Privacy Policy
Privacy Notice
This notice explains how Ocean Orchestra collects and uses your personal information, and what your rights are. We're committed to handling your data with care and in line with UK data protection law.
Who we are
Ocean Orchestra is the trading name of Ocean Orchestra Ltd, registered in England and Wales (company number 16214335) at 85 Great Portland Street, London, W1W 7LT.
We're registered with the ICO under reference number ZB988039. For the purposes of data protection law, we act as the data controller for your personal information.
Get in touch
If you have any questions about this notice or how we handle your data, you can reach us by email at hello@oceanorchestra.ai or by post at 85 Great Portland Street, London, England, W1W 7LT.
Your rights
Under UK GDPR you have the right to access, correct, or delete the personal data we hold about you. You can also ask us to restrict how we use it, object to processing based on legitimate interests, and request a portable copy of your data in a machine-readable format. These rights aren't absolute and may be subject to certain exceptions, but we'll always explain clearly if that's the case.
To exercise any of these rights, email us at hello@oceanorchestra.ai. We'll respond within 30 days, and if we need more time we'll let you know.
Please let us know if your personal information changes so we can keep our records accurate. There's no charge for exercising your rights in most circumstances, though we reserve the right to apply a reasonable fee for requests that are clearly unfounded, excessive, or repetitive. We may also ask you to verify your identity before we respond, simply to make sure your data isn't disclosed to anyone who shouldn't have it.
If you're unhappy with how we've handled your data, please contact us first and we'll do our best to resolve it. If you're still not satisfied, you can raise a complaint with the ICO at ico.org.uk or by calling 0303 123 1113.
What we collect
When you use Ocean Orchestra, we collect the information you give us directly, such as your name, email address, billing details and payment information. We may also receive some of this information from third parties where relevant.
We also collect technical data when you visit our website, including your IP address, browser and device information, location data, and how you navigate the site. We use cookies to help with this.
How we use your information
We use your information to deliver our products and services, manage your account, respond to your enquiries, and meet our legal and regulatory obligations.
We'll only send you marketing emails where you've given us permission, or where we're contacting you about services similar to ones you already use. You can unsubscribe at any time via the link in any email or by emailing us directly.
Our lawful basis
We process your data to fulfil our contract with you, meet our legal obligations, and where it serves our legitimate interests such as improving our service and understanding how our platform is used. Where we rely on your consent, you can withdraw it at any time by emailing us.
Who we share it with
We use a number of trusted third-party tools to run our platform, including cloud hosting, analytics, payment processing and customer support providers. We may also share your data where required by law. We don't sell your data and we never will.
Some of our tools are based outside the UK. Where that's the case, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or adequacy decisions, to keep your data as well protected as it would be under UK law.
Where we store it and how long we keep it
Your data is primarily stored in the UK and EEA, where it's fully protected under applicable data protection law. Where data is stored elsewhere, we apply appropriate safeguards to ensure it receives the same standard of protection.
We keep your data for as long as necessary to deliver our service and meet our legal obligations. Payment records are retained for seven years as required by law. Account data is kept for the duration of your relationship with us and for up to two years afterwards (or longer, as necessary).
Security
We use appropriate technical and organisational measures to protect your data from loss, misuse or unauthorised access. Anyone who handles your data on our behalf is required to treat it confidentially. In the event of a breach that affects your rights, we'll notify you and the ICO within 72 hours. No internet transmission is completely secure, but we do everything we reasonably can to protect your data in transit and at rest.
Third party links
Our website may contain links to third party sites. We're not responsible for their content or privacy practices, so we'd encourage you to read their privacy notices before sharing any personal information with them.
Changes to this notice
We'll update this notice from time to time as our service evolves.