Privacy Policy
Uberplas Ltd trading as Ozdemir
Version 1.0
1. Who we are
Ozdemir is a Salesforce consultancy and one of the trading brands of Uberplas Ltd, a company registered in England and Wales (company number 09712076, registered office Suite LP29379, 20-22 Wenlock Road, London N1 7GU, United Kingdom) (in this policy, “Ozdemir“, “we“, “us” or “our“). Uberplas Ltd operates its business through more than one trading brand, of which Ozdemir is one. We are the data controller for the personal data we collect through our website ozdemir.co.uk and in the course of our business.
This policy explains what personal data we collect, how and why we use it, who we share it with, how long we keep it, the legal bases we rely on, and your rights under the UK GDPR and the Data Protection Act 2018 (as amended by the Data (Use and Access) Act 2025).
2. Scope of this policy
This policy applies to personal data we process about visitors to our website; people who contact us or submit an enquiry; prospective, current and former clients and their personnel; suppliers and business contacts; and recipients of our marketing. Where we process personal data on behalf of a client as a processor (for example, when configuring their Salesforce environment), that processing is governed by our services agreement and the client’s own privacy notice, not this policy.
3. The personal data we collect
Information you give us. When you complete our contact form we collect your first name, last name, business email address, company name, telephone number, country, and the content of your message. If you engage us we may also collect billing details, job title and correspondence.
Information we collect automatically. When you use our website we collect technical and usage data through cookies and similar technologies, including IP address, device and browser type, pages viewed, referring URLs, and interactions with our emails and forms. Our website and marketing use Salesforce Marketing Cloud Account Engagement (Pardot), which sets tracking cookies via our domain info.ozdemir.co.uk.
Information from other sources. We may receive data from publicly available sources (such as LinkedIn or Companies House), referrals, and our analytics and marketing providers.
We do not intentionally collect special category data through our website.
4. How and why we use your data, and our lawful bases
We rely on the following lawful bases under Article 6 of the UK GDPR:
| Purpose | Personal data | Lawful basis |
| Responding to enquiries and preparing quotes | Identity, contact details, enquiry content | Legitimate interests; and/or steps taken at your request before entering a contract |
| Providing our consultancy services and managing the client relationship | Identity, contact, billing, correspondence | Performance of a contract |
| Sending marketing about our services | Identity, contact, engagement data | Consent, or legitimate interests under the PECR business “soft opt-in” (opt out any time) |
| Website analytics and improving our site | Usage and device data | Consent (non-essential cookies) and legitimate interests |
| Security, fraud prevention and record-keeping | Technical and account data | Legitimate interests and legal obligation |
| Legal, accounting and regulatory compliance | Identity, billing, correspondence | Legal obligation |
Where we rely on legitimate interests, we have assessed that those interests are not overridden by your rights and freedoms. You may ask us for details of that assessment.
5. Marketing and your choices
We only send marketing where we are permitted to do so. You can opt out at any time using the unsubscribe link in any marketing email or by contacting us. Opting out of marketing will not affect communications about a service we are actively providing to you.
6. Cookies and tracking technologies
Our website uses cookies and similar technologies. Strictly necessary cookies are set to make the site work. Non-essential cookies — including analytics and Marketing Cloud Account Engagement (Pardot) tracking — are only set with your consent, which you can give or withdraw at any time through our cookie banner or settings. For details of the specific cookies we use, see our Cookie Notice [link]. Consent requirements are set by the Privacy and Electronic Communications Regulations 2003 (PECR), as amended.
7. Who we share your data with
We share personal data with:
-
our group company Uberplas Ltd, which is our contracting and billing entity;
-
service providers acting as our processors, including Salesforce (CRM and Marketing Cloud Account Engagement), Google (Google Workspace email and productivity);
-
professional advisers such as lawyers, accountants, auditors and insurers;
-
authorities, regulators or law enforcement where required by law; and
-
a purchaser or successor in the event of a sale or reorganisation of our business.
We put in place written contracts with our processors that meet Article 28 of the UK GDPR, requiring them to protect your data and act only on our instructions.
8. International transfers
Some of our providers (including Salesforce and Google) process data outside the UK. Where personal data is transferred outside the UK we rely on UK adequacy regulations, the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, together with appropriate safeguards. You can ask us for a copy of the safeguards in place.
9. How long we keep your data
We keep personal data only for as long as necessary for the purposes set out above. Enquiry data that does not lead to an engagement is typically kept for up to [24] months. Client records are kept for the duration of the engagement and for [6] years afterwards, to meet legal, tax and limitation-period requirements, after which they are deleted or anonymised.
10. How we protect your data
We maintain appropriate technical and organisational measures — including access controls, encryption in transit and supplier due diligence — to protect personal data against unauthorised access, loss or misuse.
11. Your rights
Under the UK GDPR you have the right to be informed; to access your data; to have inaccurate data corrected; to have data erased; to restrict processing; to data portability; to object to processing (including direct marketing); and not to be subject to solely automated decisions with legal or similarly significant effects. Where we rely on consent, you may withdraw it at any time. To exercise any right, contact us using the details below. We will respond within one month, normally free of charge.
12. Complaints
If you have a concern, please contact us first and we will try to resolve it. You also have the right to complain to the ICO (www.ico.org.uk; helpline 0303 123 1113). We would appreciate the chance to address your concerns before you approach the ICO.
13. Third-party links
Our website may contain links to third-party sites. We are not responsible for their privacy practices and encourage you to read their notices.
14. Children
Our website and services are directed at businesses and are not intended for children. We do not knowingly collect data about children.
15. Changes to this policy
We may update this policy from time to time. The current version is shown at the top. We will notify you of material changes where appropriate.
16. Contact us
Data controller: Uberplas Ltd trading as Ozdemir
Email: info@ozdemir.co.uk
Address: Suite LP29379, 20-22 Wenlock Road, London N1 7GU, United Kingdom
For data protection queries, please mark your correspondence “Data Protection”.