Privacy Policy
Last updated: September 2026 · OTB-MIDAS Limited · Company No. 16404420
1. Who we are
OTB-MIDAS Limited (“OTB-MIDAS”, “we”, “us”, “our”) is a company registered in England and Wales (Company No. 16404420).
We are the data controller for personal data collected through this website and our services. If you have any questions about this policy, contact us at info@otb-midas.com.
2. What data we collect
We may collect the following categories of personal data:
- Contact information: name, company name, email address and telephone number submitted through our contact form.
- Enquiry content: the message, service requirement and any other information you voluntarily provide.
- Usage data: IP address, browser type, pages visited and time spent on the site, collected automatically via server logs and analytics tools.
- Cookie data: see our Cookie Policy for details.
We do not collect sensitive personal data (special category data) unless specifically required for a contractual engagement, and only with your explicit consent.
3. How we use your data
We use your personal data to:
- Respond to your enquiry or consultation request.
- Provide the procurement and IT consultancy services you have requested.
- Communicate with you about our services where you have requested this.
- Comply with legal and regulatory obligations.
- Improve the performance and content of our website.
We do not use your data for automated decision-making or profiling.
4. Legal basis for processing
Under UK GDPR, we process your personal data on the following lawful bases:
- Contractual necessity: where processing is necessary to perform a contract with you or to take steps prior to entering into a contract.
- Legitimate interests: responding to enquiries and improving our services, where these interests are not overridden by your rights.
- Legal obligation: where we are required to process data to comply with applicable law.
- Consent: where you have given clear consent (e.g. for marketing communications, if offered).
5. How we share your data
We do not sell or rent your personal data. We may share your data with:
- Service providers: third-party suppliers who assist us in operating our website or delivering our services (e.g. hosting, email, analytics), bound by data processing agreements.
- Professional advisers: lawyers, accountants and insurers where necessary.
- Regulatory authorities: where required by law or to protect our legal rights.
Any third parties we engage are required to handle your data securely and in accordance with UK GDPR.
6. International transfers
Where we transfer personal data outside the UK or EEA, we ensure appropriate safeguards are in place — such as UK International Data Transfer Agreements (IDTAs) or adequacy decisions — to protect your data to the standard required by UK law.
7. Data retention
We retain personal data only for as long as necessary for the purposes set out in this policy:
- Enquiry and contact data: up to 2 years from last contact, unless a contractual relationship develops.
- Client and contract data: 7 years from the end of the engagement, in line with standard commercial and tax obligations.
- Website analytics: typically 26 months, in line with standard analytics tool configurations.
8. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Rectification of inaccurate or incomplete data.
- Erasure (“right to be forgotten”) in certain circumstances.
- Restriction of processing in certain circumstances.
- Data portability in certain circumstances.
- Object to processing based on legitimate interests.
- Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact us at info@otb-midas.com. We will respond within one calendar month.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been handled unlawfully.
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. However, no internet transmission is entirely secure, and we cannot guarantee absolute security.
10. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect any changes. We encourage you to review this policy periodically.
11. Contact us
For any privacy-related queries:
- Email: info@otb-midas.com