Privacy notice
This notice explains what personal information O6 Labs collects, why, and what your rights are. We've kept it in plain English. If anything is unclear, email hq@osix.co.uk.
Who we are
O6 Labs helps local businesses follow up their enquiries and turn them into bookings. It is run by Ty McKenzie and based in Kent, UK. Our website is osix.co.uk and you can contact us at hq@osix.co.uk.
Our full business details, including our registered name, postal address and data protection registration, will be shown here once our business registration is complete.
The two ways we handle personal information
1. When you deal with us directly. For example, you fill in our contact form, book a call, email us, become a client, or we contact your business about our service. Here we decide how your information is used, so we are the controller.
2. When we work on behalf of a business. If you are a customer or enquirer of a business we work with, that business decides how your information is used and is the controller. We are their processor: we only use your details on the business's written instructions, to help them get in touch about appointments and bookings. See If you're a customer of a business we work with below.
What we collect from our website
- Contact form: your name, business name and email address, and the problem you'd most like to fix if you choose one.
- Emails, calls and messages: what you send us and your contact details, such as your name and phone number.
- Booking a call: if you book a time through our online calendar, your name, email, phone number if given, and the time you chose.
- Technical information: our web host keeps standard server logs (such as IP address, browser type and the pages requested) for security and to keep the site running.
You don't have to give us your details, but we can't reply to you without a way to get in touch.
If we've contacted you about our service
We get in touch with local businesses that we think our service could help.
- Where we got your details: public sources, such as your business's website, online business listings and Companies House.
- What we keep: your name, role, business, business phone number and email address, and notes of our conversations with you.
- Legal basis: legitimate interests (telling businesses about a service that may help them).
- How we contact you: we only email where the law allows. Limited companies can be emailed with an easy way to opt out. Sole traders and partnerships are only emailed with their permission. Before calling, we check numbers against the Telephone Preference Service and the Corporate Telephone Preference Service.
- Stopping: tell us at any time, by replying or emailing hq@osix.co.uk, and we'll stop. We keep a short "do not contact" note so we never get in touch again.
- How long: up to 12 months after we last spoke, unless you become a client.
Why we use it, and our legal basis
| What we do | Legal basis |
|---|---|
| Reply to your enquiry and arrange a call | Legitimate interests (responding to people who contact us), or steps before entering a contract |
| Contact businesses about our service | Legitimate interests (see above) |
| Provide our service to clients and send invoices | Contract |
| Keep business and tax records | Legal obligation |
| Keep the website and our systems secure | Legitimate interests |
We don't add website enquirers to a mailing list, and we never sell personal information. We don't make decisions about you using only automated processing that have legal or similarly significant effects.
If you're a customer of a business we work with
A business you've been in touch with, or whose advert you responded to, may ask us to contact you by text message or email on its behalf. For example, to offer you an appointment or visit you asked about, to remind you of a booking, or to let you know you're due back.
- What we use: your name, contact details and the information the business needs to arrange your appointment. We don't put medical or other sensitive details in our messages.
- Who decides: the business. It is responsible for having a lawful reason to contact you. We only message people the business tells us it is allowed to contact.
- Stopping messages: every message tells you how to stop, for example by replying STOP. We act on it straight away and tell the business.
- Automated replies: some replies are written automatically to help book appointments quickly. If you ask whether you're talking to a real person, you'll be told the truth, and anything sensitive, such as your health, is passed to the business's own team.
- When it ends: when our work for a business finishes, we return or delete its customer information as our agreement with that business requires.
To use your data rights (for example, to see or delete your information), contact the business. You can also email us and we'll pass your request to them promptly.
Who we share information with
We use trusted service providers to run our business. They only process information on our instructions:
- Hostinger: website hosting
- Google Workspace: email
- Google Calendar: our online booking calendar
- Attio: our contact-management system for enquiries and business contacts
- Our messaging and booking provider: the texts and emails we send on our clients' behalf, and appointment booking
- Meta (Facebook and Instagram): adverts we run for clients, and the enquiries those adverts bring in
- WhatsApp (owned by Meta): only if you choose to message us there
- Make.com or Zapier: connecting our systems
- Stripe: payments from clients
Some of these providers store or process data outside the UK, including in the United States. Where that happens, we rely on the safeguards UK law requires, such as the UK's adequacy regulations or approved contract terms.
We may also share information if the law requires it, or with professional advisers such as our accountant.
Cookies
Cookies are small files a website can store on your device. Ours doesn't use any cookies for tracking, analytics or advertising, and doesn't set any cookies of its own.
- Fonts: our fonts are stored on our own website, so your browser doesn't contact any font company when you visit.
- Booking calendar: run by Google. It only opens, on Google's own website, if you tap "Pick a time that suits you". Google may then set its own cookies, as described in Google's cookie policy.
Because we don't use optional cookies, we don't show a cookie banner. If that changes, we'll ask for your permission first.
How long we keep it
- Website enquiries that don't lead to working together: up to 12 months.
- Businesses we've contacted about our service: up to 12 months after we last spoke.
- Client records and invoices: 6 years after our work ends, for tax and legal reasons.
- Our clients' customer data: only for as long as the client instructs, then returned or deleted.
- Opt-out ("do not contact") records: kept for as long as needed to make sure we never contact that person again.
Your rights
You have the right to ask for a copy of your information, to have it corrected or deleted, to object to or restrict how we use it, and to ask for it to be moved to another organisation. You can object to us contacting you about our service at any time, and we'll stop. Where we rely on your permission, you can withdraw it at any time. Email hq@osix.co.uk. We'll reply within one month.
If you're unhappy with how we've handled your information, please tell us first. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint or 0303 123 1113.
Keeping information safe
We use secure, reputable systems and limit who can see personal information to the people who need it to do their job.
Children
Our service is for businesses. We don't knowingly collect information from anyone under 18 through this website.
Changes to this notice
We'll update this page if anything changes. The date at the top shows when it was last updated.