Privacy notice.

Who we are

Ostiary is a UK human risk advisory and the controller of the personal information described here. The company is being incorporated. Its registered name, number and address will be published on this page once that is complete.

What we collect

• The name, work email, organisation and message you enter in the enquiry form.
• Your IP address, used briefly to limit repeated form submissions and to keep the site secure.
• Two cookies that the site needs to work: a session cookie and a security token that protects forms. We do not use analytics or advertising cookies.

Why we use it

We use your enquiry to reply to you and, if you ask, to discuss or arrange our services. Our lawful basis is our legitimate interest in responding to enquiries, or taking steps at your request before entering a contract. We use IP addresses and cookies on the basis of our legitimate interest in running a secure website.

Who sees it

Enquiries are sent by email to the Ostiary team. They are not stored in a database on this website. Our hosting and email providers process the information on our behalf. We do not sell your information or use it for marketing without your permission.

How long we keep it

We keep enquiries only for as long as we need to deal with them and any follow-up. Rate limiting records expire within an hour.

Your rights

You can ask to see, correct or delete your information, or object to how we use it, through the contact page. If you are unhappy with how we handle your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.