Omnipanel legal

Privacy Policy

This policy explains how Omniflo handles personal information collected through the Omnipanel landing page, enquiries, and related pre-contract conversations.

Last updated 2 September 2026

Overview

Omnipanel is Omniflo's proprietary software foundation for tailored operational workflows, integrations, dashboards, document processing, and practical AI-enabled tools. This Privacy Policy covers this public landing page and related enquiries. Client-specific Omnipanel deployments, statements of work, and data processing agreements may include additional terms.

We aim to collect only the information needed to operate the website, respond to enquiries, understand qualified interest, and improve the landing-page experience.

Who We Are

The data controller is OMNIFLO LTD (company number 15648891), registered in England and Wales, with registered office at Flat 90, 281 Kennington Lane, London, England, SE11 5AR, United Kingdom.

For privacy questions or requests, contact privacy@omniflo.ai.

Data We Collect

Information you provide

  • Name, email address, phone number, role, and company details.
  • Messages, enquiry details, and workflow or operational context you choose to share.
  • Scheduling, meeting, and follow-up preferences.
  • Information exchanged during pre-contract discovery conversations.

Information collected automatically

  • Technical information such as browser, device type, operating system, approximate region, referring page, and pages viewed.
  • Cookie and consent preferences stored locally on your device.
  • Limited PostHog page-view and conversion data after you choose cookieless measurement, or persistent analytics data if you consent to analytics storage.
  • Vercel Web Analytics page-view data, which Vercel documents as cookie-free and aggregated.
  • A short-lived cryptographic hash of your IP address used to rate-limit and protect the enquiry form from misuse.

The enquiry reason, name, work email, and message are required so we can review and respond to your request. Fields marked optional do not need to be completed.

How We Use Data

We use personal information for the following purposes and legal bases:

  • To respond to enquiries, assess fit, and arrange discovery conversations: steps requested before entering a contract and our legitimate interest in developing relevant business relationships.
  • To operate, secure, maintain, and prevent misuse of the website: our legitimate interests in providing a reliable and secure service.
  • To understand limited website usage through cookieless PostHog measurement and Vercel Web Analytics: our legitimate interest in improving the website. You can object at any time in Cookie Settings.
  • To use first-party PostHog analytics storage: your consent, which you can withdraw at any time.
  • To meet legal, accounting, tax, and regulatory requirements: compliance with legal obligations and, where relevant, our legitimate interests in establishing or defending legal claims.

We do not use information collected through this website for solely automated decisions that produce legal or similarly significant effects.

Analytics

We use analytics carefully so the website can be improved without collecting unnecessary information.

PostHog

PostHog receives no analytics events while your banner choice is pending. If you select Continue Cookieless, it records limited page views and specific conversion events without analytics cookies or persistent analytics identifiers. Standard campaign parameters from tagged links, such as source, medium, campaign, term, and content, may be recorded for attribution. We remove other URL query parameters before events are sent. PostHog's EU server-hash mode derives a rotating identifier from the project, hostname, IP address, user agent, and a daily salt; the salt is then deleted and the IP address is stripped from the event.

If you accept analytics, PostHog may instead use first-party analytics storage. In both modes, we disable autocapture, person profiles, performance capture, session replay, surveys, and feature flags. Turning off Audience Measurement or enabling Do Not Track blocks PostHog events and clears accessible PostHog analytics storage where possible.

PostHog privacy information: posthog.com/privacy.

Vercel Web Analytics

Vercel Web Analytics is used for privacy-friendly, aggregated page analytics. Vercel states that Web Analytics does not use cookies, does not identify visitors across sites, and discards its visitor hash after 24 hours. This site also removes query strings before Vercel events are sent. Turning off Audience Measurement or enabling Do Not Track also blocks these events.

Vercel privacy information: Vercel Web Analytics privacy and compliance.

You can change optional analytics preferences at any time through the Cookie Policy or the Cookie Settings link in the footer.

Sharing

We do not sell personal information. We may share information with trusted service providers where needed to run the website, handle enquiries, or provide services.

  • Vercel for hosting, deployment infrastructure, and Web Analytics.
  • PostHog for limited cookieless or consented page and conversion analytics.
  • Resend for transactional email delivery where enquiry forms or email workflows are used.
  • Cal.com for appointment availability, booking, and meeting scheduling when you choose to book a call.
  • Professional advisers, regulators, or authorities where legally required.

Some providers may process information in the United States or other countries outside the UK or EEA. Where required, we rely on an applicable adequacy decision or safeguards such as data processing agreements, standard contractual clauses, the UK Addendum or the UK International Data Transfer Agreement, together with vendor security controls.

Retention

  • Cookie consent preferences: up to 180 days unless reset earlier or policy changes require re-consent.
  • General website enquiries: usually up to 3 years from last meaningful contact.
  • PostHog analytics events: up to 12 months, subject to earlier deletion or anonymization.
  • Short-lived enquiry-form security data: the CSRF cookie and rate-limit record expire after approximately 1 hour.
  • Contract, billing, and legal records: as long as needed for legal, tax, accounting, or dispute purposes.

We delete or anonymize information when it is no longer needed for the purposes described above.

Security

We use technical and organizational measures designed to protect personal information from unauthorized access, loss, misuse, or alteration. No internet transmission or storage system can be guaranteed completely secure, so we also limit what this public site collects by default.

The enquiry form uses a one-hour HTTP-only security cookie, validation, a honeypot, submission timing checks, and an in-memory cryptographic IP hash retained for up to one hour to prevent misuse. The raw IP address is not stored by this form protection process.

Your Rights

Depending on where you are based, you may have rights to access, correct, delete, restrict, transfer, or object to processing of your personal information. You may also withdraw consent where processing is based on consent.

If you are in the UK, you may lodge a complaint with the Information Commissioner's Office at ico.org.uk. We ask that you contact us first so we can try to resolve the issue.

If you are in the EEA, you may also complain to the data protection supervisory authority in the country where you live or work, or where you believe an infringement occurred.

Contact

Privacy requests: privacy@omniflo.ai

Post: OMNIFLO LTD, Flat 90, 281 Kennington Lane, London, England, SE11 5AR, United Kingdom.