Data Protection and Security
Draft prepared for review by a qualified legal professional before launch. Last updated: 7 November 2026.
Our approach
We aim to reduce risk through limited access, clear scope and careful handling. No system can be guaranteed completely secure, and OPREVIQ does not claim any security certification.
Access
We ask clients for the minimum access required, using separate staff accounts with limited permissions, never owner-level credentials. Clients can remove access at any time.
Customer information
Clients' customer information is used only to perform the agreed services. We do not use it for our own marketing or share it with third parties except as needed to deliver the service and as agreed with the client.
AI tools
Where AI-assisted tools are used, we only use tools approved by the client for the data involved, and people review sensitive matters.
Website security
This website uses HTTPS, security headers, server-side validation, rate limiting and spam protection on its enquiry form. Enquiry details are not displayed publicly.
Reporting a concern
If you believe you have found a security issue, contact us by email. See /.well-known/security.txt.
Data processing agreements
Where a client's data protection law requires it, we will discuss an appropriate data processing agreement before work begins. Clients should take their own legal advice.