Privacy Policy

Oskari Limited — oskari.co.uk — Last updated: 17 July 2026

Oskari Limited (“Oskari”, “we”, “us” or “our”) is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, share and protect personal data when you visit our website at www.oskari.co.uk (the “Site”), contact us, or otherwise interact with us, and sets out your rights in relation to that data.

This Policy is written to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR). Please also see our separate Cookies Policy, which explains in more detail the cookies and similar technologies used on the Site.

1. Who we are

Oskari Limited is a company registered in England and Wales under company number 11944424, with its Head Office in London, United Kingdom. Oskari is the data controller responsible for the personal data described in this Policy.

Contact details: hello@oskari.co.uk

If we appoint a Data Protection Officer or nominated privacy contact, their details will be provided here or made available on request.

2. Personal data we collect

2.1 Information you provide to us

When you use the “Say Hello” contact form on our Site, submit an enquiry, register interest in our Insights content, or otherwise correspond with us by email or phone, we collect the personal data you choose to give us, which may include:

First name and surname
Job title and organisation
Email address
Sector focus (e.g. aviation or rail)
The content of your message and any other information you choose to include

If you engage us as a client or supplier, we may also collect additional business contact details, contractual information and correspondence necessary to deliver our advisory and implementation services.

2.2 Information we collect automatically

When you visit our Site, certain information is collected automatically via cookies and similar technologies, including your IP address, device and browser type, operating system, referring website, pages viewed, and the date, time and duration of your visit. Details of the specific cookies used, and how to control them, are set out in our Cookies Policy.

2.3 Information from other sources

We may occasionally receive limited business contact information about you from publicly available sources (such as your organisation’s website or LinkedIn), from industry events, or from introductions by mutual contacts, in each case for legitimate business development purposes.

3. How we use your personal data and our legal basis

We only use your personal data where we have a valid legal basis to do so under the UK GDPR. The table below summarises our main purposes and the corresponding legal basis.

To respond to enquiries submitted via our contact form and to correspond with you — legal basis: legitimate interests (responding to business enquiries) and, where a contract is in prospect, taking steps prior to entering into a contract.
To provide, manage and deliver our advisory and implementation services to clients — legal basis: performance of a contract.
To send relevant updates, Insights content or information about our services to business contacts — legal basis: legitimate interests and/or consent, where required by PECR. You may opt out at any time.
To operate, secure and improve our Site, including monitoring performance and diagnosing issues — legal basis: legitimate interests and/or consent for non-essential cookies (see Cookies Policy).
To comply with legal, regulatory and accounting obligations, and to establish, exercise or defend legal claims — legal basis: legal obligation and legitimate interests.
To carry out due diligence, vet prospective clients or partners, and manage confidentiality/NDA arrangements referenced on our Site — legal basis: legitimate interests.

Where we rely on legitimate interests, we have considered that this processing is proportionate, has a minimal privacy impact, and you would reasonably expect us to use your data in this way. You have the right to object to processing based on legitimate interests — see Section 7 below.

4. Who we share your data with

We do not sell your personal data. We may share personal data with the following categories of recipients, only to the extent necessary:

Website hosting and technology providers, including Wix.com, which hosts and operates the Site’s infrastructure, forms and cookie consent tools.
IT, email, cloud storage and customer relationship management providers who process data on our behalf under appropriate data processing agreements.
Professional advisers, including lawyers, accountants and insurers, where necessary for our legitimate business purposes.
Regulators, law enforcement or other authorities, where we are required to do so by law or to protect our legal rights.
A buyer or successor entity in the event of a merger, acquisition or restructuring of our business, subject to appropriate confidentiality protections.

5. International transfers

Some of our service providers, including elements of our Wix website infrastructure, may store or process personal data outside the United Kingdom, including in the European Economic Area, the United States or other jurisdictions. Where this occurs, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or reliance on an adequacy decision recognised under UK data protection law. You can request further information about these safeguards by contacting us using the details in Section 10.

6. Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting or reporting requirements. As a general guide:

Contact form enquiries that do not lead to a business relationship are typically retained for up to 24 months from the date of last contact, after which they are deleted or anonymised.
Client and contract-related records are retained for the duration of the engagement and for a further period afterwards as required by our legal, tax and regulatory obligations (typically up to 7 years).
Website analytics data is retained in accordance with the retention settings of the relevant analytics tool, as described in our Cookies Policy.

7. Your rights

Subject to certain conditions and exemptions under UK data protection law, you have the right to:

Access the personal data we hold about you and receive a copy of it.
Request correction of inaccurate or incomplete personal data.
Request erasure of your personal data in certain circumstances.
Request that we restrict our processing of your personal data in certain circumstances.
Object to our processing of your personal data where we rely on legitimate interests, including direct marketing.
Request that we transfer certain personal data to you or a third party (data portability).
Withdraw consent at any time where we rely on consent as our legal basis, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at hello@oskari.co.uk. We will respond within one month, in accordance with UK GDPR requirements. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113, although we would welcome the opportunity to address your concerns directly first.

8. Security

We employ appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure or destruction, including access controls, encryption in transit, and the use of reputable, security-vetted service providers such as Wix.com. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children’s privacy

Our Site and services are directed at business professionals and are not intended for, or directed at, children. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

10. Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact:

Oskari Limited

Head Office, London, United Kingdom

Email: hello@oskari.co.uk

11. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. The “Last updated” date at the top of this Policy indicates when it was last revised. We encourage you to review this Policy periodically.