Legal

Privacy Policy

Last updated: June 2026

This policy explains what personal data Okapi & Co (South) Ltd collects, why we collect it, how long we keep it, and your rights under UK GDPR and the UK Data Protection Act 2018.

Who we are

Okapi & Co (South) Ltd — registered in England and Wales. Director: Jim Chetwode. Registered office: Hawthorn Cottage, Gold Hill, Child Okeford, Dorset, DT11 8HF. Contact: jim@okapiandco.co.uk · 07824 157730.

We are the data controller for personal data collected through this website.

What data we collect and why

Contact form enquiries

When you complete the contact form we collect your name, email address, phone number (optional), and the message you write. We use this to respond to your enquiry.

  • Legal basis: Legitimate interests — responding to a direct business enquiry.
  • Retention: We keep enquiry data for up to 2 years, then delete it.

Analytics cookies (Google Analytics 4)

With your consent, we use Google Analytics 4 to collect anonymised data about how visitors use this site — pages visited, time on page, traffic source. This helps us improve the site. No analytics cookies are set until you accept via the cookie banner.

  • Legal basis: Consent (PECR / UK GDPR Art. 6(1)(a)).
  • Retention: GA4 data is retained for 14 months in Google Analytics, then automatically deleted.
  • Data processor: Google LLC. Data may be transferred outside the UK under Google's Standard Contractual Clauses.

You can withdraw consent at any time by clearing your cookies and declining the banner on your next visit. You can also opt out of Google Analytics site-wide at tools.google.com/dlpage/gaoptout.

Email delivery

Contact form submissions are delivered by Resend (Resend, Inc.), a transactional email service. Resend processes your name and email address to route the message to us. Data is not used for any other purpose.

Cookies

We set one first-party cookie to remember your consent choice (okapi_cookie_consent). This cookie contains only the word “accepted” or “declined” and expires when you clear your browser storage. No other cookies are set unless you accept analytics.

If you accept analytics, Google Analytics sets its own cookies (_ga, _ga_*) which persist for up to 2 years. These are used to distinguish visitors and sessions.

Who we share data with

We do not sell or rent your data. We share it only as needed to run this service:

  • Resend — transactional email delivery (contact form)
  • Google LLC — analytics, if consented
  • Vercel Inc. — website hosting (server logs may contain IP addresses; retained for up to 30 days)

Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Rectification of inaccurate data
  • Erasure (“right to be forgotten”)
  • Restrict processing in certain circumstances
  • Data portability where processing is based on consent
  • Object to processing based on legitimate interests
  • Withdraw consent at any time (does not affect lawfulness of prior processing)

To exercise any of these rights, email jim@okapiandco.co.uk. We will respond within 30 days.

Complaints

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113. We would appreciate the chance to address concerns directly first.

Changes to this policy

We may update this policy when our practices change. The “Last updated” date at the top of this page shows when it was last revised. Significant changes will be noted here.