Privacy Policy for OBN Digital Solutions

1. Introduction

Welcome to OBN Digital Solutions ("we," "us," or "our"). We are committed to protecting and respecting your privacy. This policy explains what personal data we collect from you, or that you provide to us, how it will be processed by us, and your rights in relation to your personal data.

This policy applies to our website and its services (the "Services"). By using our Services, you are accepting the practices described in this policy. Please read this policy carefully to understand our views and practices regarding your personal data and how we will treat it.

For the purpose of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is OBN Digital Solutions Ltd., a company registered in the United Kingdom.

2. What Information We Collect About You

We may collect and process the following data about you:

a) Information You Give Us:

This is information about you that you give us by filling in forms on our site or by corresponding with us by phone, e-mail or otherwise.

Marketing Communications: If you choose to opt-in to our marketing mailing list, we will collect your email address.

b) Information We Collect Automatically:

When you visit our website, we automatically collect certain information about your device and your usage of our website.

Website Analytics: We use Google Analytics to collect information about your interaction with our website. This includes your IP address, geographical location, browser type, referral source, length of visit, pages viewed, and number of page views. This data is aggregated and anonymised, meaning we cannot use it to identify you personally.

3. How We Use Your Information

We use the information we collect in the following ways:

• To Send Marketing Communications: Where you have provided your explicit consent, we will use your email address to send you marketing materials, newsletters, and information about our products and services that may be of interest to you.
• To Improve Our Website: The data from Google Analytics helps us understand how visitors use our website. We use this information to improve the user experience, optimise our content, and analyse the performance of our website.
• To Provide Services: If you interact with certain features on our website, we may need to process your data to deliver that service.

4. Our Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for processing your personal data. The legal bases we rely on are:

• Consent: We rely on your explicit consent to process your email address for direct marketing purposes. You have the right to withdraw this consent at any time by clicking the "unsubscribe" link in our emails or by contacting us directly.
• Legitimate Interests: We rely on our legitimate interests to process data for website analytics. Our legitimate interest is in maintaining and improving our website and services for the benefit of our users. We ensure that our interests do not override your rights and freedoms.

5. Data Sharing and Third Parties

We do not sell your personal data to third parties. However, we may share your data with trusted third-party service providers who assist us in operating our website and conducting our business.

• Google Analytics: As mentioned, we use Google Analytics to analyse website traffic. Google may use the data collected to contextualise and personalise the ads of its own advertising network. Google's privacy policy can be viewed here: https://policies.google.com/privacy.
• ElevenLabs: Some of our services may utilise technology from ElevenLabs Inc. (e.g., for text-to-speech functionalities). If you use a feature powered by ElevenLabs, data you provide (such as text prompts) may be processed on their servers to provide the service. We have a data processing agreement in place with them to ensure your data is handled securely. You can view their privacy policy here: https://elevenlabs.io/privacy.
• Other Service Providers: We may also share data with other service providers, such as email marketing platforms, who process data on our behalf. We have contracts in place with these providers to ensure they protect your data.

6. International Data Transfers

Some of our third-party service providers (like Google and ElevenLabs) are based outside the United Kingdom and the European Economic Area (EEA). When we transfer your data to these providers, we ensure that appropriate safeguards are in place to protect your personal data to the standard required by UK law. These safeguards may include:

• The country to which we send the data is approved by the UK Government as having adequate data protection laws.
• We use Standard Contractual Clauses (SCCs) approved by the UK's Information Commissioner's Office (ICO), which contractually oblige the recipient to protect your data to UK standards.

7. Data Security

We have implemented appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We limit access to your personal data to those employees and third parties who have a business need to know.

8. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• For marketing purposes, we will retain your email address as long as you remain subscribed to our mailing list. If you unsubscribe, we will delete your data within a reasonable period.
• For analytics data, Google Analytics retains data for a set period, after which it is deleted.

9. Your Data Protection Rights

Under UK data protection law, you have rights including:

• Your right of access - You have the right to ask us for copies of your personal information.
• Your right to rectification - You have the right to ask us to rectify information you think is inaccurate.
• Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
• Your right to restriction of processing - You have the right to ask us to restrict the processing of your information in certain circumstances.
• Your right to object to processing - You have the right to object to the processing of your personal data in certain circumstances.
• Your right to data portability - You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.

To exercise any of these rights, please contact us at privacy@obndigital.co.uk.

10. Cookies

Our website uses cookies to distinguish you from other users. A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer. We use analytical/performance cookies from Google Analytics to recognise and count the number of visitors and to see how visitors move around our website.

11. Changes to Our Privacy Policy

We may update this privacy policy from time to time. Any changes we make will be posted on this page, and, where appropriate, we may notify you by e-mail. Please check back frequently to see any updates or changes.

12. How to Complain

If you have any concerns about our use of your personal information, you can make a complaint to us at privacy@obndigital.co.uk.

You can also complain to the ICO if you are unhappy with how we have used your data.