Privacy policy

01Who we are

OneiD is a product of Oltin, a company founded and based in the United Kingdom. OneiD is built for organisations anywhere in the world. In this policy, “OneiD”, “we” and “us” mean Oltin.

This policy covers the website at oltinid.com, its documentation, and the demonstration services at demo.oltinid.com and auth.oltinid.com.

02Our role

For this website and the demonstration services, we decide how personal data is used. We are the controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For an organisation that uses OneiD, the organisation decides which users and data go into its OneiD and is the controller of that data. Where we run OneiD for the organisation, we process that data only on its instructions, as its processor. See Data in an organisation’s OneiD.

03What we collect

Request logs. Like any website, the servers that deliver these pages record technical details of each request: your IP address, your browser’s user agent, the page you asked for and the time.

Emails you send us. The contact page does not send anything itself. It prepares an email in your own email app. When you send it, we receive your name, your email address and what you wrote at support@oltinid.com.

Your theme choice. If you switch between light and dark, your browser remembers the choice on your device. It is never sent to us.

Demonstration sign-ins. If you sign in to the demonstration services, see The demonstration services.

04What we do not do

• We do not use cookies, analytics, advertising or tracking pixels on this website.
• We do not load fonts, scripts or images from other companies when you visit.
• We do not build profiles of visitors or make automated decisions about you.
• We do not sell or rent personal data, and we do not share it for advertising.

05How and why we use it

• To run and secure the website and the demonstration services, including finding faults and stopping abuse. Lawful basis: our legitimate interest in keeping our services available and safe.
• To answer your message and follow up on it. Lawful basis: our legitimate interest in replying to people who contact us, or taking steps at your request before a contract.
• To meet our legal obligations, for example keeping business records or answering lawful requests. Lawful basis: legal obligation.

We do not use your data for marketing unless you ask us to keep you informed.

06Who we share it with

We use a small number of service providers. Each acts on our instructions under a written agreement:

• Google Cloud: hosts this website and the demonstration services, and keeps their request logs.
• Zoho: delivers and stores email sent to support@oltinid.com.
• Cloudflare: answers DNS queries for oltinid.com. Your visits do not pass through Cloudflare.

We may also disclose data where the law requires it, to protect the rights and safety of our users or of OneiD, or to a buyer or successor if our business is reorganised or sold, under this same policy.

07Where it is processed

This website and the demonstration services run in Google Cloud’s Belgium region, and our email is held in Zoho’s European data centres. The UK recognises the European Economic Area as giving adequate protection. If a provider processes personal data outside the UK or the European Economic Area, we make sure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

08How long we keep it

• Request logs: 30 days, then deleted automatically.
• Emails: two years after our last exchange, then deleted. If an email becomes part of a contract with you, we keep it for as long as that contract and the law require, usually six years after the contract ends.
• Demonstration data: demo accounts, sign-in records and audit entries can be reset or deleted at any time.

09How we protect it

Every page is served over HTTPS only, with strict security headers. Access to our systems is limited to the people who need it. No system is perfectly secure; if we learn of a breach that affects your personal data, we will tell you and the regulator as the law requires.

10Your rights

Under UK GDPR you can ask us to:

• give you a copy of the personal data we hold about you;
• correct it if it is wrong, or delete it;
• restrict how we use it, or object to our using it;
• send it to you or another organisation in a portable format.

We give these rights to everyone, wherever you live. We answer within one month and do not charge for it. To use them, write to us as described under Contact.

If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner’s Office at ico.org.uk, or to the data protection authority where you live. We would be grateful for the chance to put things right first.

11The demonstration services

The demo application (demo.oltinid.com) and the demonstration instance of OneiD (auth.oltinid.com) let you try OneiD. If you sign in with a demo account, they set a cookie that keeps you signed in for up to 8 hours, and they record sign-ins in their audit log. These cookies are strictly necessary for signing in. Do not use real personal data there, or a password that you use anywhere else.

12Data in an organisation’s OneiD

If your employer, school or another organisation signs you in through OneiD, that organisation is responsible for your account and decides what data it holds. Its own privacy notice applies.

• When we run OneiD for an organisation, we process that data only to provide the service, under a data processing agreement with the organisation.
• When an organisation runs OneiD in its own environment, the data stays with the organisation and we do not receive it.

Please send requests about that data to the organisation. If you send them to us, we will pass them on.

13Children

This website and the demonstration services are meant for businesses and developers, not for children. We do not knowingly collect personal data from anyone under 16. If you think a child has sent us personal data, contact us and we will delete it.

14Changes to this policy

We will update this policy when what we do changes. The date at the top shows the latest version. If a change matters to you, we will make it clear on this page before it takes effect.

15Contact

For anything about privacy, including using your rights, email support@oltinid.com with “Privacy” in the subject, or use the contact page.