Privacy Policy
This Privacy Policy explains how OMRAR SOFTWARE LTD ("OMRAR", "we", "us") collects, uses, shares and protects your personal data when you use the OmrarCast service at https://omrarcast.com. It is written for the UK GDPR and the Data Protection Act 2018, and also covers the EU GDPR where it applies to you.
1. Data controller
OMRAR SOFTWARE LTD, company number 16875482 (England and Wales), 75 Shelton Street, Covent Garden, London, United Kingdom. Email: info@omrar.com. Telephone: +44 7473 949331. For any privacy question or request, write to info@omrar.com.
2. The data we collect
- Account details: your name, email address, a hash of your password (we never store your password in plain text) and your company name.
- Contact form data: name, email, phone number, company, number of screens and your message.
- Technical and security data: IP address, session and security logs, audit logs.
- Device data: device identifiers, device tokens and the heartbeat and status information sent by your screens.
- Playback records (proof-of-play): records of which content was played on which screen and when.
- Customer content: images, videos and other media you upload to the Service.
- Payment details: payments are taken by Stripe. Payment instrument data such as your card number is processed by Stripe and not stored by OMRAR. We only receive the result of the payment and the subscription status.
3. Why we use your data, and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Providing the Service and managing screens, accounts and subscriptions | Performance of a contract (Article 6(1)(b)) |
| Billing and payments, tax and accounting records | Contract and legal obligation (Article 6(1)(b) and (c)) |
| Security, preventing abuse and unauthorised access | Legitimate interests (Article 6(1)(f)) |
| Answering your enquiries and support requests | Legitimate interests and steps at your request before a contract (Article 6(1)(f) and (b)) |
| Marketing messages | Your consent (Article 6(1)(a)), which you can withdraw at any time |
We only send marketing messages with your consent.
4. Who we share data with
We do not sell your data. We share it only as far as needed to provide the Service:
- Hetzner Online GmbH (Germany): servers and hosting.
- Cloudflare: content delivery network (CDN), security and Turnstile bot protection.
- Stripe: payment processing.
- Public authorities: where the law requires it or a competent authority makes a lawful request.
Our providers process data only on our instructions and under contract.
5. International transfers
Your data is hosted in Germany and may be processed by our providers in the United Kingdom, the European Economic Area and other countries where they operate. Where data is transferred outside the UK or EEA to a country without an adequacy decision, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or Addendum, or standard contractual clauses.
6. How long we keep data
- When an account is closed, or a trial or subscription ends, your account data and uploaded content are kept for 30 days and then deleted.
- Billing and accounting records are kept for the periods required by law.
- Security and access logs are kept for as long as is reasonably needed to keep the Service secure.
- If there is a legal dispute or investigation, relevant data may be kept until it is resolved.
7. Security
We apply reasonable technical and organisational measures to protect your data: hashed passwords, encrypted connections, access control, secure handling of device tokens and logging. No method of transmission over the internet can be completely secure, however.
8. Cookies
The Service uses essential session and security cookies and the browser's local storage. See our Cookie Policy for details.
9. Your rights
Under the UK GDPR (and the EU GDPR where it applies) you have the right to:
- be informed about how your data is used and to access your data;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict or object to processing;
- receive your data in a portable format;
- withdraw consent at any time where processing is based on consent.
To exercise these rights, write to info@omrar.com. We respond within one month.
You also have the right to complain to the supervisory authority. In the United Kingdom this is the Information Commissioner's Office (ICO), at ico.org.uk. We would appreciate the chance to deal with your concern first, so please contact us.
10. Children
The Service is aimed at businesses and not at anyone under 18. We do not knowingly collect personal data about children.
11. Changes
We may update this policy from time to time. The current version is published on this page and the "Last updated" date above is changed. We may notify you of material changes separately.
12. Contact
For privacy questions and requests: info@omrar.com