Legal
Privacy notice
Who is responsible
Abraxas Group Limited operates Olodu and is the controller of the personal data described on this page. When we work on a customer's systems, the customer is the controller of the personal data in those systems and we act as its processor under our data processing terms.
What we collect, and why
| Data | Why | Legal basis | Kept for |
|---|---|---|---|
| What you enter in the audit or contact form: company, name, role, work email, website, company size, and what you tell us about your systems | To arrange the audit or the conversation you asked for, and to reply to you | Your request, and our legitimate interest in answering it | Up to 24 months after our last contact, unless you become a customer |
| A one-way hash of your network address when you send the form | To limit abuse of the form. We do not store the address itself | Legitimate interest in security | With the request |
| Portal accounts: name, work email, role, sign-in times, and a hash of your password | To give you and your colleagues access to your company's portal | Our contract with your company | While the account is active, then as the contract requires |
| Sign-in attempts (a hash of the email or address tried, the time, and the result) | To protect accounts against password guessing | Legitimate interest in security | Up to 30 days |
| Standard web server logs (address, time, page, browser type) | To keep the site running and secure | Legitimate interest in security | A short period, then deleted |
Cookies and tracking
This site sets no cookie for visitors. If you sign in to the portal, we set one session cookie that keeps you signed in for up to 12 hours; it is required for the portal to work. We use no analytics, advertising or social media trackers, and the site loads no scripts or fonts from other companies.
Who we share it with
We do not sell personal data or share it for marketing. Our hosting provider stores the servers this site runs on, in the European Union. We use AI model providers to do engineering work on customer systems; the details from this site's forms are not sent to them. We may disclose data if the law requires it.
Your rights
You can ask us for a copy of your personal data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable form. You can also complain to your data protection authority. To use any of these rights, write to us and say what you need; we reply within one month.
Security
Connections to this site are encrypted. Passwords are stored only as strong one-way hashes, sessions are stored as hashes, and access to customer systems follows the rules on our security page.
Changes
If we change this notice, the date at the top changes. If a change matters to you, for example a new use of your data, we tell portal users in the portal before it applies.