Privacy Policy

Who we are

OMGM Ltd (“OMGM”, “we”, “us”) is responsible for the personal information described in this notice. Our registered office is Cherry Tree Court, Cross Street, Leek, Staffordshire, ST13 6BL, United Kingdom. Contact us at hello@omgm.io or through our contact form.

This notice applies to omgm.io, enquiries, business relationships and our own marketing. Where a separately licensed platform processes information on a customer’s behalf, the relevant contract, data-processing agreement and platform notice explain the parties’ respective responsibilities. A partner’s own privacy notice applies to information it collects independently.

Information we collect

• Enquiries: your name, email, optional company or website, message and submission date.
• Business relationships: professional contact details, correspondence, agreements, licence records, invoices, payment status and royalty statements.
• Website use and security: IP address, browser and device information, requested pages, timestamps and technical logs. A short-lived, hashed network identifier helps limit form abuse.
• Analytics and advertising: when the relevant tools are enabled and permitted by your preferences, page and event activity, referral sources, campaign identifiers, device details and cookie or similar identifiers.
• Marketing: subscription details, preferences and consent or opt-out records where you subscribe.
• Payments: billing information and payment references where a transaction is made. Stripe handles payment credentials; we do not store full card numbers.

Information comes from you, your browser or device, our service providers, and business contacts or publicly available professional sources where relevant. Please do not submit payment-card information, sensitive personal information or confidential third-party material in a general enquiry. Required form fields are needed to handle your request; the company field is optional.

Why we use information

• Responding to enquiries and discussing opportunities: our legitimate interests in business communication, or steps you request before a contract.
• Supplying agreed services and administering licences, payments and royalties: performing a contract with you; where you act for an organisation, our legitimate interests in managing that relationship.
• Operating and securing the website: legitimate interests in providing a reliable service and preventing misuse.
• Accounting, tax and legal obligations: compliance with applicable law.
• Optional analytics, advertising technologies and consent-based marketing: your consent where required.
• Relevant business-to-business communications where permitted: legitimate interests, with a clear opportunity to object.
• Complaints, disputes and legal claims: legitimate interests and applicable legal obligations.

We consider the effect on your interests and rights before relying on legitimate interests. We do not automatically subscribe people who submit an enquiry to marketing emails.

Cookies, analytics and advertising

We use essential technologies for website delivery, security and remembering your privacy choices. Optional analytics and advertising technologies are controlled separately through Cookie preferences. You can accept, reject or change these choices at any time. Declining optional technologies does not prevent access to the website or contact form.

The following describes the analytics and advertising integrations we may enable across this website. Relevant optional integrations operate only when enabled and permitted by your choices; enabling a preference does not necessarily mean every listed tool is present on every page.

Google Analytics

Google Analytics helps us understand visits, pages viewed, referral sources and interactions, including completed enquiries or purchases where relevant. It may use cookies and identifiers such as _ga and _ga_*. We do not include enquiry messages, names or raw email addresses in analytics event data. Analytics can involve processing by Google outside the UK.

Google Ads and Google Tag Manager

Google Ads helps us measure campaign results, attribute conversions and, where separately enabled and permitted, show relevant advertising or build remarketing audiences. Information can include advertising click identifiers, visited pages, conversion events, device details and cookies such as _gcl_au. Google Tag Manager may manage these tags; it does not replace your privacy choices. Where enhanced conversions are enabled and permitted, a one-way hash of an email address may be sent for conversion matching. Hashed identifiers remain personal information. We do not send the content of your enquiry. See how Google uses information from partner websites.

Meta advertising

Meta Pixel and, where enabled, Conversions API can measure the effectiveness of Facebook and Instagram advertising, record permitted conversion events and support relevant advertising audiences. Data may include visited URLs, browser and device information, event times, campaign identifiers, cookies such as _fbp or _fbc, and hashed contact identifiers for matching where enabled and permitted. We do not send enquiry messages or sensitive information. Browser and server-side advertising events must follow your advertising choice. See Meta’s Privacy Policy.

Your choices

Optional tracking stays off unless you allow the relevant category. Withdrawing permission stops future optional tracking; it does not reverse processing already carried out lawfully. We honour recognised Global Privacy Control signals by keeping optional analytics and advertising off. Browser “Do Not Track” signals are not standardised; use our controls to record your choice. Privacy preferences are held in local storage for up to six months. Third-party identifier lifetimes vary by tool and configuration; Google Analytics identifiers can last up to two years, and common advertising identifiers up to 90 days. Your browser can also delete or block cookies.

Who receives information

We use service providers where needed: Cloudflare for website hosting, security and enquiry storage; email and business-administration providers for communication; Stripe for payment processing; and Google or Meta for the optional purposes described above. Providers receive only information relevant to their role, subject to appropriate contractual arrangements. See Cloudflare’s Privacy Policy and Stripe’s Privacy Policy.

We may share relevant information with professional advisers, authorities where legally required, or parties involved in a genuine business transfer under appropriate safeguards. We do not sell enquiry lists. Any advertising disclosure that constitutes “sharing” or a “sale” under applicable US privacy law is subject to the choices and rights described in this notice. A commercial partnership does not itself authorise a partner to market to you using your enquiry details.

International transfers

Some providers process information outside the United Kingdom, including in the United States. Where UK data-protection law requires safeguards, we rely on an applicable adequacy arrangement or appropriate contractual safeguards, such as the UK International Data Transfer Agreement or UK Addendum, together with any required additional measures. Contact us for information about the safeguards applicable to a particular transfer.

How long we keep information

• Contact-form submissions are removed from the website’s enquiry store after 180 days. Relevant correspondence may be retained separately while a business relationship, complaint or legal obligation requires it.
• Form rate-limit records expire after 24 hours and are removed by a daily cleanup. Hosting and security logs follow the provider’s applicable retention settings.
• Contracts, invoices and royalty records are generally retained for six years after the relevant accounting period or end of the relationship, or longer where law or an unresolved dispute requires.
• Marketing subscription information is kept until you withdraw or it is no longer needed. A minimal suppression record may remain to honour your opt-out.
• Saved cookie preferences expire after six months. Analytics and advertising retention is limited according to each tool’s configured purpose and settings.

Deletion from active systems may take additional time to propagate through protected provider backups. We do not restore expired records for ordinary use. You can ask about retention of your particular information.

Your privacy rights

Depending on the circumstances, you may request access, correction, erasure, restriction, a portable copy of your information, or object to processing based on legitimate interests. You can object to direct marketing at any time and withdraw consent as easily as giving it. Withdrawal does not affect earlier lawful processing.

Contact hello@omgm.io, use the contact form, or write to our address above. We may request proportionate identity verification. We normally respond to UK data-protection requests within one month, subject to applicable extensions. You can complain to the UK Information Commissioner’s Office. We would welcome the opportunity to address your concern first.

Where applicable US state law covers us and your information, you may also request access, correction, deletion or portability, opt out of sale, sharing or targeted advertising, and appeal a refusal by contacting us with “Privacy appeal”. An authorised agent may act for you, subject to appropriate checks. We honour applicable deadlines and do not discriminate against people who exercise their rights. Cookie preferences and recognised Global Privacy Control signals can be used to opt out of optional advertising.

Children and automated decisions

This website is aimed at adult business contacts. We do not knowingly collect children’s personal information or knowingly sell or share information about anyone under 16. Contact us if you believe a child has supplied information. We do not use solely automated decisions that produce legal or similarly significant effects on individuals.

Changes to this notice

We review this notice as our services and data practices develop. The updated date appears above. We will provide further notice and obtain fresh permission where required before materially different processing begins.