Privacy Policy
How OKOfy collects, uses, and protects your personal data
Last updated: 28 September 2025
1. Introduction
OKOfy (“we”, “our”, or “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our digital transformation services.
This policy applies to all users of our services, with particular attention to compliance with:
- UK General Data Protection Regulation (UK GDPR)
- EU General Data Protection Regulation (EU GDPR)
- Data Protection Act 2018
- Privacy and Electronic Communications Regulations (PECR)
2. Data Controller
OKOfy is the data controller responsible for your personal data. Our contact details are:
If you have any questions about this Privacy Policy or our data practices, please contact us using the details above.
3. Information We Collect
3.1 Information You Provide
- Contact Information: Name, email address, phone number, company details
- Service Inquiries: Project details, requirements, business information
- Newsletter Subscriptions: Email address and preferences
- Communication: Messages sent through contact forms or email
3.2 Information Collected Automatically
- Usage Data: Pages visited, time spent, navigation patterns
- Device Information: Browser type, operating system, screen resolution
- Location Data: General geographic location (country/city level)
- Analytics Data: Website performance and user behavior (anonymized)
3.3 Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience. For detailed information, please see our Cookie Policy.
4. How We Use Your Information
We process your personal data for the following purposes:
4.1 Service Provision (Contractual Basis)
- Responding to service inquiries and consultation requests
- Delivering digital transformation services
- Project management and client communication
- Invoicing and payment processing
4.2 Marketing (Consent/Legitimate Interest)
- Sending newsletters and industry updates (with consent)
- Sharing relevant case studies and insights
- Providing educational content about digital transformation
4.3 Website Improvement (Legitimate Interest)
- Analyzing website usage to improve user experience
- Conducting A/B testing for website optimization
- Monitoring website performance and security
5. Legal Basis for Processing
Under GDPR, we process your data based on:
- Consent: Newsletter subscriptions, marketing communications, optional cookies
- Contract: Service delivery, project management, client communications
- Legitimate Interest: Website analytics, security, business development
- Legal Obligation: Compliance with tax, accounting, and regulatory requirements
6. Data Sharing and Disclosure
We may share your information with:
6.1 Service Providers
- Analytics: Google Analytics (with IP anonymization)
- Email Services: Newsletter and communication platforms
- Hosting: Vercel (website hosting)
- Form Processing: Formspree (contact forms)
6.2 Legal Requirements
We may disclose information if required by law, regulation, legal process, or to protect our rights, property, or safety.
6.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
7. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time
To exercise these rights, contact us at privacy.legal@okofy.com. We will respond within one month.
8. Data Security
We implement appropriate technical and organizational measures to protect your data:
- SSL encryption for data transmission
- Access controls and authentication
- Regular security assessments
- Staff training on data protection
- Secure hosting infrastructure
However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
9. Data Retention
We retain personal data for different periods depending on the type:
- Client Data: 7 years after project completion (for legal/tax purposes)
- Marketing Data: Until consent is withdrawn or 3 years of inactivity
- Analytics Data: 26 months (Google Analytics retention)
- Website Cookies: Up to 2 years (as specified in Cookie Policy)
10. International Data Transfers
Some of our service providers may be located outside the UK/EEA. We ensure adequate protection through:
- Adequacy decisions by the European Commission
- Standard Contractual Clauses (SCCs)
- Binding Corporate Rules
- Certification schemes
11. Contact Us and Complaints
For any privacy-related questions or to exercise your rights, contact us at:
Data Protection Contact:
Email: privacy.legal@okofy.com
Phone: +44 (0) 20 1234 5678
You also have the right to lodge a complaint with the relevant supervisory authority:
- UK: Information Commissioner's Office (ICO) - ico.org.uk
- EU: Your local Data Protection Authority
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending email notifications to registered users
- Displaying a prominent notice on our website
Your continued use of our services after such modifications constitutes acceptance of the updated Privacy Policy.