Who we are
OTHRS Ltd is the data controller for personal data processed through the OTHRS platform. We are registered in England and Wales. You can contact our privacy team at privacy@othrs.ai.
Information we collect
We collect data you provide, data generated through platform use and limited technical data needed to operate the service.
Account data
Your name, work email, password (stored as a hash), authentication tokens, role and account preferences.
Organisation data
The organisations you are linked to: name, registration details, sector, coverage, regions, verification status, billing entity and team membership.
Profile information
Job title, biography, sector experience, regions of operation, LinkedIn URL, phone, profile photo and any badges or verification indicators.
Messages and communications
Messages, notifications, introduction requests and Deal Room conversations sent between you and other members, along with metadata such as timestamps and read status. Content is encrypted in transit and at rest.
Uploaded documents
Documents you upload to organisation profiles, opportunities or Deal Rooms, together with file metadata and access logs for audit.
Usage analytics
Aggregated, privacy-preserving information about how the platform is used: pages visited, features engaged, error reports and performance signals. Where analytics cookies are not consented to, this data is limited to essential operational telemetry.
Lawful basis for processing
- Contract — to provide the platform you have subscribed to.
- Legitimate interests — to secure the platform, prevent fraud, improve features and contact users about service matters.
- Consent — for optional analytics, functional and marketing cookies, and optional communications.
- Legal obligation — to meet tax, accounting and regulatory obligations.
Data retention
We retain account data for as long as your account is active. Where an account is deleted, we retain a minimal audit trail (including legal acceptances and billing records) for up to seven years to meet legal and accounting requirements. Deal Room data is retained according to the participating organisations' configured retention.
Third party processors
We engage carefully selected processors to deliver the service, including:
- Cloud infrastructure and database hosting providers (UK / EU regions);
- Authentication and identity verification providers;
- Payment processing providers for subscription billing;
- Email delivery and transactional messaging providers;
- Customer support and error monitoring providers.
All processors are bound by written data processing terms and are required to meet appropriate security standards.
International transfers
Where data is transferred outside the UK, we rely on UK adequacy regulations, the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or another lawful transfer mechanism.
Your rights under UK GDPR
- Right to be informed about how your data is used;
- Right of access to your personal data;
- Right to rectification of inaccurate data;
- Right to erasure ("right to be forgotten") in certain cases;
- Right to restrict or object to processing;
- Right to data portability;
- Rights related to automated decision-making and profiling;
- Right to withdraw consent at any time;
- Right to lodge a complaint with the Information Commissioner's Office (ICO).
Subject access requests
To request a copy of the personal data we hold about you, email privacy@othrs.ai from the address associated with your account. We will respond within one month.
Data deletion requests
You can request account deletion from the Account & Plan area or by emailing our privacy team. We will confirm the request, complete deletion of personal data within 30 days and retain only the minimal audit information described above.
Contact details
For any privacy-related question or to exercise your rights, contact privacy@othrs.ai.