Legal
Privacy policy
How we handle personal data collected through this website. Last updated 27 July 2026.
Who we are
Outdoor Technology Ltd is the data controller for personal data collected through this website. If you'd rather talk to a person about any of this, use the contact page.
Two different things this policy separates
There is an important distinction to make up front, because they're governed differently:
- This website. If you fill in our contact form, we hold your enquiry. We are the controller and this policy covers it.
- Your control room tenant. If you're a client, the incident and personal data inside your EventControl tenant belongs to you. You are the controller, we are your processor, and that relationship is governed by the data processing agreement in your contract — not by this policy. See security & data.
What we collect through this site
When you use the contact form
Your name, email address, and whatever else you choose to fill in — organisation, phone number, event type, expected attendance, dates and your message. We also record the time of submission and the IP address it came from, which is used only to identify abuse of the form.
We use this solely to reply to you and to discuss your event. It isn't added to a marketing list, and we don't sell or share it.
When you simply browse
Our web server keeps standard access logs — IP address, time, page requested, browser type — as essentially all web servers do. These are used for security and diagnosing faults.
This site sets no analytics or advertising cookies and does not track you across other websites. The only thing stored in your browser is your light/dark theme preference, kept in local storage on your own device. It never reaches us.
Fonts
Typefaces are loaded from Google Fonts, which means your browser makes a request to Google's servers and your IP address is visible to them as part of that.
Legal basis
- Legitimate interests — replying to an enquiry you sent us, and keeping the site secure and working.
- Contract — where we're taking steps at your request before entering into one.
- Legal obligation — where we have to keep records, for example for tax.
How long we keep it
- Enquiries that don't go anywhere: deleted after 12 months.
- Enquiries that become clients: kept for the life of the relationship and then for as long as we're required to keep business records.
- Server access logs: retained by our hosting provider for a short period and then deleted.
Who else sees it
This list is deliberately short:
- Our hosting provider, who operates the servers this site runs on.
- Our email provider, which delivers your enquiry to us and our reply to you.
We don't sell personal data to anybody, and we don't share it for anyone else's marketing.
Your rights
Under UK GDPR you can ask us to give you a copy of what we hold about you, correct it if it's wrong, delete it, restrict or object to how we use it, or provide it in a portable format. Ask via the contact page and we'll respond within one month.
If you're not happy with how we've handled it you can complain to the Information Commissioner's Office at ico.org.uk, though we would ask for the opportunity to resolve it first.
Changes
If we change this policy we'll update the date at the top. Anything significant will be flagged more prominently than that.
Contact
Questions about this policy, or about data we hold: hello@eventcontrol.net.