Skip to content

Ideas flow further.

Privacy Notice

Last reviewed: 10 September 2026. This notice explains how Otterian handles personal information when you use this public website and the Otterian services that expressly refer to this notice.

Who we are

Otterian operates this website. Verified statutory company details, when available, are published in the Company information section of our Contact page. A specific Otterian venture or service may identify a different or additional controller where that is appropriate.

For privacy questions, rights requests or data protection complaints, use the contact details published on our Contact page. We will provide a clear route for complaints, acknowledge a data protection complaint within 30 days, investigate it without undue delay, keep you informed where appropriate and communicate the outcome without undue delay.

Legal framework

Our handling of personal information is designed around the UK GDPR, the Data Protection Act 2018 and the changes made by the Data (Use and Access) Act 2025. Cookies and similar device storage or access technologies, and certain forms of electronic marketing, are also subject to the Privacy and Electronic Communications Regulations.

What information we may process

  • Technical and security information, such as IP address, request time, browser or device information, network and security events, and server logs needed to deliver, protect and troubleshoot the service.
  • Correspondence and contact information you choose to provide when you contact Otterian, together with the context needed to respond to you.
  • Venture, membership, entitlement, order or service information where you use a specific Otterian product or service. Additional service-specific privacy information will be provided where the processing materially differs from this notice.
  • Marketing preferences only where marketing is offered and you have made a relevant choice or another lawful basis applies. Service messages and security communications are kept separate from direct marketing.

Why we use personal information

We use personal information only for defined purposes and on an appropriate lawful basis. Depending on the context, those bases may include taking steps at your request or performing a contract, complying with a legal obligation, our legitimate interests in operating and securing our services, or consent where the law requires it.

  • To provide the website and requested service functionality and respond to enquiries.
  • To protect Otterian, our users and our systems, prevent abuse, investigate security events and maintain service reliability.
  • To administer memberships, entitlements, transactions or fulfilment where a particular Otterian venture offers them.
  • To comply with legal, regulatory, accounting and tax obligations, and to establish, exercise or defend legal claims.
  • To send direct marketing only where permitted by the Privacy and Electronic Communications Regulations and data protection law, with the required choice to opt out or withdraw consent.

Sharing and service providers

We may use carefully selected providers for hosting, infrastructure, communications, security, payments, app-store billing, customer support or fulfilment where a service requires them. Each provider should receive only the information needed for its role. Processor relationships are governed by appropriate contractual terms, and a provider that acts as an independent controller is responsible for its own processing.

We may also disclose information where required by law, to regulators or competent authorities, or where reasonably necessary to protect legal rights, users, systems or the public. Any disclosure must remain limited to an appropriate purpose and lawful basis.

International transfers

Some approved service providers may process information outside the United Kingdom. Where a restricted transfer occurs, we use an applicable UK transfer mechanism or other lawful safeguard, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum, together with any required transfer assessment.

How long we keep information

We keep personal information only for as long as it is needed for the purpose for which it was collected, including service delivery, security, dispute handling and legal, accounting or regulatory requirements. Retention periods differ by record type. When a fixed period is not appropriate, we use documented criteria such as the life of the account or service, the age of the record, security need, legal limitation periods and statutory record-keeping duties.

Your rights

Depending on the circumstances and lawful basis, UK data protection law may give you rights of access, rectification, erasure, restriction, data portability and objection, as well as rights relating to certain automated decisions. Where processing relies on consent, you can withdraw that consent without affecting earlier lawful processing.

You have an absolute right to object to personal information being used for direct marketing. We will stop that use when you object, while keeping only the minimum suppression information needed to respect your choice where appropriate.

Children

Where an Otterian online service is likely to be accessed by children, that service must assess the risks and apply age-appropriate privacy protections. A service may set its own minimum age or require parental involvement where the law, platform rules, safety assessment or nature of the service requires it.

Storage technologies and marketing

Cookies, local storage, SDKs and similar storage or access technologies are governed separately by our Cookie & Storage Technologies Policy. Optional advertising or behavioural tracking technologies must not be activated without the consent or other legal condition required by PECR. Direct electronic marketing is governed by PECR and must provide the required choice and a valid way to opt out.

Complaints and the ICO

Please raise a data protection concern with us using the Contact page so that we can investigate it. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection. You can find current complaint information at ico.org.uk.

Changes to this notice

We review this notice when our processing, suppliers, legal responsibilities or services change. Where a change materially affects how we use personal information, we will bring the new information to people's attention before the new processing begins where required.