Ostrave
// OSTRAVE — LEGAL — PRIVACY POLICY

Privacy Policy

Last updated: January 2026 — Revision 01-A

SECTION 01 — INTRODUCTION

About This Policy

Ostrave ("we", "us", "our") operates the website at ostrave.info. This privacy policy sets out how Ostrave collects, uses, stores, and protects personal data submitted through this website, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The data controller for this website is Ostrave, 34 Bermondsey Street, London SE1 3UD, United Kingdom. You can contact us at [email protected] or by telephone at +44 20 7183 6492.

SECTION 02 — DATA WE COLLECT

Personal Data Collected

Ostrave collects personal data only when you voluntarily provide it. The categories of data collected are:

  • ── Contact form submissions: name, email address, subject selection, and message content provided when completing the contact form at contact.php.
  • ── Session and usage data: IP address, browser type, device type, pages visited, time on site, and referral URL — collected automatically via session cookies when you visit the website.
  • ── Cookie preference data: your cookie consent selection (Accept All, Partial, Functional Only) is stored locally in your browser to remember your preference on return visits.

Ostrave does not collect sensitive personal data categories as defined under UK GDPR Article 9, including data relating to health, biometric identifiers, or racial or ethnic origin.

SECTION 03 — HOW WE USE YOUR DATA

Lawful Basis and Purpose

Each use of personal data is grounded in one of the lawful bases under UK GDPR Article 6:

PURPOSE A — ENQUIRY HANDLING

Contact form data (name, email, message) is used to respond to your written enquiry. Lawful basis: performance of a contract or pre-contractual steps (Article 6(1)(b)).

PURPOSE B — WEBSITE IMPROVEMENT

Aggregated, anonymised session data is used to understand how visitors navigate the site and to improve content structure. Lawful basis: legitimate interests (Article 6(1)(f)), provided your cookie preferences permit analytical cookies.

PURPOSE C — LEGAL OBLIGATIONS

Where required by applicable law, Ostrave may retain or disclose personal data to comply with a legal obligation. Lawful basis: compliance with a legal obligation (Article 6(1)(c)).

SECTION 04 — DATA RETENTION

How Long We Keep Data

Contact form correspondence is retained for a maximum of 24 months from the date of the final written exchange, after which it is permanently deleted. If an ongoing engagement has been established, correspondence is retained for the duration of that engagement plus 12 months.

Anonymised, aggregated session analytics data is retained for up to 26 months. Cookie preference records stored in your browser are governed by the individual cookie lifespan, as detailed in the Cookie Policy.

SECTION 05 — YOUR RIGHTS

Rights Under UK GDPR

Under UK GDPR, you have the following rights in relation to your personal data held by Ostrave:

  • ──Right of access: you may request a copy of the personal data Ostrave holds about you.
  • ──Right to rectification: you may request correction of inaccurate or incomplete data.
  • ──Right to erasure: you may request deletion of your data, subject to any overriding legal obligations.
  • ──Right to restrict processing: you may request that we limit the use of your data in certain circumstances.
  • ──Right to data portability: where processing is based on consent or contract, you may request a machine-readable copy of your data.
  • ──Right to object: you may object to processing based on legitimate interests.

To exercise any of these rights, contact us at [email protected]. Ostrave will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

SECTION 06 — THIRD PARTIES & DATA TRANSFERS

Third-Party Services

Ostrave uses a limited number of third-party services to operate this website. These include:

  • ──Google Fonts: used to serve display and body typefaces. Font requests may transfer your IP address to Google's servers. Governed by Google's privacy policy.
  • ──Google Maps embed (contact page): the embedded map on the contact page may set cookies and transfer IP address data to Google when loaded. This transfer occurs only if you have accepted non-functional cookies.
  • ──CDN-hosted libraries: JavaScript and CSS libraries are loaded from jsdelivr.net, cdnjs.cloudflare.com, and unpkg.com. These services may log your IP address in their standard server access logs.

Ostrave does not sell personal data to third parties and does not use personal data for automated profiling or automated decision-making that produces legal effects.

SECTION 07 — SECURITY

Data Security Measures

Ostrave operates the website over HTTPS, enforced via the server configuration. Correspondence data received through the contact form is held in a restricted-access environment. Access is limited to authorised Ostrave personnel involved in responding to enquiries.

While Ostrave takes reasonable steps to protect personal data, no transmission over the internet is entirely secure. In the event of a data breach that is likely to result in risk to individuals, Ostrave will notify the ICO within 72 hours of becoming aware of the breach and will notify affected individuals without undue delay where required.

SECTION 08 — COOKIES

Cookie Usage

Ostrave uses cookies to maintain session functionality and, with your consent, to collect anonymised analytics data. A full description of the cookies in use, their categories, durations, and opt-out mechanisms is provided in the Cookie Policy. You may update your cookie preferences at any time using the Cookie Settings link in the footer.

SECTION 09 — POLICY UPDATES

Changes to This Policy

This policy is reviewed and updated periodically. The revision date at the top of this page reflects the most recent update. Continued use of this website after a policy revision constitutes acknowledgement of the updated terms. For material changes affecting how your personal data is used, Ostrave will place a notice on the homepage for a period of 30 days following the revision.

SECTION 10 — CONTACT

Data Controller Contact

For all privacy-related enquiries, data subject requests, or complaints, contact Ostrave at:

Ostrave
34 Bermondsey Street
London SE1 3UD
United Kingdom

Email: [email protected]
Telephone: +44 20 7183 6492