Legal
Privacy notice
Last updated: 5 November 2026
This notice explains how Opsryx handles personal data under UK GDPR and the Data Protection Act 2018.
1. Who we are (controller)
Trading name: Opsryx
Legal identity: [PLACEHOLDER: e.g. “Dale Hurst trading as Opsryx” OR full Ltd name]
Company number: [PLACEHOLDER: Companies House number if Ltd — leave blank / “N/A” if sole trader; do not invent]
Geographic / business address: [PLACEHOLDER: UK address for service and E-Commerce Regs]
Email: contact@opsryx.com
Privacy contact: [PLACEHOLDER: same email or privacy@… ]
ICO registration: [PLACEHOLDER: ICO registration / payment reference once registered, or “application in progress”]
For website enquiries, demos, accounts and billing, Opsryx is the controller.
For data you put into Opsryx Apps or Opsryx Complete about your staff, customers or suppliers (for example names, training records, timesheets), you (the customer) are the controller and Opsryx is your processor. See our Data Processing Agreement.
2. What we collect
2.1 Website and sales (we are controller)
- Contact / demo / waitlist forms: name, work email, company, role, phone, message.
- Technical: IP address, browser type, pages viewed (if you consent to analytics cookies).
- We do not sell this information.
2.2 Opsryx Apps / Complete accounts (mixed)
- Account: company name, admin name, work email, username, password (hashed), billing contact.
- Payment: card details are handled by Stripe; we do not store full card numbers.
- In-app content you upload or create (jobs, stock, skills matrix, labels, etc.) — processed as your processor.
2.3 Pallet Sheet Generator
- Logos and sheet entries stay on your device. We may count anonymous installs/usage, not what you type.
3. Why we use it (lawful bases)
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Reply to enquiries and book demos | Legitimate interests (B2B sales) and/or steps prior to a contract |
| Provide the trial and paid service, billing, support | Contract |
| Security, fraud prevention, service integrity | Legitimate interests |
| Analytics cookies / similar tech | Consent (PECR) — only if you Accept |
| Legal / tax records | Legal obligation |
| Optional product updates by email | Consent or PECR soft opt-in where it applies — we will not add you to marketing lists from a demo form without a clear opt-in |
4. Processors and subprocessors
We use trusted providers to run the service. Current list (update when it changes):
| Provider | Role | Location notes |
|---|---|---|
| Stripe | Payments, subscriptions, trials | May process outside UK — see Stripe’s DPA |
| Cloudflare | Website / app delivery, security | Edge network; see Cloudflare DPA |
| Analytics (GA4) if consented; Fonts may load from Google | US / global — consent required before analytics | |
| FormSubmit | Forwards website form emails | US-based form relay — named here for transparency |
| [PLACEHOLDER: Complete hosting / backup providers] | Private cloud server per plant (Complete) | [PLACEHOLDER: region — do not claim “UK hosting” unless confirmed] |
We will keep this list current on [PLACEHOLDER: URL of subprocessors page or this notice].
5. International transfers
Where a provider is outside the UK, we rely on [PLACEHOLDER: UK IDTA / EU SCCs + UK addendum / adequacy — solicitor to confirm] and the provider’s published terms.
6. Retention
| Data | Retention |
|---|---|
| Enquiry / demo leads | [PLACEHOLDER: e.g. 24 months after last contact, then delete or anonymise] |
| Account and billing records | For the life of the contract + [PLACEHOLDER: e.g. 6 years] for tax/accounting |
| Customer content in Apps / Complete | Per your instructions as controller; deleted or returned within [PLACEHOLDER: e.g. 30 days] after contract end unless law requires longer |
| Skills / training records (including leavers) | You decide retention periods. Opsryx does not set your HR retention policy; any product default is only applied on your instruction or documented setting |
| Analytics cookies | Per cookie policy durations (after consent) |
7. Your rights
You can ask us to access, rectify, erase, restrict, or port your personal data, and to object to certain processing. Where we rely on consent, you can withdraw it at any time (e.g. cookie settings).
Contact: contact@opsryx.com [PLACEHOLDER: dedicated privacy@ email if different].
You can complain to the Information Commissioner’s Office (ICO): https://ico.org.uk/
For data inside your Opsryx workspace, contact your company’s admin first — they are the controller.
8. Cookies
Essential cookies may be needed to sign in and keep the service secure.
Analytics cookies (Google Analytics `_ga`, `_ga_*`) are used only after you Accept on our cookie banner. See /cookies/ for the full list, purposes and lifetimes. You can change your mind via “Cookie settings” in the footer.
9. Children
Opsryx is a business service. We do not knowingly offer accounts to children.
10. Changes
We will update this notice when our practices change and show a new “Last updated” date. Material changes affecting customers will be [PLACEHOLDER: emailed to account admins / shown in-app].