-training.com. We may ask for information to verify your identity. We aim to respond within one month.

If you are unhappy with our response, you can contact the UK Information Commissioner’s Office (ICO). We encourage you to contact us first so we can help.

We do not use solely automated decisions that produce legal or similarly significant effects.

7) Cookies and similar technologies

We use cookies and similar technologies to operate and secure our website and—where you allow it—to understand how the site is used and to remember your preferences.

  • Essential cookies are necessary for core functions and security and do not require consent.

  • Optional cookies (such as analytics or functional preferences) are used only with your consent.

You will see a cookie banner when you first visit the site. It lets you accept all, reject non-essential, or customise your choices. Your selection will be remembered, and you can change it at any time via Cookie Settings in the footer.

If we introduce new cookie categories or providers in future, we will update this notice and the banner configuration before those cookies are set.

For more information about how we handle personal data in connection with cookies and similar tools, contact privacy@omnis-training.com.

8) Security

We apply administrative, technical, and organisational measures appropriate to the risks, including role-based access, multi-factor authentication for admin systems, encryption in transit (and at rest where supported), vulnerability and patch management, logging/monitoring, and periodic reviews. No system is perfectly secure—please contact us promptly if you suspect unauthorised activity.

9) Marketing

We send optional updates only where permitted and, where required, with your consent. You can unsubscribe at any time using the link in our emails or by contacting us.

10) Changes to this notice

We may update this notice from time to time. The “Last updated” date will change accordingly. Where changes are significant, we will highlight them on this page and, where appropriate, notify you.

11) How to contact us

Privacy enquiries and data-rights requests: privacy@omnis-training.com