Scope of this policy
This Privacy Policy applies to the NodeOcean corporate website and to correspondence sent to NODE OCEAN LTD through the contact details published on this website.
It does not automatically apply to any app, game, account, subscription, online service, or other product operated by NODE OCEAN LTD. Those services may provide separate privacy notices describing their specific processing activities.
Who we are and how to contact us
NODE OCEAN LTD is the controller of the personal information described in this Privacy Policy. NodeOcean is a brand and trading style used by NODE OCEAN LTD.
- Company number
- 17365732
- Registered office
- 167-169 Great Portland Street, 5th Floor, London, England, W1W 5PF
- Privacy contact
- support@node-ocean.com
Information we collect
We may collect and process:
- contact information, such as your name, email address, company, and role, where you provide it to us;
- the contents of messages, enquiries, attachments, and subsequent correspondence;
- technical and security information, such as IP address, browser type, device information, requested URLs, timestamps, server logs, and security events;
- information provided in connection with a potential business relationship, product enquiry, supplier relationship, or platform partnership; and
- records required to establish, exercise, or defend legal claims and comply with legal obligations.
Our Contact page does not submit a web form to our servers. Selecting an email link may open your own email application. Your email provider will process the message in accordance with its own privacy terms.
You are not legally required to provide personal information when making a general enquiry. However, if you do not provide sufficient contact or contextual information, we may be unable to respond or consider your request.
Purposes and lawful bases
| Processing activity | Purpose | Lawful basis |
|---|---|---|
| General enquiries | Responding and managing company relationships | Legitimate interests |
| Requests relating to a possible contract | Taking steps requested before entering a contract | Pre-contractual steps |
| Website and security logs | Operating, securing, and troubleshooting the website | Legitimate interests |
| Necessary correspondence | Records, fraud prevention, disputes, and legal claims | Legitimate interests or legal obligation |
| Supplier and business contacts | Administering genuine business relationships | Contract, pre-contractual steps, or legitimate interests |
| Compliance disclosures | Lawful requests and applicable legal requirements | Legal obligation |
Our legitimate interests
Where we rely on legitimate interests, those interests include operating and protecting our website, responding to genuine enquiries, maintaining appropriate business records, preventing misuse, and establishing or defending legal claims. We consider whether those interests are necessary and balanced against the rights and interests of the individuals concerned.
International processing and transfers
We use service providers for website hosting, content delivery, security, business email, and related technical support. Depending on the provider, service configuration, and the location from which authorised personnel access company systems, personal information may be processed in the United Kingdom and other countries.
Where personal information is transferred from the United Kingdom to a country not covered by applicable UK adequacy regulations, we use an appropriate transfer mechanism where required. This may include the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or another lawful mechanism, together with appropriate technical and organisational safeguards.
Contact us for further information about the categories of recipients, relevant destinations, and safeguards used for restricted transfers.
How long we keep information
We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including legal, accounting, security, and dispute-resolution requirements.
- general enquiries that do not lead to an ongoing relationship may normally be retained for up to 24 months after the last meaningful communication;
- contract, payment, taxation, or accounting records may be retained for the period required by applicable law, commonly six years or longer where legally necessary;
- routine website and security logs are retained only for the period needed for operation, security, and troubleshooting, unless needed to investigate an incident, misuse, or legal claim; and
- records relevant to a dispute or legal claim may be retained until the matter and applicable limitation period have ended.
We periodically review retained information and delete or anonymise it when it is no longer needed.
Your right to object
Where we process your personal information on the basis of our legitimate interests, you have the right to object to that processing.
If you object, we will stop the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is required for the establishment, exercise, or defence of legal claims.
If we ever use your personal information for direct marketing, you will have an absolute right to object to that use at any time.
Your data protection rights
Depending on the circumstances, you may have the right to:
- request access to your personal information;
- request correction of inaccurate or incomplete information;
- request erasure or restriction of processing;
- object to processing based on legitimate interests;
- request data portability where the legal conditions apply;
- withdraw consent where processing is based on consent; and
- complain to the Information Commissioner's Office.
These rights are subject to legal conditions and exemptions. We may need to verify your identity before responding. To exercise a right, email support@node-ocean.com.
Automated decisions and children
We do not use personal information collected through this website to make solely automated decisions that produce legal or similarly significant effects.
This corporate website is not directed at children, and we do not knowingly seek to collect personal information from children through it. Individual products may be subject to separate age and privacy notices.
Data protection complaints
You can make a complaint about how we have handled your personal information or a data protection rights request by emailing support@node-ocean.com with the subject “Data protection complaint”, or by writing to our registered office.
We will acknowledge receipt of a data protection complaint within 30 days. Without undue delay, we will take appropriate steps to consider and investigate the complaint, keep you informed where appropriate, and tell you the outcome.
We would appreciate the opportunity to address your concern first, but this does not affect your right to complain to the UK Information Commissioner's Office through the ICO complaints service.
Changes to this policy
We may update this Privacy Policy to reflect changes to our services, technology, legal requirements, or processing activities. The updated version will be published on this page with a revised last-updated date. Where appropriate, we may provide additional notice of material changes.