Legal

Privacy policy

Last updated 17 September 2026

Scope

This policy explains how OsmicSoft Ltd handles personal data when you visit osmicpeople.com, subscribe to OsmicPeople, or use a customer workspace.

Data we collect on the website

Contact and account details you give us (name, work email, company, employee count), billing details handled by Stripe (we receive a customer reference and payment status, never full card numbers), and basic technical logs (IP address, browser, pages viewed) used for security and to keep the site working.

Data inside customer workspaces

Employers use OsmicPeople to manage their employees' records. For that data the employer is the controller and OsmicSoft is a processor acting on the employer's instructions. Employees should direct requests about their data to their employer.

Why we process data

To provide and bill the Service (contract), to secure it and prevent abuse (legitimate interests), to send service messages such as invitations, payment receipts and security alerts (contract), and, only if you opt in, product updates (consent).

Sub-processors

We use a small number of providers to run the Service: hosting and storage infrastructure, Stripe for payments, and an email delivery provider for transactional mail. A current list is available on request.

Retention

Website enquiries are kept for up to 24 months. Workspace data is kept for the life of the subscription and deleted within 90 days of termination unless you ask for earlier deletion or the law requires longer retention. Payment records are kept for the period required by tax law.

Your rights

Under UK GDPR you can ask for access to, correction of, or deletion of your personal data, object to or restrict processing, and ask for portability. Write to support@osmicpeople.com. You can also complain to the Information Commissioner's Office.

Security

The Security page describes the technical and organisational measures in place. No system is perfectly secure; if we become aware of a breach affecting your data we will notify you without undue delay.

International transfers

Where data leaves the UK, we rely on adequacy regulations or standard contractual clauses with the recipient.