Privacy Notice

Who is responsible for your information?

Opriva is a trading name of Sussex Business Solutions Ltd, the data controller for the information covered by this notice. The company is registered in England and Wales under number 10172186 at 16 Beach Road, Littlehampton, West Sussex, BN17 5HT, United Kingdom.

For privacy questions or requests, email privacy@opriva.co.uk or call 01903 712999.

Information we collect

When you contact us, we may collect:

• your name and business or organisation;
• your email address and telephone number;
• the contents of your enquiry or support request, any attachments you choose to provide and subsequent correspondence; and
• limited technical and security information, such as IP address, browser or device information, request time and security-check results, needed to deliver and protect the website and its forms;
• website usage information where optional analytics has been accepted.

Please do not submit passwords, payment details, special category information or other highly sensitive information through a form or attachment.

Why we use it and our lawful basis

We use contact information to understand and respond to enquiries, manage support requests, decide whether and how we can help, prepare requested proposals, provide or administer services and keep an appropriate record of the conversation. Our lawful bases are our legitimate interests in operating and developing our business, taking steps at your request before entering into a contract, and performing a contract where applicable.

We use limited technical information to maintain the security, availability and integrity of the website. Our lawful basis is our legitimate interest in protecting our website, systems and users.

Where you accept optional analytics, we use website usage information to understand site performance and improve its content. Our basis for using analytics cookies and related storage is your consent, which you can withdraw through the Cookie Notice.

We do not use contact-form information for automated decision-making or profiling, and submitting an enquiry does not subscribe you to marketing.

Who receives the information?

Access is limited to people who need it to respond to or manage your enquiry or support request. The website is hosted through 20i and uses Cloudflare for content delivery, security, Turnstile form protection and aggregate Web Analytics. Enquiry and support form messages are sent server-side using Microsoft Graph and processed in Microsoft 365.

Support requests sent to our support mailbox are imported into Zammad so that we can create and manage a ticket, send an acknowledgement and keep subsequent replies with the same request. Any attachment submitted with the support form is included in that process. Optional website analytics are provided through Google Analytics only where you have consented.

These providers may process limited personal information on our behalf under their contractual and security arrangements. We do not give them permission to use enquiry or support information for their own marketing.

We may disclose information where required by law, or where necessary to establish, exercise or defend legal claims. We do not sell personal information.

International processing

Some service providers may process information outside the UK. Where this happens, we rely on an applicable adequacy regulation or contractual safeguards recognised by UK data protection law. Contact us if you would like further information about the safeguards relevant to your information.

How long we keep it

We retain enquiry information only for as long as it is reasonably needed to respond, follow up and maintain appropriate business and legal records. The period depends on the nature of the enquiry and whether it develops into a client relationship. Information connected with a contract may be retained for longer to meet legal, accounting and professional obligations.

Support tickets and related correspondence are retained for as long as needed to provide support, maintain service history, manage security and meet contractual or legal obligations. Website and security logs are retained for limited operational periods determined by their purpose and the relevant provider’s configuration.

Your rights

Depending on the circumstances, you may have rights to access, correct, erase or restrict the use of your information, receive certain information in a portable format, and object to processing based on legitimate interests.

You have the right to object to our use of your information where we rely on legitimate interests. Contact us using the details above and we will consider your request in accordance with applicable law.

Complaints and changes

Please contact us first if you have a concern so we can try to resolve it. You may also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint.

We may update this notice when the website, our services or legal requirements change. The latest version will always be published here.