Privacy Policy

This website is hosted on infrastructure provided by OVHcloud.

When you visit the website, technical information required to deliver and secure it may be processed. This may include your IP address, the date and time of access, the requested page, browser information, and technical status information.

The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest is providing a secure, reliable, and technically functional website.

Server access logs (including visitor IP addresses) are automatically retained for a fixed period of 12 months by our hosting provider OVHcloud. These logs are stored strictly for security and operational purposes and may be kept for a longer period only where required to investigate security incidents or comply with legal obligations.

OVHcloud processes hosting data on our behalf. The website is hosted within the European Union.

Further information is available in OVHcloud's Privacy Policy.

We use Plausible Analytics to understand general website usage and improve the content and performance of the website.

Plausible Analytics is provided by Plausible Insights OÜ, Estonia.

Plausible is configured without cookies, browser storage, advertising identifiers, or persistent visitor identifiers. It does not track visitors across different websites or create individual visitor profiles.

Plausible processes limited information such as:

• the page visited
• the referring website
• campaign parameters contained in links
• browser and operating system type
• device type
• approximate location
• interactions with selected links

Plausible uses the visitor's IP address and browser information in memory only, to determine approximate location and device type and to generate a daily hash used to count unique visitors without cookies or persistent identifiers. Plausible states that raw IP addresses and full browser strings are never written to disk, databases, or logs.

The cryptographic salt used to generate the daily hash is deleted and rotated every 24 hours, after which the link between the data and an individual visitor cannot be reconstructed. Beyond that period, only aggregated statistics remain, which do not relate to an identifiable person.

Analytics information is processed and stored within the European Union.

To the extent that the analytics processing involves personal data, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is understanding how the website is used, assessing the effectiveness of our communications, and improving the website.

We do not send names, email addresses, message contents, booking information, or other directly identifying information to Plausible.

Further information is available in Plausible's Data Policy.

We do not use analytics cookies, advertising cookies, tracking pixels, session recording, or behavioural advertising on this website.

Plausible Analytics operates without cookies or persistent identifiers.

The website contains external links to Cal.com. Cal.com is not embedded into the website and does not receive information merely because its link is displayed. Cal.com may use cookies or similar technologies after you choose to visit its website.

The website contains links that allow you to contact us by email.

Clicking an email link may open your email application. Personal data is transmitted to us only when you choose to send an email.

When you contact us, we process the information contained in your message, including your email address, name, organisation, message content, and any information or attachments you voluntarily provide.

We use this information to respond to your enquiry, communicate with you, and assess or develop a potential business relationship.

Where your communication concerns a potential or existing contract, the legal basis is Article 6(1)(b) GDPR.

For general business communications, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is responding to enquiries and maintaining professional business relationships.

Our email service is provided through Microsoft Outlook and Microsoft 365, provided by Microsoft and its affiliates.

Microsoft may process email information on our behalf when providing the email service. Further information is available in Microsoft's Privacy Statement.

Where no business relationship is established, we generally retain enquiries for up to 12 months after the last substantive communication. Information may be retained for longer where required by law or where necessary to establish, exercise, or defend legal claims.

Providing personal data is not required by law or contract. You are free to contact us or not. If you choose not to provide the information necessary to respond, we may be unable to answer your enquiry.

The website contains external links to a scheduling page provided by:

Cal.com is not embedded into the OpsThread website. When you select a Cal.com link, you leave this website and access a service operated by Cal.com.

When you schedule a meeting, Cal.com may collect information such as your name, email address, selected appointment time, time zone, organisation, and any other information you provide during the booking process.

We receive the information needed to arrange and conduct the meeting.

We process this information to manage the appointment, prepare for the conversation, respond to your enquiry, and assess or develop a potential business relationship.

Where the meeting relates to a potential or existing contract, the legal basis is Article 6(1)(b) GDPR.

In other cases, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is organising business meetings and responding to enquiries.

Cal.com is based in the United States and states that information may be transferred to and processed in the United States. Its own Privacy Policy applies to its processing of booking and website data.

You are not required to use Cal.com. You may contact us directly by email to arrange a meeting.

We generally retain meeting information for up to 12 months after the last substantive communication where no business relationship is established. Longer retention may apply where required by law or where a continuing business relationship exists.

We disclose personal data only where necessary for the purposes described in this Privacy Policy.

Potential recipients include:

• OVHcloud, as the website hosting provider
• Plausible Insights OÜ, as the analytics provider
• Microsoft, as the email service provider
• Cal.com, as the scheduling provider
• professional advisers where necessary
• public authorities where disclosure is legally required

Some service providers may process information outside the European Economic Area, particularly in the United States.

Where personal data is transferred outside the European Economic Area, the transfer is based on an applicable adequacy decision, the EU-US Data Privacy Framework, the European Commission's Standard Contractual Clauses, or another legally recognised safeguard.

A copy of the relevant safeguards can be obtained by contacting us at privacy@opsthread.com.

We do not sell personal data and do not use personal data collected through the website for behavioural advertising.

We do not use automated decision-making producing legal effects concerning you or similarly significantly affecting you, and we do not carry out profiling.

Where we process personal data on the basis of Article 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to that processing. Where personal data is processed for direct marketing purposes, you have the right to object at any time without giving reasons. If you object to direct marketing, we will no longer process your personal data for those purposes. To object, contact privacy@opsthread.com.

Subject to the requirements and limitations of applicable law, you have the right to:

• request access to your personal data
• request correction of inaccurate information
• request deletion of your personal data
• request restriction of processing
• object to processing based on legitimate interests
• receive certain data in a portable format
• withdraw consent where processing is based on consent

You also have the right to lodge a complaint with a competent data protection supervisory authority, particularly in the country of your residence, place of work, or the place of the alleged infringement.

To exercise your rights, contact: privacy@opsthread.com

We may update this Privacy Policy if our website, service providers, or data processing activities change.

The current version will always be available on this page. The date at the top indicates when the Privacy Policy was last updated.