Privacy Policy

Last updated: 8 May 2026
01.

Who we are

Odris Systems Ltd is the data controller for personal data collected through this website and in the course of providing our services. We are registered in England and Wales.

This policy explains what personal data we collect, why we collect it, how we use it, and what rights you have. It applies to visitors to odrissystems.com and to clients who use our services.

If you have questions about how we handle your data, contact us at info@odrissystems.com.

02.

Data we collect and why

We collect personal data in the following ways:

Contact forms: When you submit a form on our website, we collect your name, email address, phone number, company name, and the content of your message. We use this to respond to your enquiry and, where you become a client, to manage the service relationship. Legal basis: legitimate interests (responding to an enquiry) and performance of a contract.

Speed to Lead lead data: When we operate Speed to Lead on behalf of a client, that client's inbound leads submit personal data (name, email, phone, message) through the client's forms or channels. Odris processes this data as a data processor on behalf of the client (who is the data controller for their own leads). We process it solely to deliver the service and do not use it for any other purpose.

Website analytics: We may collect anonymised usage data (pages visited, browser type, approximate location) to understand how visitors use the site. Where analytics tools are used, they are configured to minimise personal data collection and comply with UK GDPR.

Communications: If you email us or communicate with us in the course of a service engagement, we retain those communications as part of our records.

03.

How we use your data

We use personal data only for the purposes for which it was collected:

  • To respond to enquiries and provide the services you have engaged us for
  • To send invoices and manage the client relationship
  • To operate and maintain the automation systems we build and run on your behalf
  • To comply with legal obligations
  • To improve our website and services based on anonymised usage data

We do not sell personal data to third parties. We do not use personal data for advertising profiling.

04.

Third parties we work with

To deliver our services, we work with the following categories of third-party providers. Each is engaged on the basis that they process data only as instructed and maintain appropriate security measures:

  • Anthropic: AI processing for lead qualification and reply generation. Lead content is sent to Anthropic's API to generate personalised responses.
  • Twilio: SMS and WhatsApp message delivery. Phone numbers and message content are transmitted to Twilio for dispatch.
  • Airtable: Client configuration storage. Client settings (not lead data) are stored in Airtable.
  • n8n: Workflow automation platform, self-hosted on our own infrastructure. Lead data is processed within this environment.
  • HubSpot: CRM updates for clients who have enabled this integration. Lead data is written to the client's own HubSpot account.
  • Netlify: Website hosting for odrissystems.com.

Where client accounts are used (BYOA model), data flows through the client's own third-party accounts and is subject to those providers' terms and privacy policies.

05.

Data retention

We retain personal data only for as long as necessary for the purposes described in this policy:

  • Enquiry and contact form data is retained for up to 2 years from the date of submission
  • Client records (including communications and invoices) are retained for 7 years from the end of the engagement, in line with UK accounting and tax obligations
  • Lead data processed through Speed to Lead on behalf of clients is retained only as long as necessary to deliver the service and is deleted or returned to the client upon termination

You can request deletion of your data at any time by emailing info@odrissystems.com, subject to any legal obligations to retain records.

06.

Your rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

Access
You can request a copy of the personal data we hold about you.
Rectification
You can ask us to correct inaccurate or incomplete data.
Erasure
You can request that we delete your personal data, subject to legal retention requirements.
Restriction
You can ask us to limit how we process your data in certain circumstances.
Portability
You can request your data in a structured, machine-readable format.
Objection
You can object to processing based on legitimate interests at any time.

To exercise any of these rights, email us at info@odrissystems.com. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been handled unlawfully.

07.

Cookies

This website uses essential cookies required for the site to function, plus optional analytics and advertising cookies. The optional cookies only load if you accept them in the cookie banner.

We use Google Analytics (GA4) and the LinkedIn Insight Tag to understand how visitors use the site. These collect data such as pages visited, browser type, and approximate location, with IP addresses anonymised.

You can withdraw consent at any time by clearing your browser's site data for this domain. The cookie banner will then reappear.

08.

Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. Our automation infrastructure is self-hosted on a secured VPS. Access to client configuration data is restricted to authorised personnel only.

No method of data transmission or storage is completely secure. If you believe your data has been compromised, contact us immediately at info@odrissystems.com.

09.

Changes to this policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify active clients by email at least 14 days before they take effect.

The current version is always available at odrissystems.com/privacy. The date at the top of this page shows when it was last updated.