Who is responsible?
Ostrelis is the controller of personal information collected through this website. If you have a question about privacy, email hello@ostrelis.com. This notice applies to ostrelis.com; the separate customer portal may have its own privacy information and controls.
Information we collect
When you contact us, we collect the information you choose to provide, such as your name, work email address, organisation, approximate number of Salesforce users and the details of your enquiry. We also receive your consent checkbox response and the date and time of submission.
Our hosting and security systems may also record technical information such as IP address, browser, device, referring page and request time in server or security logs. We use optional first-party analytics only after you give consent, and we do not intentionally collect special-category information. Please do not include confidential customer data, passwords or sensitive personal information in a website enquiry.
Why we use it and our legal bases
- Responding to an enquiry: to communicate with you, understand the Salesforce help you need and take steps at your request before entering into a contract. Our basis is legitimate interests and, where relevant, steps at your request before a contract.
- Managing our business: to protect the website, prevent abuse, keep records and comply with legal obligations. Our bases are legitimate interests and legal obligation, where applicable.
- Consent: the contact form asks for consent to use the submitted details to respond. You can withdraw that consent at any time by emailing us. Withdrawal does not affect processing already carried out lawfully.
We will not use your enquiry details for unrelated marketing without a lawful basis and any consent required by applicable electronic-marketing rules.
Who receives your information?
We share information only where necessary with service providers that help us operate the website and enquiry process, including our hosting and form-processing provider, Netlify, Supabase for optional analytics event storage, and email, IT and security providers used by Ostrelis. They may process information on our instructions and under contractual confidentiality and security obligations. We may also disclose information where required by law, to professional advisers, or to protect our rights, users or systems.
International processing
Some providers may process information outside the UK. Where this happens, we use a lawful transfer mechanism and appropriate safeguards required by UK data-protection law, such as an adequacy decision or approved contractual protections. Contact us if you want more information about the relevant safeguards.
How long we keep it
We keep contact enquiries and related correspondence only for as long as needed to respond, manage the relationship and meet relevant legal, accounting, insurance or dispute requirements. Security and technical logs are kept according to the operational periods set for the website and its providers. We securely delete or anonymise information when it is no longer needed.
Your rights
Subject to legal limits, you can ask us for a copy of your personal information, correction of inaccurate information, deletion, restriction of processing, or object to processing based on legitimate interests. You may also have a right to data portability, and you can withdraw consent where we rely on consent. To make a request, email hello@ostrelis.com; we may need to verify your identity. We aim to respond within one month.
Cookies and changes
For information about the essential consent cookie and optional analytics cookies, see our cookie information. We may update this notice when our processing changes. The latest version will always be published on this page.
Contact Ostrelis ↗