Omni Tend Cookie Policy

Effective Date: 22 October 2026

This Cookie Policy explains how Omni Tend Ltd, Company Number: 15219162 uses cookies and similar tracking technologies on our website omnitend.com and our SaaS platform accessed via customer subdomains (e.g., customername.omnitend.io).

This Policy should be read in conjunction with our Website Privacy Policy and SaaS Platform Privacy Policy.


1. What Are Cookies?

Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) when you visit a website. They help websites remember information about your visit, such as your preferences, login state, and browsing activity.

Similar Technologies: This Policy also covers similar technologies including:

  • Local storage: Data stored in your browser for session management
  • Session identifiers: Temporary tokens used to maintain your session
  • Web beacons: Transparent images that track page views
  • Analytics scripts: Code that collects usage information

2. How We Use Cookies

2.1 On Our Marketing Website (omnitend.com)

The marketing website sets only strictly necessary cookies. It sets no analytics, advertising or preference cookies, and it runs no tracking scripts, so it shows no cookie banner.

Strictly Necessary Cookies

These cookies are essential for the website to function and cannot be switched off. They are only set in response to actions you take, such as submitting a form.

Cookie Name Purpose Duration Type
Session cookies Maintain state during form submissions and contact requests Session (deleted when browser closes) First-party
CSRF tokens Prevent cross-site request forgery attacks on forms Session First-party

Server Logs (Not a Cookie)

Our web server keeps a standard access log of each request: IP address, page requested, date and time, browser user-agent string and referring page. Nothing is stored on your device. We read these logs in aggregate to keep the site secure and to see which pages are read, we do not use them to identify or profile visitors, and they are deleted after 14 days. See section 3 of our Website Privacy Policy.

2.2 On Our SaaS Platform (Customer Subdomains)

When you access the Omni Tend platform via your unique subdomain (e.g., customername.omnitend.io), we use:

Strictly Necessary Cookies

These are essential for the platform to operate and provide the service you've subscribed to.

Cookie Name Purpose Duration Type
Session cookies Maintain your logged-in state and session Session (deleted on logout or browser close) First-party
Authentication tokens Securely authenticate your access to the platform Session / Remember Me: 30 days First-party
CSRF tokens Prevent security attacks Session First-party
Security cookies Detect suspicious activity and protect your account Session First-party

Performance and Analytics Cookies (Planned)

We may implement analytics on the platform in the future to improve functionality and user experience. If implemented, these will:

  • Track feature usage and performance
  • Identify bugs and technical issues
  • Improve user experience based on actual usage patterns

We will update this Policy and provide notice before implementing any platform analytics.

2.3 Third-Party Cookies

Loom Video Embeds (Atlassian)

Our tutorials page includes videos hosted by Loom.com (owned by Atlassian). A video loads only when you press play; until then nothing from Loom is loaded and no Loom cookie can be set. When you play a video, Loom may set cookies to:

  • Track video playback and engagement
  • Provide video analytics to Loom/Atlassian
  • Enable video features (quality selection, playback controls)

Third-Party Privacy Policy: Loom's use of cookies is governed by their own privacy policy. We recommend reviewing Loom's Privacy Policy and Atlassian's Privacy Policy.

Control: Pressing play is your choice to load the video. You can also disable third-party cookies in your browser settings, but this may affect video playback.


3. Cookie Categories Under UK PECR and GDPR

We classify our cookies according to UK Privacy and Electronic Communications Regulations (PECR) and GDPR requirements:

Category 1: Strictly Necessary Cookies

Legal Basis: Legitimate interests (GDPR Art. 6(1)(f)) - necessary to provide the service you've requested.

No Consent Required: These cookies are exempt from consent requirements under UK PECR Regulation 6(4) as they are strictly necessary for the provision of an information society service explicitly requested by you.

Examples: Session cookies, authentication, security, CSRF protection.

Category 2: Performance / Analytics Cookies

Not used. Neither the marketing website nor the platform sets analytics cookies. If we introduce platform analytics in future we will update this Policy first and rely on the statistical-purposes exception or ask for consent, as the law then requires.

Category 3: Third-Party Cookies

Legal Basis: Consent (GDPR Art. 6(1)(a) and UK PECR Regulation 6).

Consent Required: Third-party cookies (Loom embeds) are only set after you press play on a video, which is how we ask for your consent.

Control: Browser settings, and simply not playing the video.


4. Managing Your Cookie Preferences

4.1 No Consent Banner

omnitend.com sets only strictly necessary cookies, so it does not show a cookie banner. If you visited before 22 October 2026 and accepted or declined analytics, that choice was kept in your browser's local storage under the name analytics_consent; it is no longer read and you can clear it through your browser settings.

4.2 Browser Settings

You can control cookies through your browser settings:

  • Google Chrome: Settings > Privacy and security > Cookies and other site data
  • Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data
  • Safari: Preferences > Privacy > Cookies and website data
  • Microsoft Edge: Settings > Cookies and site permissions > Cookies and site data

Note: Blocking all cookies may prevent you from using certain features of our website or platform.

4.3 Platform Session Cookies

You cannot disable strictly necessary cookies on the SaaS platform (customer subdomains) as these are essential for the platform to function. Disabling these cookies will prevent you from logging in and using the service.


5. Cookie Retention and Deletion

Cookie Type Retention Period Deletion
Session cookies Deleted when browser closes or logout Automatically deleted
Authentication (Remember Me) 30 days maximum Automatically deleted after expiry
Server access logs (not a cookie) 14 days Automatically deleted by log rotation

Manual Deletion: You can delete cookies at any time through your browser settings. Note that deleting cookies will log you out of the platform and may require you to reconfigure your preferences.


6. Changes to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in our practices, legal requirements, or cookie technologies. We will:

  • Update the "Effective Date" at the top of this Policy
  • Notify you of material changes via email (for platform customers) or a prominent notice on our website
  • Where required by law, obtain fresh consent for new cookie uses

Last Updated: 22 October 2026


7. International Data Transfers

Our cookies are primarily stored on your device (in your browser). However, data collected via cookies may be transmitted to and processed in the following locations:

  • United Kingdom: Our primary data processing location (servers in London)
  • Third-Party Services: Loom/Atlassian (see their privacy policies for transfer safeguards)

Where cookies result in data transfers outside the UK or EEA to countries without adequacy decisions, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses).


8. Your Rights Under UK GDPR

In relation to personal data collected via cookies, you have the right to:

  • Access: Request a copy of personal data collected via cookies
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your data (subject to legal obligations)
  • Object: Object to processing based on legitimate interests
  • Lodge a complaint: Contact the ICO (see Section 10)

To exercise these rights, please contact us at privacy@omnitend.com.


9. Children's Privacy

Our services are intended for business use by individuals aged 18 and over. We do not knowingly collect personal data from children under 18 via cookies or otherwise.

If you believe we have inadvertently collected data from a child, please contact us immediately at privacy@omnitend.com and we will delete such data promptly.


10. Contact Information

For questions about this Cookie Policy or our use of cookies:

Omni Tend Ltd
Company Number: 15219162
Address: 22 Earsham Street, Bungay, Suffolk, United Kingdom, NR35 1AG
Email: privacy@omnitend.com
Data Protection Officer: dpo@omnitend.com

To lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: https://ico.org.uk
Helpline: 0303 123 1113


11. Useful Resources


Last Reviewed: 22 October 2026