We rely on the following legal bases to process your personal data:

​

• Consent – where you have provided clear consent (e.g. subscribing to a newsletter)

• Contract – where processing is necessary for a contract with you

• Legitimate interests – where it is in our legitimate business interest (e.g. improving our services)

• Legal obligation – where processing is necessary to comply with legal requirements

5. Sharing Your Data

We do not sell your personal data. We may share it with:

​

• Service providers that help us operate our website and business (such as website hosting, analytics, invoicing, and email communication tools)

• Legal and regulatory authorities, where required by law

• Our professional advisors (e.g. accountants, legal counsel) where necessary for compliance or business operations

​

We only share personal data that is necessary for these purposes. All service providers are required to keep your data secure and process it only on our documented instruction

​

We do not share personal data with third parties for advertising or profiling purposes

6. International Transfer

Some providers may store or process data outside the UK/EEA. Where this occurs, we ensure appropriate safeguards (such as Standard Contractual Clause) are in place

7. Data Retention

We retain personal data only for as long as necessary to fullfil the purpose for which it was collected, including providing the GTM Revenue Leak Audit, responding to enquiries, complying with legal, accounting, or regulatory obligations, and resolving disputes.

​

• Enquiry and contact data is retained for as long as is reasonably necessary to respond to your request and manage our relationship, unless you ask to delete it sooner

• Audit-related information shared during the GTM Revenue Leak Audit is retained for a limited period to allow delivery of the audit summary and related follow-up, after which it is securetely deleted or anonymised, unless longer retention is required by law

• Invoicing and transaction records are retained for the period required under applicable accounting and tax laws

​

We periodically review the personal data we hold and securetely delete or anonymise it when it is no longer required

8. Your Data Protection Rights

Under the UK GDPR, you have rights including:

​

• Access – you can request copies of your personal data

• Rectification – you can request correction of inaccurate or incomplete data

• Erasure – you can request deletion of your personal data

• Restriction – you can request us to limit how we use your data

• Objection – you can object to our use of your data

• Portability – you can request your data in a transferable format

​​

To exercise any of these rights, email us at: info@opzing.co

9. Cookies and Analytics

We use cookies and similar technologies to:

​

• Enable core website functionality

• Analyse usage to improve the Website

• Store your cookie preferences

​

For detailed information, please refer to our Cookie Policy.