1. Who We Are
Opexima ("we", "us", "our") is the data controller for any personal data you provide to us. We are a UK-based operational architecture and business transformation consultancy.
Contact:
2. What Data We Collect
We currently collect personal data only when you choose to contact us directly, by email or through the enquiry form on our website. This may include:
- Your name
- Your email address
- Your company name or role (if provided)
- The content of your message or enquiry, including anything you tell us about your operation (for example the number of sites, the challenges you face and the outcome you are looking for)
We do not use website cookies, tracking pixels, analytics scripts, or any other automated data collection on this site. We don’t collect anything when you simply visit the site. Like any website, our hosting provider and Google Fonts (which supplies the typefaces) receive your device’s IP address when the page loads, purely to deliver it. We don’t receive or use that information. The spam check on our enquiry form is provided by hCaptcha, which processes technical information (such as your IP address and browser details) to tell people from bots, and may set a cookie for that purpose only.
3. Why We Collect It (Legal Basis)
We process your personal data on the basis of legitimate interests – specifically, to respond to your enquiry and assess whether there is a potential fit between your needs and our services. This is a standard, proportionate use of contact data in a B2B context.
If you tick “Keep me posted” on our enquiry form, we rely on your consent to send you the occasional email with practical ideas and news from Opexima. You can withdraw that consent at any time by replying “unsubscribe” to any email from us, or by contacting us. Withdrawing does not affect your enquiry.
4. How We Use Your Data
We will only use your data to:
- Respond to your initial enquiry
- Follow up where you have indicated interest
- Send you the occasional email with ideas and news, only if you have ticked “Keep me posted”
- Fulfil any engagement or contract agreed between us
We will not add you to any mailing list or contact you about unrelated matters without your consent. Every email we send under “Keep me posted” tells you how to unsubscribe, and we act on unsubscribe requests promptly.
5. Who We Share It With
We do not sell, rent, or share your personal data with third parties for marketing purposes.
Your data may be accessible to our email service provider (currently Microsoft 365 / Outlook) solely for the purpose of delivering and storing correspondence. Microsoft acts as a data processor under a Data Processing Agreement with appropriate safeguards. Messages sent through the enquiry form on our website are delivered to that inbox by our form-processing provider, Web3Forms, which acts as a data processor for that purpose only. The form’s spam check is provided by hCaptcha, which handles the technical information it collects under its own privacy policy.
We will only disclose your data to others if required by law.
6. How Long We Keep It
Enquiry emails and related correspondence are retained for up to 24 months from the date of last contact. Where an engagement proceeds to a paid contract, records are retained for 6 years in accordance with UK tax and accounting requirements.
If you ticked “Keep me posted”, we keep your name, email address and company for that purpose until you unsubscribe. After that we keep only a note that you unsubscribed, so we don’t contact you again.
You may request deletion at any time (see Your Rights below).
7. Data Security
We take reasonable technical and organisational measures to protect your data from unauthorised access, loss, or disclosure. All correspondence is handled via password-protected, encrypted email accounts with two-factor authentication enabled.
8. Your Rights Under UK GDPR
You have the following rights in relation to your personal data:
- Access – request a copy of the data we hold about you
- Rectification – ask us to correct inaccurate or incomplete data
- Erasure – request that we delete your data ("right to be forgotten")
- Restriction – ask us to limit how we use your data
- Portability – request your data in a structured, machine-readable format
- Objection – object to processing based on legitimate interests
To exercise any of these rights, email us using the button below. We will respond within 30 days.
9. The Right to Complain
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the UK's supervisory authority:
- Information Commissioner's Office (ICO)
- Website: ico.org.uk
- Helpline: 0303 123 1113
We'd always appreciate the opportunity to address your concern directly before you contact the ICO, so please reach out to us first if possible.
10. Changes to This Policy
We may update this policy as our services and data practices evolve. The "last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated via our website.
11. Contact
For any questions about this policy or how we handle your data:
- Email:
- Website: opexima.co.uk