Who we are
OVRILO LIMITED is responsible for the personal information we use to run this company website and handle enquiries. In data-protection law, this makes us a controller.
We are registered in England and Wales under company number 17481690. Our registered office is 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. Contact us at hello@ovrilo.com.
This notice covers ovrilo.com and enquiries sent to Ovrilo. It does not cover personal information processed within StyleXLister, Companion or another website you visit through a link. Check the privacy information supplied for the relevant service before using it.
Information we use
- When you contact us: your name, email address, business or role, and any other contact details, message content or attachments you choose to send.
- When you visit: our hosting and security providers process technical information such as your IP address, browser and device information, requested pages, request times, referring page where supplied, and security or cookie identifiers.
Our enquiry links open your own email application. This website has no enquiry form, account registration or payment collection. Providing enquiry information is voluntary, but we need enough information to understand your request and reply. Please only send information relevant to your enquiry.
Why we use it
- Answering enquiries and discussing work
- We use contact and message details to reply, prepare proposals and manage business conversations. Our lawful basis is our legitimate interest in communicating with people who contact us and developing our business. If you are personally considering a contract with us, we may instead need the information to take steps at your request before entering that contract.
- Running and protecting the website
- Technical information helps deliver pages, diagnose faults, prevent abuse and keep the site available. Our lawful basis is our legitimate interest in providing a secure, reliable website.
- Legal obligations and disputes
- We may retain or disclose relevant information to meet a legal obligation, such as responding to a valid statutory request. Where necessary to establish, exercise or defend legal claims, we rely on our legitimate interest in protecting our legal position.
Sending an enquiry does not sign you up to a marketing mailing list. We do not sell enquiry information or use this website to make automated decisions that have legal or similarly significant effects on you.
Service providers and international transfers
We use website hosting, security and email providers to operate our website and handle enquiries. These providers process the information needed to deliver and protect their services; email delivery can include automated spam and malware checks.
Relevant information may also be available to authorised people handling your enquiry, professional advisers where needed, and authorities where disclosure is required by law. Providers may process some information for their own security or legal purposes, as explained in their privacy information.
Providers operate internationally, so information may be processed outside the UK, including in the United States. Their published privacy and data-processing terms explain the transfer arrangements they use, including adequacy frameworks or contractual safeguards where applicable. You can contact us for more information about the arrangements relevant to your information and how to obtain a copy of applicable safeguards.
How long we keep information
The retention period depends on why the information is needed:
- Enquiries: for the time needed to answer your request and complete any related discussion or agreed follow-up. Whether a conversation is still active, becomes a client relationship or involves an unresolved complaint determines whether it needs to be kept.
- Business and legal records: relevant correspondence may need to be kept for applicable accounting, tax or other legal requirements, or while a dispute or legal claim can reasonably arise or remains unresolved.
- Technical records: hosting and security logs follow the relevant provider’s service settings and retention arrangements. Cookie lifetime is separate from log retention; the known security-cookie lifetime is described above.
We keep personal information only while there is a continuing purpose or legal requirement for retaining it, using the criteria above. Contact us if you want to know the retention period applicable to a particular enquiry or to request deletion.
Your rights and how to contact us
Depending on the circumstances, you can ask to access your personal information, correct inaccuracies, have it deleted, restrict its use or receive a portable copy. You can object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing.
To ask a question, make a request or raise a privacy concern, email hello@ovrilo.com or write to our registered office above. We may need information to confirm your identity and understand your request. We normally respond within one month, subject to the extensions and exceptions allowed by law.
You can also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint. You do not have to contact us first, although we welcome the chance to address your concern.
Changes to this notice
We will update this page when the website or our handling of enquiries changes. The date at the top shows the latest version. Where required, we will also tell you directly about significant changes affecting your information.