Privacy Policy

This policy explains how Omegaswift handles personal information collected through this website, through the forms and email addresses published on it, and through the ordinary course of providing our services.

It applies to visitors to the site, to people who contact us about our services, and to the named contacts at client organisations we work with. Where we process information on behalf of a client as part of a service, that processing is governed by our agreement with that client rather than by this page, and the client remains responsible for it.

Most of the personal information we hold is information somebody chose to send us. That includes what you type into a contact or consultation form, what you write in an email, and what you tell us during a call or a meeting.

Typically this is limited to the details needed to reply and to understand the request:

Like almost every website, this one records some technical information when a page is requested. That includes the internet protocol address the request came from, the type of browser and device, the page requested, the page that referred you, and the date and time.

This information is used to keep the site available and secure, to diagnose faults, and to understand in aggregate which pages are useful. We do not use it to try to identify individual visitors, and we do not build advertising profiles from it.

We use personal information for a small number of clearly defined purposes, and we do not use it for anything else without asking first.

If you ask us to, or where we are otherwise permitted to, we may send occasional email about our services, articles or events. Every such message carries a way to unsubscribe, and unsubscribing takes effect for future marketing without affecting messages we need to send about work in progress.

We do not sell personal information, and we do not share it with third parties for their own marketing.

Cookies are small files a site can store in your browser. This site uses them sparingly, and only in two categories. Strictly necessary cookies make the site work, remember a choice you have made, and help protect forms against abuse. Analytics cookies, where they are in use, tell us in aggregate how the site is being used so that we can improve it.

You can refuse or delete cookies through your browser settings, and most browsers let you block them by site. Blocking strictly necessary cookies may stop parts of the site working as intended. Where analytics are used, they are configured to collect no more than is needed to answer questions about page usage.

We use a small number of established suppliers to run our business, and some of them process personal information on our behalf. Typical categories are website and application hosting, email and productivity platforms, customer relationship management, telephony and meeting software, and accounting systems.

Suppliers acting on our behalf are permitted to use the information only to provide their service to us, are bound by confidentiality and data protection terms, and are not permitted to use it for their own purposes.

We may also disclose information where we are legally required to do so, where it is necessary to establish or defend a legal claim, or to protect the rights and safety of people and systems. If our business or part of it is ever transferred to another organisation, information may be transferred as part of that process and this policy will continue to apply until the recipient publishes its own.

Our systems and our suppliers' systems may be located in more than one country, so personal information may be transferred outside the country in which it was collected. Where that happens we take reasonable steps to ensure a comparable standard of protection travels with it, including appropriate contractual terms with the supplier.

We keep personal information for as long as it is needed for the purpose it was collected for, and then for as long as we have a legal or contractual reason to retain it.

In practice that means enquiries which do not lead to work are kept for a limited period and then deleted, records relating to a client engagement are kept for the life of the engagement and for the period afterwards required by contract, tax and professional obligations, and technical logs are kept for a short operational period unless retained for a specific security investigation.

We apply the same controls to our own environment that we recommend to clients: access limited to the people who need it, multi factor authentication on accounts, encryption of data in transit and at rest where it is supported, monitoring and logging, patching, and backups held separately from the systems they protect.

No system is perfectly secure, and we will not claim otherwise. If a breach affecting personal information occurs, we will investigate it, take steps to contain it, and notify affected people and any relevant authority where we are required to.

Depending on where you live, you may have some or all of the following rights over the personal information we hold about you. We will honour a request wherever the law gives you the right, and we will tell you plainly if we cannot.

This site and our services are intended for businesses and for the adults who work in them. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

We update this policy when our practices change or when the law requires it. The date at the top of the page always shows when the current version was published, and any material change will be reflected there.

To ask a question about this policy, to exercise any of the rights described above, or to raise a concern about how we have handled your information, write to us and tell us what you need.