This policy explains what personal information OSM Vision collects, why we collect it, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.
OSM Vision operates the website osmvision.co.uk, including the courses platform, 1-to-1 booking system, and member account area. For data protection purposes, OSM Vision is the data controller.
Contact: info@osmvision.co.uk
| Data | Why we collect it | Legal basis |
|---|---|---|
| Name and email address | Account registration and to communicate with you | Contract |
| Password (stored as a secure hash — never in plain text) | Account authentication | Contract |
| Course enrolments and progress | To provide course access and track your learning | Contract |
| Quiz results and answers | To calculate your progress and display results | Contract |
| Booking details (name, email, phone, date/time, timezone) | To manage your 1-to-1 or community Q&A session | Contract |
| Payment amount and Stripe session reference | Transaction records and receipt emails. Card details are handled entirely by Stripe — we never see or store them. | Contract / Legal obligation |
| Session token (cookie: osm_portal or osm_student) | To keep you logged in across pages | Strictly necessary — no consent required |
| Audit log entries (anonymised HTTP method, path, timestamp) | Security monitoring and fraud prevention | Legitimate interests |
| Google Analytics (GA4, cookie) | Anonymous website usage statistics to understand how our content is used | Consent (you can opt out at any time) |
We use two types of cookies:
osm_portal and osm_student: secure, HttpOnly session tokens that keep you logged in. These are essential for the site to work and are set only when you log in. No consent is required for these.We do not use advertising, remarketing, or social media tracking cookies.
| Third party | What they receive | Their privacy policy |
|---|---|---|
| Stripe (payment processor) | Your email address for receipts; payment amount. Stripe handles all card data directly. | stripe.com/gb/privacy |
| Google Analytics | Anonymised usage data (pages visited, session duration). Only if you consent. | policies.google.com/privacy |
| Email provider (IONOS) | Your email address and name are used to send confirmation and receipt emails. | ionos.co.uk privacy policy |
| Hetzner (server hosting) | All data is stored on servers located in Germany (EU). Hetzner does not process your personal data. | hetzner.com privacy policy |
We do not sell, rent, or trade your personal data with any other third parties.
| Data type | Retention period |
|---|---|
| Account and profile data | Until you delete your account |
| Course progress and quiz results | Until you delete your account |
| Booking records | 3 years from the session date (for accounting purposes) |
| Login sessions | 30 days from login, or until you sign out |
| Security audit logs | 90 days |
| Google Analytics data | 14 months (Google's default retention) |
You have the following rights regarding your personal data:
osm_cookie_consentTo exercise any of these rights, email us at info@osmvision.co.uk. We will respond within 30 days.
All passwords are hashed using bcrypt before storage — we cannot recover your plain-text password. Session cookies are marked HttpOnly and Secure so they cannot be accessed by scripts or sent over unencrypted connections. All data is transmitted over HTTPS.
Our platform is intended for adults. We do not knowingly collect data from anyone under the age of 16. If you believe a child has registered, please contact us and we will delete the account immediately.
We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Significant changes will be communicated by email to registered members.
Questions about this policy? Email info@osmvision.co.uk