Privacy Policy
Last updated 20 October 2026
Otopoetic Limited collects the minimum personal data needed to answer enquiries and to understand how this site is used. This page sets out what we collect, why, who handles it and what rights you hold.
Who we are
Otopoetic Limited ("Otopoetic", "we") is the controller of personal data collected through otopoetic.com. We are an AI governance advisory practice based in Belfast, Northern Ireland. To contact us about this policy or to exercise any right below, use the enquiry form at otopoetic.com and state that your message concerns privacy.
What we collect
Enquiry form. When you request a briefing we collect your name, organisation, role, work email address and any context you choose to add. If you have completed the self-assessment, we also receive the governance address it produced.
Usage data. We use Google Analytics 4 to measure how visitors use the site: pages viewed, approximate location, device and browser type, referring page, and interactions such as starting or submitting the enquiry form. We record that a form was started or submitted. We do not record what you type into it.
Server records. Our hosting provider keeps standard technical logs, including IP address, date and time, and the page requested, for security and reliability.
Why we use it, and on what basis
- To respond to your enquiry and arrange a briefing. Basis: our legitimate interest in answering requests made to us, and steps taken at your request before any contract.
- To understand which parts of the site are used and to improve them. Basis: your consent where analytics cookies are set, and otherwise our legitimate interest in running the site.
- To keep the site secure. Basis: our legitimate interest in preventing misuse.
We do not sell personal data. We do not use it for automated decisions that affect you, and we do not send marketing email unless you have asked for it.
Who handles it
We use a small number of providers to run the site. Each acts on our instructions or, in the case of Google, under its own terms.
- Web3Forms receives enquiry form submissions and relays them to us by email.
- Google provides Analytics, and Google Fonts, which loads typefaces from Google servers and so receives your IP address when a page loads.
- Hostinger hosts the site.
Some of these providers process data outside the United Kingdom. Where they do, transfers rely on the safeguards the UK GDPR permits, such as the UK extension to the EU-US Data Privacy Framework or standard contractual clauses. We disclose personal data to others only where the law requires it.
Cookies
Google Analytics sets cookies that identify a browser across visits so that usage can be counted. The site sets no advertising cookies. You can block or delete cookies in your browser settings, or install the Google Analytics opt-out browser add-on. The site works without them.
How long we keep it
We keep enquiry details for as long as we need them to deal with your request and any engagement that follows, and delete them when they are no longer needed. Analytics data is retained for the period configured in our Google Analytics account and then removed automatically.
Your rights
Under UK data protection law you may ask us to confirm what personal data we hold about you, give you a copy, correct it, erase it, restrict its use, or stop using it where we rely on legitimate interests. Where we rely on consent, you may withdraw it at any time. Contact us as described above and we will reply within one month.
If you are unhappy with how we have handled your data, you may complain to the Information Commissioner's Office at ico.org.uk. We would welcome the chance to resolve the matter first.
Other sites
This site links to ivanroche.com, roche-review.com and LinkedIn. Each runs its own privacy practices, and this policy does not cover them.
Changes
We will update this page when our practices change and revise the date above.