Privacy Policy

1. Controller and contact

Obi-Pal Ltd, 71–75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ

Contact email: [email protected]

2. Data we may collect

• Identity data, such as name, title or company name when you provide it.
• Contact data, such as email address, phone number or correspondence details.
• Inquiry data, including the property, destination, budget or request you submit.
• Account and authentication data for users of restricted platform features.
• Technical data needed for security and operation, such as IP address, browser, device and request logs.
• Usage data when optional analytics is enabled in accordance with your consent choice.

3. How we use data

• Respond to inquiries and prepare relevant property information.
• Provide platform access, account functions and advisory services.
• Maintain security, prevent abuse and troubleshoot technical problems.
• Improve website functionality and user experience where permitted.
• Comply with legal and regulatory obligations.
• Send marketing communications only where a valid legal basis and required consent exist.

4. Legal bases

Depending on the activity, processing may be based on consent, steps requested before a contract, performance of a contract, compliance with a legal obligation or a legitimate interest such as service security and responding to a business inquiry. We assess the appropriate basis for each purpose.

5. Sharing and international transfers

Data may be shared with authorised Obi Pal personnel, relevant agents or project partners needed to answer a request, IT and hosting providers, professional advisers, and authorities where required by law. Where data is transferred internationally, we use appropriate safeguards required by applicable law.

6. Retention

We retain personal data only for as long as needed for the stated purpose, an active business relationship, security, dispute handling or a legal obligation. Different categories can have different retention periods.

7. Your rights

Depending on your location and applicable law, you may request access, correction, deletion, restriction, portability, objection to certain processing, or withdrawal of consent. Withdrawing consent does not affect processing that was lawful before withdrawal.

To exercise a right, contact [email protected].

8. Cookies and analytics

Essential browser technologies support security, authentication and consent preferences. Optional analytics is controlled by the cookie banner. Detailed purposes, services and choices are described in the Cookie Policy available in the footer.

9. Security

We use appropriate technical and organisational measures designed to protect data against unauthorised access, alteration, loss or disclosure. No internet service can guarantee absolute security.

10. Changes

We may update this policy. The current version and last-updated date will be published on this page.