1. Who we are
This Privacy Policy explains how Ostario Group Ltd trading as Ostario Media collects, uses, stores and shares personal information.
Ostario Group Ltd trading as Ostario Media
Registered in England and Wales
Company number: 16819602
Registered office: 86-90 Paul Street, London, EC2A 4NE
Email: info@ostariomedia.com
2. Information we collect
We may collect and use the following types of information:
- Account details, such as name, email address, password authentication data, account status and sign-in activity.
- Business details, such as trading name, company name, Companies House number, business contact details and role or authority information.
- Campaign information, such as campaign names, briefs, budgets, target locations, venue or screen preferences, schedules, notes, proposals, approvals and campaign status.
- Creative files, such as images, videos, artwork, logos, supporting materials and related technical information.
- Messages and support information, including campaign messages, account requests, cancellation requests, deletion requests and correspondence.
- Payment and admin records, such as payment request details, bank transfer references, invoice records, amounts, dates and payment status. We do not collect card details for bank transfer payments.
- Results data, such as plays, reach, spend used, screen time and manually entered campaign result updates.
- Technical and security data, such as IP address, browser type, device information, logs, session information and security events.
3. How we collect information
We collect information when you create an account, submit a brief, upload files, approve proposals, send messages, make payment, use the portal, contact us, or interact with our website. We may also receive information from service providers, third-party platforms, screen networks, media owners or other partners where needed to provide the service.
4. How we use information
We use information to:
- create, secure and manage accounts;
- verify businesses and account authority;
- prepare campaign proposals and screen options;
- review creatives and technical requirements;
- coordinate campaign launch and management;
- prepare payment requests, invoices and payment records;
- enter and show campaign results in the portal;
- send service, account, campaign and support communications;
- handle cancellation, deletion, suspension and support requests;
- protect the website, portal and users from misuse, fraud and security risks;
- maintain legal, accounting, dispute and business records;
- improve the service and fix technical issues.
5. Lawful bases
Depending on the activity, we process personal information because it is necessary to provide the service or take steps before providing the service, because we have a legal obligation, because we have a legitimate interest in operating, securing and improving the service, or because you have given consent where consent is required.
6. Who we share information with
We may share information with:
- hosting, database, authentication, storage and software providers;
- media-buying platforms, screen networks, media owners, venue owners, property owners and other campaign partners where needed to prepare, approve or deliver campaigns;
- professional advisers, accountants, insurers and legal advisers;
- law enforcement, regulators, courts or public authorities where required or permitted by law;
- service providers helping us operate the website, portal, security, support or administration.
We do not sell personal information.
7. International processing
Some service providers may process information outside the United Kingdom. Where required, we use appropriate safeguards such as adequacy decisions, contracts or other lawful transfer mechanisms.
8. How long we keep information
We keep information only for as long as reasonably necessary for the purpose collected, including providing the service, maintaining campaign and payment records, resolving disputes, meeting legal obligations and protecting the service.
If you schedule account deletion, the account is scheduled for deletion after 30 days unless you restore the account before then. After deletion, we may delete, anonymise or restrict access to account information, but may retain records where needed for legal, accounting, dispute, fraud-prevention, campaign-delivery or legitimate business record purposes.
Different records may be kept for different periods. For example, payment, invoice and business records may need to be retained for longer than general account preferences or non-essential uploaded files.
9. Security
We use reasonable technical and organisational measures designed to protect information, including account authentication, access controls, database security rules and private file storage controls. No online service can guarantee absolute security, so you should use a strong, unique password and protect account access.
10. Your rights
Depending on the circumstances, UK data protection law may give you rights to access, correct, erase, restrict or object to processing, and to receive certain information in a portable format. Where processing is based on consent, you may withdraw consent.
You may also complain to the Information Commissioner's Office. We ask that you contact us first at info@ostariomedia.com so we can try to help.
11. Marketing
We do not currently use advertising pixels or behavioural tracking for marketing. If we send marketing emails in future, we will provide a way to opt out where required. Service and administrative messages about your account or campaigns may still be sent.
12. Children
Our service is intended for businesses and organisations. It is not intended for children.
13. Changes to this policy
We may update this Privacy Policy as the service or legal requirements change. The latest version will be published on this page.
14. Contact
Questions about this Privacy Policy or personal information can be sent to info@ostariomedia.com.