Legal
Privacy notice
How we handle personal data. Last updated May 2026.
Data controller
Operational Trust, Ireland. Contact: hello@operational-trust.com
What we collect
We collect only what you provide directly: your name, email address, organisation, role, and the message you submit through the contact form or readiness check. We do not operate accounts, track logins, or process payment data.
How we use it
Contact form submissions are used solely to respond to your enquiry and, where a Review engagement follows, to conduct and document that Review. We do not sell, share, or transfer personal data to third parties for marketing or profiling purposes.
Legal basis
Processing is based on legitimate interests (responding to enquiries) and, where a Review contract is agreed, on contractual necessity. We rely on your consent for any follow-up communications beyond the scope of your original enquiry.
Retention
Enquiry data is retained for up to 24 months or until you request deletion, whichever is sooner. Review engagement records are retained for six years in line with standard commercial record-keeping practice.
Your rights
Under GDPR you have the right to access, rectify, erase, or port your data, and to object to or restrict processing. To exercise any of these rights, email hello@operational-trust.com. You also have the right to lodge a complaint with the Data Protection Commission (Ireland): dataprotection.ie.
Analytics
This site uses Cloudflare Web Analytics. It is cookieless and does not collect personally identifiable information. No tracking pixels, third-party advertising scripts, or cross-site identifiers are present.
Cookies
We do not set cookies for tracking or analytics. The contact form uses browser localStorage to remember your name and email between visits as a convenience feature. This data remains on your device and is not transmitted to us until you submit a form. You can clear it at any time through your browser settings.