Privacy Policy

1. Introduction

OM24 Global (“we”, “our”, or “us”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website om24global.com (the “Website”), in compliance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

2. Data Controller

OM24 Global is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us at:

3. Information We Collect

We may collect the following types of personal data:

3.1 Information You Provide

• Name, email address, and phone number when you submit our contact form
• Subject and message content of your enquiries
• Any other information you voluntarily provide to us

3.2 Automatically Collected Information

• IP address and approximate location
• Browser type, version, and operating system
• Pages visited, time spent on pages, and navigation paths
• Referring website or search terms
• Device type and screen resolution

4. Legal Basis for Processing

Under the GDPR, we process your personal data based on the following legal grounds:

• Consent: When you have given clear consent for us to process your personal data for specific purposes (e.g., analytics cookies)
• Legitimate Interest: When processing is necessary for our legitimate business interests, such as improving our services
• Contractual Necessity: When processing is necessary to fulfil a contract or take pre-contractual steps at your request
• Legal Obligation: When we are required to process your data to comply with a legal obligation

5. How We Use Your Information

• To respond to your enquiries and provide requested services
• To improve and optimise our Website and services
• To analyse Website usage through anonymised analytics (with your consent)
• To send relevant communications if you have opted in
• To comply with legal obligations and protect our legitimate interests

6. Cookies

Our Website uses cookies to distinguish you from other users. This helps us provide you with a good experience when browsing and allows us to improve our Website. For detailed information about the cookies we use and the purposes for which we use them, please see our Cookie Policy.

7. Data Sharing and Transfers

We do not sell, rent, or trade your personal data. We may share your data with:

• OM24 Group Companies: Including Rebus Consultancy, Cition Capital, and GCP Asset Management, where necessary for service delivery
• Service Providers: Trusted third-party service providers who assist in operating our Website and services, bound by data processing agreements
• Legal Requirements: When required by law or to protect our rights

Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (“right to be forgotten”)
• Right to Restriction: Request restriction of processing of your personal data
• Right to Data Portability: Request transfer of your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw your consent at any time where processing is based on consent

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

9. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Contact form submissions are retained for a maximum of 24 months unless a longer retention period is required or permitted by law.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.

11. Third-Party Links

Our Website may contain links to third-party websites, including OM24 Group company websites. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of every website you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date. We encourage you to review this Privacy Policy periodically.

13. Supervisory Authority

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with your local data protection supervisory authority.