Privacy Policy

Last updated: 24 June 2026

This Privacy Policy explains how oCobra collects, uses and protects personal data when you visit ocobra.com (the “Site”) or contact us through it. We are committed to handling your data responsibly and transparently.

1. Who we are

oCobra is operated by SideRight Apps, which acts as the data controller for personal data processed through this Site under the data protection law of the United Kingdom.

For any privacy-related questions or requests, you can contact us at contact@ocobra.com.

2. Data we collect

We only collect data you choose to provide, plus limited technical data needed to run the Site:

• Enquiry form data. When you submit the strategic enquiry form, we collect the information you enter — your name, company, email address, enquiry type, indicative offer amount and message.
• Analytics data (Google Analytics). Only if you accept analytics cookies, we use Google Analytics 4 to collect aggregated, pseudonymised usage data such as pages viewed, approximate location (derived from a truncated IP), device and browser type, and referring source.
• Analytics data (Ahrefs Web Analytics). On every visit, regardless of your cookie choice, we use Ahrefs Web Analytics — a cookieless tool that stores nothing on your device and does not collect personal data by default. It reads aggregate signals such as page URL, referrer, approximate country/city-level location derived from your IP address (the raw IP itself is not stored), and browser/device type.
• Technical / server logs. Our hosting provider (Netlify) automatically processes limited technical data such as IP address and user-agent to deliver the Site securely and prevent abuse.

3. How we use your data

• To respond to your enquiry and discuss acquisition, partnership or investment interest.
• To understand how the Site is used and improve its content and performance (analytics).
• To operate, secure and maintain the Site, and to prevent fraud and abuse.
• To comply with legal obligations where applicable.

4. Legal bases (EU/UK GDPR)

• Consent — for Google Analytics cookies and similar technologies (you can withdraw this at any time).
• Legitimate interests — for cookieless analytics (Ahrefs Web Analytics), to respond to enquiries you send us, and to keep the Site secure.
• Legal obligation — where we are required to retain or disclose data by law.

5. Cookies and analytics

We use a cookie consent banner. The Google Analytics script is not loaded at all until you click “Accept”. If you decline or ignore the banner, Google Analytics does not load and no analytics cookies are set. You can change your choice at any time using the “Cookie settings” link in the footer; withdrawing consent disables analytics and removes analytics cookies accessible to the Site. Ahrefs Web Analytics is unaffected by this choice — it runs on every visit because it is cookieless and stores nothing on your device. We also self-host our fonts, so no third-party font service receives your data. For full details, see our Cookie Policy.

6. Sharing your data

We do not sell your personal data. We share it only with service providers that help us run the Site:

• Netlify, Inc. — hosting and form submission processing.
• Google LLC — analytics (only if you accept analytics cookies).
• Ahrefs Pte Ltd — cookieless analytics, on every visit (see above).

These providers act as our processors and may process data outside your country. Where data is transferred internationally, it is protected by appropriate safeguards such as the providers’ Standard Contractual Clauses and equivalent data-transfer agreements.

7. Data retention

We keep enquiry form submissions for up to 24 months after our last correspondence with you, unless you ask us to delete them sooner or we are required to keep them longer by law. Google Analytics user and event data is retained for 14 months, after which it is automatically deleted. Ahrefs does not publish a fixed retention period for Web Analytics data — per its privacy policy, data is kept only as long as necessary for the purpose it was collected for, and the hashing salt it uses to count unique visitors (without storing a persistent identifier) is rotated and deleted every 24 hours.

8. Your rights

Subject to applicable law, you may have the right to access, correct, delete or port your personal data, to restrict or object to processing, and to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, contact us at contact@ocobra.com.

9. Security

We use reasonable technical and organisational measures, including HTTPS encryption in transit, to protect personal data. No method of transmission or storage is completely secure, but we work to safeguard your information.

10. Children

The Site is intended for a business audience and is not directed at children. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date above reflects the latest revision. Material changes will be posted on this page.

12. Contact

Questions about this policy or your data? Email us at contact@ocobra.com.