Last updated: June 23, 2026
1. Introduction
OM Technology ("OMTech," "we," "us," or "our") is committed to protecting and respecting your privacy. This Privacy & Cookies Policy explains how we collect, process, use, and safeguard personal data when you visit our website (om-technology.com), use our white-label platforms, or interact with our services.
OMTech provides technology solutions for the financial services industry, including white-label trading platforms, CRM systems, back-office solutions, websites, and landing pages. This policy applies to all visitors, prospective clients, and existing clients of OMTech.
Data Controller: OM Technology, with its registered office at Dubai, United Arab Emirates. For any data protection inquiries, you may contact us at privacy@om-technology.com.
OMTech has not appointed a Data Protection Officer (DPO) as our processing activities do not require one under Article 37 of the GDPR. All data protection inquiries should be directed to the contact details provided in Section 13 of this policy.
By using our website or services, you acknowledge that you have read and understood this policy. If you do not agree with the practices described herein, please discontinue use of our website and services.
2. What Personal Data We Collect
2.1 Data You Provide Directly
We collect personal data that you voluntarily provide when you interact with us, including but not limited to:
- Contact Information: Full name, email address, phone number, and company name when you fill out contact forms, request a demo, or submit inquiries.
- Account Credentials: Login details (username and password) when you create an account or access our client platforms.
- Business Information: Company details, job title, and industry information provided during onboarding or partnership discussions.
- Communication Records: Messages, emails, and correspondence you send to us through our contact forms, email, Telegram, or other communication channels.
2.2 Data Collected Automatically
When you visit our website, we automatically collect certain technical data through cookies, server logs, and similar technologies:
- Technical Data: IP address, browser type and version, operating system, device type, screen resolution, and time zone settings.
- Usage Data: Pages visited, time spent on each page, click patterns, referral source (the website you came from), and navigation paths through our site.
- Location Data: Approximate geographic location derived from your IP address.
- Cookie Data: Information stored through cookies and similar tracking technologies (see Section 7 below).
2.3 Data from Third-Party Sources
We may receive personal data from third-party sources, including:
- Analytics Providers: Google Analytics and similar services that provide aggregated and individual user behavior data.
- Advertising Platforms: Facebook Pixel, Google Ads, and other marketing platforms that track campaign interactions.
- Publicly Available Sources: Business information from public databases, LinkedIn, or company websites.
2.4 Data We Do Not Collect
We do not intentionally collect special categories of personal data, including data relating to racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, health information, or criminal convictions. If such data is inadvertently provided to us, we will promptly delete it.
3. How We Use Your Personal Data
We process your personal data for the following purposes:
- Service Delivery: To provide, operate, and maintain our technology solutions, platforms, and related services.
- Communication: To respond to your inquiries, provide customer support, and send service-related notifications.
- Marketing: To send promotional materials, newsletters, product updates, and relevant offers (only with your prior consent). You may opt out of marketing communications at any time.
- Analytics & Improvement: To analyze website usage patterns, measure the effectiveness of our content and marketing campaigns, and improve our website and services.
- Remarketing: To serve targeted advertisements through platforms such as Google Ads and Facebook based on your previous interactions with our website.
- Security: To protect the security and integrity of our website, platforms, and systems, and to detect and prevent fraud or unauthorized access.
- Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests.
- Business Operations: To manage our relationship with you, process transactions, and administer our client accounts.
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: Where you have given us explicit consent to process your data for specific purposes (e.g., marketing communications). You may withdraw your consent at any time.
- Contractual Necessity: Where processing is necessary for the performance of a contract with you, or to take steps at your request prior to entering into a contract.
- Legitimate Interests: Where processing is necessary for our legitimate business interests (e.g., improving our services, website analytics, fraud prevention), provided these interests are not overridden by your rights and freedoms.
- Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject.
5. Data Sharing & Disclosure
We do not sell, rent, or trade your personal data. We may share your data with the following categories of recipients:
- Service Providers: Trusted third-party vendors who assist us in operating our website and services, including hosting providers, email delivery services, analytics platforms, and CRM tools. These providers are contractually obligated to protect your data and use it only for the purposes we specify.
- Analytics & Advertising Partners: Google Analytics, Google Ads, Facebook, and similar platforms for website analytics, remarketing, and advertising optimization.
- Legal & Regulatory Authorities: When required by law, regulation, court order, or governmental request, or when necessary to protect our rights, property, or safety.
- Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your data may be transferred to the successor entity.
- Professional Advisors: Legal counsel, auditors, and consultants who require access to personal data to provide their services to us.
6. Data Security
We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit and at rest.
- Secure server infrastructure with firewalls and intrusion detection.
- Access controls limiting data availability to authorized personnel only.
- Regular security assessments and vulnerability testing.
- Employee training on data protection and security practices.
While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to maintaining the highest practical standards.
7. Cookies & Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver targeted content. A cookie is a small text file placed on your device when you visit our website.
7.1 Types of Cookies We Use
- Strictly Necessary Cookies: Essential for the website to function properly. These cookies enable core features such as page navigation, secure area access, and login session management. They cannot be disabled without impacting site functionality.
- Preference Cookies: Allow the website to remember choices you make (such as language, region, or display preferences) to provide a more personalized experience.
- Analytical / Performance Cookies: Collect information about how visitors use our website, including which pages are visited most frequently, time spent on pages, and any error messages encountered. We use Google Analytics and similar tools for this purpose. These cookies help us improve the performance and usability of our website.
- Marketing / Promotional Cookies: Used to track visitors across websites and display relevant advertisements. These cookies are set by third-party advertising platforms (such as Google Ads and Facebook Pixel) and help us measure the effectiveness of our marketing campaigns.
7.2 Cookie Consent
When you first visit our website, you will be presented with a cookie consent banner that allows you to accept or decline non-essential cookies. Only strictly necessary cookies are set before you provide your consent. Analytical, preference, and marketing cookies are activated only after you have given your explicit consent.
You can change your cookie preferences at any time by clicking the "Cookie Settings" link in the footer of our website.
7.3 Managing Cookies via Browser
In addition to our cookie consent tool, you can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of our website and limit your user experience.
Common browser cookie management links:
- Google Chrome: Settings > Privacy and Security > Cookies
- Mozilla Firefox: Settings > Privacy & Security > Cookies
- Safari: Preferences > Privacy > Manage Website Data
- Microsoft Edge: Settings > Cookies and Site Permissions
7.4 Third-Party Cookies
Some cookies are placed by third-party services that appear on our pages. We do not control the operation of these cookies. The relevant third party is responsible for how they use the data they collect. Please refer to the privacy policies of these third parties for more information on their data practices.
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. The specific retention periods depend on the type of data:
- Contact Form Submissions: Retained for 2 years from the date of submission, after which they are deleted unless a business relationship has been established.
- Client Account Data: Retained for the duration of the service agreement plus 5 years to comply with legal, accounting, and regulatory obligations.
- Marketing & Communication Data: Retained until you withdraw your consent or unsubscribe, after which data is deleted within 30 days.
- Website Analytics & Cookie Data: Retained for up to 26 months in accordance with analytics provider retention settings.
- Server Logs & Technical Data: Retained for up to 12 months for security and performance analysis purposes.
When personal data is no longer required, we will securely delete or anonymize it. If deletion is not possible (for example, because data is stored in backup archives), we will isolate and protect the data from further processing until deletion is possible.
9. Your Rights
Depending on your jurisdiction and applicable data protection laws, you may have the following rights regarding your personal data:
- Right of Access: You have the right to request a copy of the personal data we hold about you and information about how it is processed.
- Right to Rectification: You may request correction of any inaccurate or incomplete personal data.
- Right to Erasure: You may request deletion of your personal data under certain conditions (e.g., when the data is no longer necessary for the purpose it was collected).
- Right to Restrict Processing: You may request that we limit how we use your personal data in certain circumstances.
- Right to Object: You may object to the processing of your personal data where we rely on legitimate interests as our legal basis.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another organization.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
- Right Regarding Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. OMTech does not currently use automated decision-making or profiling in relation to website visitors or clients.
- Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or place of the alleged infringement if you believe that our processing of your personal data infringes the GDPR or applicable data protection laws.
To exercise any of these rights, please contact us using the details provided in Section 13 below. We will respond to your request within 30 days of receipt. If your request is complex or we receive a high volume of requests, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reasons for it within the initial 30-day period.
10. International Data Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When such transfers occur, we ensure that appropriate safeguards are in place to protect your data in accordance with the GDPR, including:
- Adequacy Decisions: Transferring data to countries that the European Commission has determined provide an adequate level of data protection.
- Standard Contractual Clauses (SCCs): Using EU-approved standard contractual clauses with recipients in countries without an adequacy decision.
- Other Safeguards: Implementing additional technical and organizational measures where necessary to ensure the security of your data during transfer.
You may request details of the safeguards in place for specific transfers by contacting us using the details in Section 13.
11. Third-Party Links
Our website may contain links to third-party websites, platforms, or services that are not operated or controlled by OMTech. We are not responsible for the privacy practices, content, or security of any third-party websites. We encourage you to review the privacy policies of any third-party sites before providing personal information or using their services.
12. Changes to This Policy
We reserve the right to update or modify this Privacy & Cookies Policy at any time. Any changes will be effective immediately upon posting the revised policy on this page with an updated "Last updated" date. We encourage you to review this policy periodically to stay informed about how we protect your data. Your continued use of our website and services after any changes constitutes acceptance of the updated policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy & Cookies Policy, your personal data, or our data protection practices, please contact us: