This Privacy Policy explains how OPJ INVESTMENTS LTD collects, uses, stores, shares and protects personal information. OPJ Investments develops and operates the technology investment and computer integrated systems programmes described on this website, and this policy describes the data practices that support those activities.
We have written this document in plain language so that clients, prospective clients, suppliers, website visitors and candidates can understand exactly what happens to their information. Where the law gives you a right, we state the right plainly and explain how to exercise it.
OPJ INVESTMENTS LTD is a technology investment practice and computer systems design business registered in the United Kingdom. Our registered and operating address is POST OFFICE, Glenholt Post Office, 1C-1D St. Annes Road, PLYMOUTH - PL6 7LW, United Kingdom (GB). We operate the website published at this domain and we deliver technology investment appraisal, systems integration, software development, cloud platform engineering, data and analytics, and managed IT services to organisations across the Professional, Scientific, and Technical Services sector.
For the purposes of applicable data protection law, OPJ INVESTMENTS LTD is the data controller in respect of the personal information described in this policy. That means we decide why information is collected and how it is used, and we are accountable for the way it is handled. Where we process information on behalf of a client under a delivery or managed service agreement, we act as a processor for that client and the client remains the controller of the relevant records.
We take a deliberately conservative approach to personal data. We collect only what we need to run the practice, we keep it for a defined period, and we do not sell it under any circumstances. This policy is written so that a reader without a legal background can follow it from beginning to end.
This policy applies to personal information that OPJ INVESTMENTS LTD collects through this website, through direct correspondence, through contractual engagement, and through the ordinary operation of our investment and engineering programmes. It covers information about clients, prospective clients, suppliers, professional contacts, candidates, and visitors to this website.
This policy does not apply to information that we process strictly on behalf of a client under that client terms of engagement, where the client determines the purpose and means of processing. In those situations you should direct your privacy enquiries to the relevant client, because the client owns the relationship with you. We support our clients in meeting their own obligations, and our delivery agreements set out the technical and organisational measures we apply.
This policy also does not apply to third party websites that we link to. Those services have their own privacy notices and we encourage you to read them before supplying personal information.
We collect several categories of personal information depending on how you interact with OPJ INVESTMENTS LTD. The categories are set out below so that you can see precisely what falls within our processing activities.
We do not seek to collect special category information such as health data, racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data or data concerning sexual orientation. If you send us such information voluntarily, we will treat it with the same care as all other information and will delete it if it is not necessary for the purpose at hand.
We collect personal information through a small number of clearly identifiable routes. Understanding these routes helps you decide what to share and when.
You give us information when you complete the contact form on this website, when you email us at our published address, when you telephone us, when you meet our team at an event, and when you enter into a contract with OPJ INVESTMENTS LTD. You also give us information when you apply for a role and submit a curriculum vitae.
When you visit this website, our hosting infrastructure records standard technical details such as your internet protocol address and the pages requested. This information is used to keep the service available and secure, and it is not used to build advertising profiles.
If your employer is a client or prospective client, colleagues may share your contact details and role so that we can correspond with the right person. We ask that anyone sharing another person details has a proper basis for doing so.
We may consult public registers, company records, professional networking profiles and published reports when conducting an investment appraisal. This material is used to understand a business and to verify facts, and it is handled under the lawful bases described later in this policy.
Our professional advisers, including accountants, insurers and legal counsel, may pass us information that is relevant to an engagement. Such information is treated as confidential and used only for the purpose for which it was provided.
Where the law requires us to identify a lawful basis for processing personal information, OPJ INVESTMENTS LTD relies on the following bases. We have mapped each basis to the activity it supports so that our reasoning is transparent.
We process information where it is necessary to enter into or perform a contract with you or with your organisation. This covers delivering appraisals, integration work, software development, cloud engineering, data services and managed IT services, as well as invoicing and payment administration.
We process information where it is necessary for our legitimate interests and those interests are not overridden by your rights. This covers running and securing our business, responding to enquiries, maintaining professional records, preventing fraud, and improving the services we offer. We have considered the balance carefully and we limit the information we use for these purposes to what is proportionate.
We process information where we must comply with a legal or regulatory duty. This includes tax and accounting obligations, anti money laundering checks where they apply, and responding to lawful requests from public authorities.
Where we rely on consent, we will ask for it clearly and separately, and you may withdraw it at any time. Withdrawing consent does not affect processing carried out before the withdrawal, and it does not affect processing that relies on another lawful basis.
We use personal information for the following purposes, and for no others without first updating this policy.
We do not use personal information to make solely automated decisions that produce legal effects or similarly significant effects. Where automated tooling assists our work, a human being reviews the outcome before any decision is taken that affects a person.
We rely on a small number of service providers to operate the practice. These providers process information on our instructions and are selected for their security posture as well as their capability.
Each provider is engaged under a written agreement that requires confidentiality, appropriate technical and organisational measures, and either deletion or return of information when the engagement ends. We review our provider list periodically and we remove any provider that no longer meets our standard.
OPJ INVESTMENTS LTD is based in the United Kingdom, and our default position is to keep personal information within the United Kingdom and the European Economic Area. Some of the cloud platforms we work with are global by design, and a transfer outside those areas can occur when a provider stores data in a region outside them.
Where a transfer outside the United Kingdom or the European Economic Area takes place, we ensure that a lawful transfer mechanism is in place. That mechanism may be an adequacy decision, an approved set of contractual clauses, or another safeguard recognised by the applicable law. We also assess the practical protections available in the destination and we apply supplementary measures where they are needed.
You may ask us for further information about the safeguards that apply to a particular transfer, and we will provide it unless we are prevented from doing so by law.
We keep personal information only for as long as it is needed for the purpose it was collected for, plus any period required by law. Our retention practice is set out below in broad terms.
When a retention period ends, we delete the information or irreversibly anonymise it so that it can no longer be associated with an individual. Where information sits in a backup, it is removed when the backup cycle reaches its natural expiry.
Security is treated as an engineering discipline at OPJ INVESTMENTS LTD rather than an administrative afterthought. We apply the same rigour to our own estate that we apply when we build systems for clients.
No system can be guaranteed to be completely secure. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within the required period and we will inform affected individuals where the law requires it. We keep a record of every breach, including those that do not require notification, so that we can learn from near misses.
Subject to the conditions and exceptions in applicable law, you have the following rights in relation to your personal information.
To exercise a right, contact us using the details in the final section of this policy. We will respond within one month in most cases. If a request is complex or if we receive several requests, we may extend that period and we will tell you why. There is normally no charge for exercising your rights, though we may charge a reasonable fee or refuse a request that is manifestly unfounded or excessive.
We may need to confirm your identity before acting on a request, and we may ask for information that helps us locate the records you are asking about. This protects you against someone else requesting your information without authority.
We send marketing communications only where we have a proper basis to do so. Where you are an existing client or where you have asked to hear from us, we may send updates about our programmes, our quarterly portfolio engineering review, and material we believe is relevant to your work.
Every marketing message we send includes a clear way to opt out. If you ask us to stop, we will suppress your details from marketing activity, although we may keep a minimal record so that we can honour your preference. We will continue to send service and contractual communications where these are necessary to deliver an agreement you hold with us.
If you receive a marketing message that you believe was sent in error, please tell us. We investigate every report and we correct our records promptly.
Our services are designed for organisations and for adults acting in a professional capacity. This website is not directed at children, and we do not knowingly collect personal information from children under the age of thirteen. If we become aware that we have collected information from a child without appropriate consent, we will delete it as quickly as we reasonably can.
If you are a parent or guardian and you believe that a child has provided information to OPJ INVESTMENTS LTD, please contact us using the details at the end of this policy. We will take the matter seriously and we will act promptly. We would also ask parents and guardians to supervise the online activity of younger internet users, because the protection of children online is a shared responsibility.
This website may contain links to external websites, including professional bodies, technical resources and partner organisations. Those websites are not controlled by OPJ INVESTMENTS LTD and we are not responsible for their content or their privacy practices.
When you follow a link away from this website, we encourage you to read the privacy notice of the destination site before sharing personal information. If you believe that a website we link to is handling information improperly, we would like to know so that we can consider the link carefully.
Our own service delivery may involve the use of third party platforms under a client agreement. In those situations the relevant privacy information is provided through the agreement and the client remains the controller of the information concerned.
We review this policy regularly and we update it when our practices change, when technology changes the way we work, or when the law requires an amendment. The date at the top of the page shows when the current version took effect.
If we make a material change that affects how we use personal information, we will take reasonable steps to bring it to your attention. That may include a notice on this website or, where appropriate, a direct message to affected individuals. Where a change requires consent under applicable law, we will ask for that consent before the change takes effect.
We recommend that you revisit this page from time to time so that you remain familiar with the version that applies. Continuing to use this website or continuing an engagement with us after an update indicates that you have had the opportunity to review the revised policy.
We would rather resolve a concern directly than have it escalate, so please contact us first if you are unhappy with the way your information has been handled. Our team will investigate, respond, and where we have made a mistake we will put it right.
If you are not satisfied with our response, you have the right to complain to the relevant supervisory authority in your country. In the United Kingdom that authority is the Information Commissioner Office, which accepts complaints through its published channels. If you live in another jurisdiction, the local data protection authority is the appropriate body, and we can help you identify it if you are unsure.
We keep a record of complaints and their outcomes so that we can identify patterns and improve our processes. We never penalise anyone for raising a concern in good faith.
If you have a question about this Privacy Policy, a request about your personal information, or a concern about the way your information has been handled, please contact OPJ INVESTMENTS LTD using the details below.
Company: OPJ INVESTMENTS LTD
Address: POST OFFICE, Glenholt Post Office, 1C-1D St. Annes Road, PLYMOUTH - PL6 7LW, United Kingdom (GB)
Email: frontdesk@opjinvestments.mom
Phone: +16593045431
We aim to acknowledge privacy enquiries promptly and to give a substantive answer within one month. When a request requires more time, we will explain the reason and keep you informed as the matter progresses.
This Privacy Policy applies to the website operated by OPJ INVESTMENTS LTD and to the engagement activity described above. It is provided in English, and it is published alongside our Terms of Service for the benefit of clients, visitors and partners.