Privacy policy

1. Who we are

OPICA LTD (“OPICA”, “we”, “us”) is responsible, as controller, for the personal data described in this policy. OPICA LTD is a company registered in Cyprus under registration number HE476529, with its registered office at Agras 19, 2nd Floor, 3046 Limassol, Cyprus.

For any question about this policy or your personal data, email info@opicaplatform.com or call +357 97 897 489.

2. What this policy covers

This policy covers the personal data we collect through this website, including the contact form, and when you contact us by email or phone.

It does not cover documents or data stored in an OPICA installation. OPICA is installed on each customer’s own premises, and the customer is responsible for the data it keeps there.

3. The data we collect

• Contact form: your first name, last name, email address, phone number, organisation and message.

• Email and phone: the details you choose to share when you contact us.

• Technical data: when you visit the website, our hosting provider processes technical information such as your IP address, browser type and the pages requested, so it can deliver the website and keep it secure.

• Website statistics: our hosting provider gives us cookie-free statistics, such as which pages are visited and which sites refer visitors. These statistics are aggregated and do not identify you.

• Google Analytics, only if you accept analytics cookies: the pages you visit, how long you stay, the type of device and browser you use, your approximate location (based on your IP address) and how you reached the website. Google Analytics gives your browser a random identifier, stored in a cookie.

• Microsoft Clarity, only if you accept analytics cookies: how you use the pages, such as clicks, scrolling and mouse movements, which Clarity shows us as heatmaps and as recordings of visits. Text you type into the contact form is masked and is not sent to Clarity. Clarity gives your browser a random identifier, stored in a cookie.

Please do not include sensitive information, such as health data, in your message.

4. Why we use it

• To reply to your enquiry and arrange a demo. Legal basis: steps taken at your request before entering into a contract, and our legitimate interest in replying to people who contact us (GDPR Article 6(1)(b) and (f)).

• To run, secure and improve the website. Legal basis: our legitimate interest in operating a secure, working website (Article 6(1)(f)).

• To understand how visitors use the website and improve it, with Google Analytics and Microsoft Clarity. Legal basis: your consent (Article 6(1)(a)), which you can withdraw at any time.

• To meet our legal obligations, for example keeping business records or responding to lawful requests from authorities (Article 6(1)(c)).

We do not sell your personal data, we do not add you to marketing lists without your consent, and we do not make automated decisions about you.

5. Cookies

We use two kinds of cookies:

• Necessary: we remember your cookie choice in your browser, so we don’t ask you again on every page. This does not need your consent.

• Analytics: Google Analytics cookies help us understand how the website is used. They are set only if you accept, and last up to two years.

• Analytics: Microsoft Clarity cookies help us see how pages are used, as heatmaps and recordings of visits. They are set only if you accept, and last from one day to about a year.

We do not use advertising cookies. You can change your choice at any time with Cookie settings in the footer of every page. If you switch to Reject, analytics stops straight away and the analytics cookies set by this website are deleted. You can also delete cookies in your browser.

We use Google Tag Manager to load these tools only after you accept. Tag Manager itself does not set cookies. The full list of cookies is in section 12, at the end of this policy.

6. Who we share it with

We share personal data only with providers that help us run the website and our business, and only as far as they need it:

• Framer B.V. (the Netherlands): hosts this website and receives contact form messages.

• Google Ireland Limited (Ireland): Google Tag Manager and Google Analytics. Analytics runs only if you accept.

• Microsoft Ireland Operations Limited (Ireland): Microsoft Clarity, only if you accept.

• Our business email provider: stores the messages we send and receive.

• Professional advisers, such as accountants and lawyers, where needed.

• Public authorities, where the law requires us to.

Our providers act on our instructions and must keep your data secure and confidential.

7. Transfers outside Europe

Some of our providers, including Google and Microsoft, may process data outside the European Economic Area, for example in the United States. When that happens, the transfer is protected by an adequacy decision of the European Commission or by the European Commission’s Standard Contractual Clauses.

8. How long we keep it

• Enquiries and related correspondence: up to 24 months after our last contact with you, unless you become a customer.

• Customer correspondence: for as long as our relationship lasts, and afterwards for as long as the law requires us to keep business records.

• Google Analytics data: 14 months, after which Google deletes it automatically.

• Microsoft Clarity data: recordings of visits for 30 days and other Clarity data for 9 months, after which Microsoft deletes it automatically.

• Technical data processed by our hosting provider: only for the limited period needed to deliver and secure the website.

9. Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

• access the personal data we hold about you

• have inaccurate data corrected

• have your data erased

• restrict or object to our use of your data

• receive your data in a portable format

• withdraw your consent at any time, where we rely on consent

To use any of these rights, email info@opicaplatform.com. We will reply within one month.

You can also complain to the Office of the Commissioner for Personal Data Protection in Cyprus: www.dataprotection.gov.cy, commissioner@dataprotection.gov.cy, +357 22 818456, P.O. Box 23378, 1682 Nicosia.

10. Security

We protect personal data with appropriate technical and organisational measures. Only the people who need it to handle your enquiry have access to it.

11. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last changed.

12. Cookie list

These cookies are set only if you accept analytics cookies:

• _ga and _ga_<ID> (Google Analytics): tell visits from the same browser apart. Up to 2 years.

• _clck (Microsoft Clarity): recognises the same browser on later visits. 1 year.

• _clsk (Microsoft Clarity): links the pages of one visit together. 1 day.

• CLID and MUID (Microsoft, set on clarity.ms): recognise the browser for Clarity. About 1 year.

Your cookie choice itself is saved in your browser’s storage, not as a cookie, until you change it or clear your browser data.