Privacy Policy

1. Introduction

Welcome to LatchNow, a product of Ombiy ("we," "us," "our"). We are committed to protecting and respecting your privacy when you use our website at https://www.latchnow.io/ (the "Site"), services, products, and any related interactions (collectively, the "Services").

This Privacy Policy explains:

• What personal data we collect,
• How and why we use it,
• With whom we share it,
• Your rights and choices regarding your personal data.

This policy is provided for your information. It describes how we handle personal data — it is not a contract you are asked to agree to, and where the law requires your consent we will ask for it separately.

2. Who We Are

LatchNow is a product of Ombiy and this Site is operated by Ombiy Limited, a company incorporated in England & Wales (Company No. 11897938).

Ombiy Limited is the data controller for the personal data described in this policy. For any data protection question, or to exercise the rights set out in section 10, contact us at hello@latchnow.io.

3. Information We Collect

We may collect personal data that you provide directly or that is generated automatically when you interact with our Site or Services.

Personal Data You Provide

Examples include:

• Name, job title, and company name
• Email address and phone number
• Anything you choose to tell us when asking for a demo or getting in touch

The Site itself contains no forms and no user accounts, and collects nothing from you directly. Its "Book a demo" and contact buttons are email links that open your own email app. This data reaches us only when you:

• Email us at hello@latchnow.io
• Contact us by email or post using the details on the Site
• Opt in to receive updates or marketing from us

Technical Data

The Site is a set of static pages hosted on AWS Amplify. As with any website, our hosting provider records standard server logs when a page is requested, which include:

• IP address and browser or device information,
• The page requested, and the date and time of the request.

The pages of the Site, including their text and images, are served by that hosting provider. The one exception is our Media Centre, whose articles and resources we manage in a content management service, Sanity. When you open a Media Centre page, its images are delivered from Sanity's content delivery network (cdn.sanity.io), and so is a PDF if you choose to open or download one. Sanity records the same kind of standard request logs when your browser fetches these files. No cookies are set by these requests.

These logs exist to deliver the Site, keep it secure, and diagnose faults. They are held by the providers concerned and are not combined with any other data to build a profile of you.

The fonts used on the Site are served from the Site itself, so no request is made to Google Fonts or any other font service.

Analytics Data (only with your consent)

Where analytics is switched on for the Site, we ask for your permission in a cookie banner. If you accept analytics cookies, we use Google Analytics 4 to collect information about how you use the Site: pages viewed, how you arrived (for example, a search engine or campaign link), your approximate location (country or city, estimated from your IP address, which is not stored), your device and browser type, and actions such as Media Centre searches and filters, file downloads, video plays and clicks on our "Book a demo" email links.

We use this only in aggregate to improve the Site and its content. We have not enabled Google Signals or advertising features, and we do not use it to identify you. If you reject analytics or make no choice, none of this is collected. See our Cookie Policy for the full detail.

4. How We Use Your Data

We use your personal data for purposes such as:

Providing Services & Support

• Responding to your inquiries and requests
• Arranging and delivering demos you have asked for
• Sending updates and product communications

Operational Purposes

• Improving our Site and Services
• Keeping the Site available and secure, and diagnosing faults

Marketing (with consent where required)

• Sending newsletters or promotional messages
• Where you have opted in to receive them

Legal Compliance

• Complying with applicable laws and regulations

5. Legal Bases for Processing (UK GDPR)

We process your personal data based on one or more of the following:

• Contractual necessity: To perform services you request.
• Legitimate interests: To improve services and protect our systems.
• Consent: Where you have agreed (e.g., newsletters, or analytics cookies on the Site). You can withdraw consent at any time.
• Legal obligation: To comply with applicable law.

6. Cookies and Tracking Technologies

The only cookies we set are Google Analytics cookies, and only if you accept them in our cookie banner. You can change your choice at any time using the "Cookie settings" link in the footer. We do not use advertising or social media tracking technologies.

Third-party cookies can otherwise only be set if you take a deliberate action that loads a third-party service — choosing to load the Google Map on our About page, or pressing play on a video (videos, most of them in our Media Centre, are hosted by YouTube or Vimeo). Neither is loaded until you ask for it.

Our Cookie Policy sets out each of these cases in full. You can also control or disable cookies through your browser settings.

7. Sharing and Disclosure

We may share your data with:

Service Providers

Third-party partners who help us operate the Site and respond to you — currently our hosting provider (AWS Amplify), our content management provider (Sanity, which delivers the images and downloadable documents in our Media Centre), our email provider, and, only if you accept analytics cookies, our analytics provider (Google Analytics). If you choose to load the map or play a video, Google (Maps and YouTube) or Vimeo receives the request your browser makes to it. We do not share your data with advertising providers.

Legal Requirements

If required by law, court order, or government authority.

Business Transfers

If Ombiy undergoes a merger, acquisition, or sale of assets, personal data may be transferred.

We do not sell your personal data.

8. Data Security

We implement technical and organisational measures to protect personal data from unauthorised access, disclosure, or alteration.

Ombiy operates an Information Security Management System (ISMS) that is certified to ISO/IEC 27001, providing independent assurance of the controls we apply to information security.

However, no internet transmission is 100% secure, and we cannot guarantee absolute protection.

9. Data Retention

We retain your data only as long as necessary:

• To provide services,
• To comply with legal obligations,
• For legitimate business purposes.

Retention periods depend on the type of data and how it was collected. Google Analytics data is kept for 14 months.

10. Your Rights

Depending on applicable law, you may have rights including:

• Accessing the personal data we hold,
• Correcting inaccurate data,
• Requesting deletion,
• Restricting processing,
• Objecting to processing,
• Withdrawing consent (where applicable).

To exercise your rights, please contact us using the details below.

11. International Transfers

If personal data is transferred outside the UK/EEA, we will ensure appropriate safeguards are in place. For example, Google (analytics, maps and YouTube), Vimeo, Amazon Web Services (hosting) and Sanity (Media Centre images and documents) may process data in the United States, and we rely on the safeguards those providers offer for such transfers, such as certification under the EU-US Data Privacy Framework and its UK Extension or standard contractual clauses.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top will reflect changes.

We encourage you to review this page from time to time. If we ever begin processing your data in a way that requires your consent, we will ask for it before we start rather than relying on your continued use of the Site.

13. Contact Us

For privacy questions or to exercise your rights:

Email: hello@latchnow.io